Massive Unattended Internet access on my PC :/

Kale · Post by **Kale** » Sat Apr 30, 2005 7:44 pm

I have a strange problem and looking for a bit of advise. Basically something is using my Internet connection and i don't know what it is. The net access is using between 60-80Kbps which is about 60-70% of my 1Mbit connection and my bandwidth monitor is going bonkers!!! I've tracked it down to an app named 'Generic Host Process for Win32 Services' in Zonealarm. If i disable net access for this app the connection goes quiet. Any ideas what is going on? or what the above app does? Thanks.

thefool · Post by **thefool** » Sat Apr 30, 2005 8:11 pm

ok are you SURE that is the program using the internet? Most common bug with it is when it uses 100% cpu.. please try http://www.netlimiter.com/ and see if that shows another process.
Also check Startup programs and services running (use msconfig wich is ok for that job. be sure to tick "Hide all microsoft services" in the "services" page..)

some viruses tries to hide as this process and specifying the process title doesnt resolve this. You need the exact exe file to determine if its a virus or anything bad.

edit: info about what this program is doing: http://www.neuber.com/taskmanager/proce ... t.exe.html

see your task list if you have something like SCVHost.exe running (its common for viruses to have names that is nearly like the real process name, svchost.exe).

MrMat · Post by **MrMat** » Sat Apr 30, 2005 8:36 pm

Maybe it is downloading a windows update in the background?

thefool · Post by **thefool** » Sat Apr 30, 2005 9:48 pm

are you sure that generic host process does that??

okay but to check that: control panel -> automatic updates -> tick "Notify about new updates, but dont download or install them automatically". if it stops it probaly was that

MrMat · Post by **MrMat** » Sat Apr 30, 2005 10:02 pm

I'm not sure but looking through the services it looks like "Background Intelligent Transfer Service" handles Windows Updates. Services show up as svchost/generic host process so it could be that.

thefool · Post by **thefool** » Sat Apr 30, 2005 11:06 pm

yup but it could be a virus installed as soruce too. i would as mr.mat says disable automatic updates. if it doesnt stop, take a look with Msconfig in the startup & services section.

Kale · Post by **Kale** » Sun May 01, 2005 7:41 pm

Seems to have stopped now

I checked auto update and its off. Very strange. thanks for the replies guys.

Post by **flaith** » Sun May 01, 2005 7:48 pm

Next time, try NetView
link : http://www.killprog.com/