1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Why such high bandwidth usage - network compromised?

Discussion in 'Networking' started by KTBFFH, Jan 24, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    I exceeded my Rogers bandwidth usage this month - first time.
    On checking daily usage some days were over 5gb.
    We do not appear to be using the internet any differently than usual.
    Could my network have been compromised?
    I installed Net Meter and Networx this weekend.
    Usage reports show, for example
    Sunday:
    03 - 04am download 1.14gb upload 126mb
    12:00 - 13:00 dl 9.69mb ul 450mb
    21:00 - 22:00 dl 8.28mb ul 689 mb

    One other pc has similar examples.

    I have a home network.
    dlink dir655 router.
    1 wired pc 3 wireless pc
    password protected

    What can I do to check if my network has been compromised?
    What steps should I take now just in case?

    Any suggestions, advice well and truly welcomed.
    Thanks in advance.
     
  2. prunejuice

    prunejuice

    Joined:
    Apr 2, 2002
    Messages:
    3,432
    Are you uploading and downloading torrents?
     
  3. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    No.
    Additional note:
    at home today and been investigating.
    According to Networx I have uploaded 2,25gb of data in the last 1.5 hours.
    This is very concerning - what to do?
     
  4. cwwozniak

    cwwozniak Trusted Advisor Spam Fighter

    Joined:
    Nov 28, 2005
    Messages:
    63,032
    First Name:
    Chuck
    Are you running any kind of up-to-date anti-virus and/or Internet security application?
     
  5. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    Yes. Bitdefender.
    Last run a full system scan Jan 23. No issues.
    This is scheduled to run nightly and has on a regular basis for sometime now.
     
  6. onca

    onca

    Joined:
    Jan 19, 2011
    Messages:
    22
    Change your routers' password and set the security protocol to WPA2. You might also want to disable SSID broadcast in the router settings.
     
  7. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    Router password changed yesterday and running wpa2.
    Haven't done the ssid thing yet.
    Update:
    for the last hour we could not get access to the internet.
    I could still sign into the router.
    I shutdown my PC (the wired one on the network) and we are able to get access with 2 of the wireless PCs, but slow.
    Not sure if that was a coincidence or not.
    Is it possible that my PC has been compromised and is causing issues?
     
  8. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    Thanks for the replies so far they are appreciated.
    I had become a little self absorbed with this problem..
    I need access for work and my wife is doing a masters online and needs internet access too.
    Apologies and thanks again.
     
  9. cwwozniak

    cwwozniak Trusted Advisor Spam Fighter

    Joined:
    Nov 28, 2005
    Messages:
    63,032
    First Name:
    Chuck
    That is a very good possibility. You could try posting a HijackThis report for the computer in the TSG Virus and Malware Removal forum and member qualified in such matters will help you out. It may take while to get response. Just follow the instructions in the "must read" sticky on what information needs to be posted.
     
  10. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    I will try that.
    I have run malwarebytes and spybot and bitdefender with no issues and am running eset online right now.
    If my PC has been compromised:
    could software have been installed and run, that would not be picked up by by scans, that could cause these large downloads and uploads?
    Is there anyway to discover more about these downloads and uploads (either on the PC or in the router)?
    If it is on the PC side would changing passwords on the router make any difference?
    If there is no malicious software found but activities continue would a system restore be advisable or a reformat?
    Thanks in advance.
     
  11. Couriant

    Couriant Trusted Advisor

    Joined:
    Mar 26, 2002
    Messages:
    33,623
    First Name:
    James
    If your bandwidth is that much, double check to see if that is internet use. If it is your ISP should be able to see the bandwidth in use and what you can do is turn off one computer at a time and see if any of those is using the bandwidth
     
  12. KTBFFH

    KTBFFH Thread Starter

    Joined:
    Sep 28, 2006
    Messages:
    50
    Another download on the wired PC again this morning.
    Same details as before:
    03 - 04am download 1.14gb upload 126mb.


    Any way I can track this or find where the data maybe stored?
    Any logs or settings in the router that can be used?

    I noticed this morning that when I tried to open Firefox I got the message that it was open and I need to close it or reboot in order for it to open for me.
    Checking in processes there did not appear to be an instance running.

    The bandwidth usage appears to peaking at specific times and location (wired PC) rather than based on general usage spread out over usage times. I have been monitoring the 3 wireless PCs and no significant usage over the last couple of days.

    Thanks
     
  13. cwwozniak

    cwwozniak Trusted Advisor Spam Fighter

    Joined:
    Nov 28, 2005
    Messages:
    63,032
    First Name:
    Chuck
    What versions of Windows are running on the different affected computers?
     
  14. DoubleHelix

    DoubleHelix Banned

    Joined:
    Dec 9, 2004
    Messages:
    24,388
    The most obvious answer is usually the correct one. You said "we". How many people are in your household, and are any of them teenagers? It's far more likely that someone is not fessing up to actual usage. Your computer can't download anything between 3am and 4 am if it's off. So someone's computer is on and downloading files.
     
  15. TerryNet

    TerryNet Moderator

    Joined:
    Mar 23, 2005
    Messages:
    78,267
    First Name:
    Terry
    Search for files created around that time.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/976687

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice