How can I find out what is using all of my upload bandwidth?


Recommended Posts

Something is randomly using all of my upload bandwidth, which makes my connection crawl.

I do not have spyware, adware or a virus.

How can I find out what process is doing this?

EDIT: This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Windows 7 x64 SP1.

EDIT: I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

  On 24/07/2011 at 13:14, Hum said:

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Maybe I should call Sky Broadband, it could be an issue on their end (i.e. a co-incidence).

  Quote
I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

  • Like 2
  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the attitude.

There is no attitude. It's very true. Just because I find it very easy to avoid getting rootkits, spyware, adware or viruses, it doesn't mean I know what software you guys recommend to discover what processes are using my bandwidth. I know that NetLimter can tell me what processes are using my bandwidth but in case that program is calling this issue, I am of course reluctant to re-install it.

The reason I know it's not a rootkit is because I doubt very much it's a co-incidence that NetLimiter was installed/uninstalled an hour before this issue occurred.

For ****s and giggles, I'll run Sophos Anti-Rootkit.

  On 24/07/2011 at 13:29, Detection said:

I think the clue is in the name "NetLimter "

Sounds like it has left something behind after the uninstall

That is not logical. The program was used to stop Firefox using all of my 130 KB/s upload bandwidth. I used it to limit Firefox to using a maximum of 95 KB/s in upload bandwidth. I then uninstalled it as, even though it worked, I decided just to go ahead and let Firefox do what it wishes.

So why would that program, installed or not, be doing this to my connection...?

EDIT: Sophos Anti-Rootkit found nothing suspicious. As expected.

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

  On 24/07/2011 at 13:36, Detection said:

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

It does install a service but from what I can tell, there appears to be no related services on my computer :/

  On 24/07/2011 at 13:36, _DP said:

Do you get the same issue with other browsers?

This is happening system-wide. For example, I can be playing a game fine then a few seconds later, I get 900 ping before getting kicked. It's then that I realize something was uploading using all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds.

If your looking to track what process is using upload, you could run tcpview http://technet.microsoft.com/en-us/sysinternals/bb897437

You could run wireshark as well - great FREE protocol analyzer http://www.wireshark.org/ to see what is actually being put on the wire, etc. but what show you what process did it, just what is being done.

Or you could put netlimiter back on ;) It shows you what is using bandwidth heeheheh

I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

I wasn't trying to be douchey earlier when I said it's not difficult to avoid getting rootkits, spyware, adware or viruses, it just really is easy to avoid them in my opinion :s Stick to legitimate websites, check comments when downloading torrents, keep your Windows and MSE up-to-date, don't start using dodgy Facebook apps etc. and you will be fine!

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

  On 24/07/2011 at 13:45, BudMan said:

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

I am not sure. The ping issues were due to an problem at the local LLU according to Sky Broadband and when they said it would be fixed in about 30 minutes, they were right!

Sounds like a common sense solution.. the program you installed which was "NetBalancer" has screwed with Winsock... you need to reset this.

Open up command prompt.... and type the following just as I've put it spaces and all:

netsh winsock reset catalog - Hit Enter

netsh int ip reset reset.log hit - Hit Enter

Now Reboot and test again.

Even if you think your problem is solved don't put that junk netbalancer back on there..its nothing but a sandbox and useless...control your bandwidth or monitor it using your router. Run these reset lines to get Windows7 winsock stacks back to default the way its supposed to be if anything did in fact alter it.

  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

Actually with most home routers it's not that easy to get per device bandwidth usage data.

Even the ones that allow collecting the data via something like SNMP usually only go down to the port level, which is no good in the case of wireless or if there's a switch further upstream of that port.

"I am not sure. The ping issues were due to an problem at the local LLU"

And are you still seeing an upload of 130 when your not doing anything?

And I agree with xbamaris the resource monitor in w7 is perfect tool for looking this up, not sure why I forgot it other than just habit from older windows versions not having the ability to look at this. But yes that is the best suggestion for looking to see what is uploading.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Surface Copilot+ PCs coming to classrooms from July 22, turbocharged with on-device AI by Paul Hill Microsoft has announced that it’s launching the new Surface Pro 12-inch and Surface Laptop 13-inch models specifically for education customers from July 22. The Redmond giant said that these devices are being launched as a direct response to feedback from educators who want practicality and ease of use in their diverse classrooms. These are both Copilot+ PCs so teachers and students will be able to leverage the latest AI features thanks to the dedicated Neural Processing Units (NPUs) that allow for on-device AI. The on-device AI, aside from delivering well-known features like Recall, will enable new education features such as a new app Microsoft is working on called Microsoft Learning Zone. Microsoft Learning Zone will allow teachers to create personalized lessons by adapting content from trusted sources like OpenStax, generating interactive games with Kahoot, and tracking students progress. Microsoft expects this to help teachers save time and deliver a more flexible and engaging classroom. Another AI feature that will be available is Click to Do. This lets students highlight text or images and get contextual help. It can be used to summarize a paragraph or explain a graph. To activate it, students can press the Windows key and click. This feature runs entirely on device so inputs to the AI are secure and you don’t need to ever worry about third-parties seeing. Finally, these devices will also have accessibility features such as Voice Access which lets you navigate with speech and Live Captions which provide real-time subtitles and translations for spoken content. These make the devices more inclusive for students with disabilities. Regarding security, these laptops come with the Microsoft Pluton security chip directly integrated into the processor for protecting sensitive data. It can protect data such as passwords and sign-ins, even if your device is stolen. Thanks to automatic Windows Updates, schools never need to worry about falling behind on updates either. With the impending demise of Windows 10 in mid-October, these Surface devices arrive just in time for schools looking for somewhere to upgrade to. Aside from AI features and security, Microsoft is also pushing other key features including easy repair with replacement components at the Microsoft Store and iFixit, their lightweight design and all-day battery life making them ideal for carrying and surviving the school day, and their compatibility with popular education apps such as TestNav, Google Classroom, Minecraft Education, and Adobe Express.
    • Taras Buria, do you think you could write more about Windows Vista? It is always such a pleasure — quite a pleasure — to see it mentioned in the title of a news article. What about an editorial?
  • Recent Achievements

    • Rising Star
      Phillip0web went up a rank
      Rising Star
    • One Month Later
      Epaminombas earned a badge
      One Month Later
    • One Year In
      Bert Fershner earned a badge
      One Year In
    • Reacting Well
      ChrisOdinUK earned a badge
      Reacting Well
    • One Year In
      Steviant earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      545
    2. 2
      ATLien_0
      205
    3. 3
      +FloatingFatMan
      170
    4. 4
      Michael Scrip
      149
    5. 5
      Som
      131
  • Tell a friend

    Love Neowin? Tell a friend!