there's some traffic my computer i can't know from where !

[Super001]

hello everyone

i got a problem in my laptop , i'm using Windows 7

there's some download from my computer i can know it from the DU METER (program)

so,what is the way to know what this traffic from ? and how to stop it

becuause all my apps r stopped ,and no Updates !

Thanks

 

[richc46]

Run a full antivirus scan

Download and run malwarebytes. Run full scan about 90 minutes and update malwarebytes first. Sounds like trouble.

http://www.malwarebytes.org/mbam.php

 

[Super001]

i have Bitdefender antivirus ,and Malwarebytes

but they found nothing when i did the full scan

btw ,i used a program called (NBMonitor ) nETWORK Bandwith Monitor ,and it anlyse all the traffic
and i could find an IP Adress doing this traffic ! but i couldnt stop it !! ,it just gone when i restrted my computer!

so ,how can i do that ? like delete the program , file ,trojan !

Thanks

 

[Super001]

so i need more Pro application that could show all traffic ! and stop the application or the thing i don't want

like the Network Monitor in KIS

 

[richc46]

Get a good firewall

 

[Super001]

Get a good firewall

like which 1 ?

 

[richc46]

Good question.

The best for me is the combo of
Microsoft security essentials (ant virus) malwarebytes and the windows fire wall. There are others but mostly cause problems. No computer problems with my combination.

 

[Super001]

so i think i need 2 turn the windows firewall on

 

[richc46]

No

Security Essenatils comes with the Windows Firewall
Everyone should use malwarebytes.


Thats all you need. Uninstall any other protection.

 

[Super001]

No

Security Essenatils comes with the Windows Firewall
Everyone should use malwarebytes.


Thats all you need. Uninstall any other protection.

so u think i have 2 unistall Bitdefender ,and just use Security Essenatils

and firewall is on ,but never asks me about apps ,cuz i think i have put notifications to minimun before !

 

[Barman58]

Have a look at the output from process monitor from sysinternals

Process Monitor

or install Comodo firewall and check the live stats on I/O and block the ones you don't want

Firewall Antivirus Software Free Download from Comodo™

 

[Super001]

Have a look at the output from process monitor from sysinternals

Process Monitor

or install Comodo firewall and check the live stats on I/O and block the ones you don't want

Firewall Antivirus Software Free Download from Comodo™

Thanks i'll give a try

 

[richc46]

You can keep what you have and there are a lot of other free firewalls, I just gave you what I think is best.

Here is our list of free software.
Comodo is a good firewall
http://www.sevenforums.com/software/92-free-great-programs-windows-7-a.html

 

[Super001]

i have question

can i use the comodo while using the bitdefender ,cuz both r antiviruses ?

 

[richc46]

I would not use both at the same time. Use Comodo Anti Virus and firewall if that makes you comfortable. I prefer Security Essentials, Malwarebytes and the Windows Firewall, however.
Whatever your decision, use Malwarebytes.

 

[Nem]

From another thread i posted in.


Anti-Virus:

These two are the most recommended

* Microsoft Security Essentials (link)
* Avast Free Edition (link)

Firewalls:

* Windows Firewall
* Comodo Firewall (link) - Free

* Online Armor (link) - Free/Paid
* PC Tools Firewall (link) - Free
* Outpost Firewall (link) - Paid


Extra Security:

* MalwareBytes Anti-Malware (link) - Free/Paid
* SuperAntiSpyware (link) - Free/Paid
* Hitman Pro (link) - Paid
* Sandboxie (link) - Free/paid

Remember, Use one Anti-virus i recommend uninstalling bit defender and using of one the 2 listed above. Same goes for a firewall you choose..as for the extra security definitely keep malwarebytes, the rest is up to you.

 

[dranfu]

To watch network traffic, and to find out where it is coming from, as in which program is sending this data, where is this data coming from, what port is it using to send the data through, what country is it sending my data to, etc. You need a packet capture program.

There are many, but the best is Wireshark (imho, of course). This program allows you to see everything that is happening on your network. However, it does require some understanding of network protocols in order to use it. But even if you're not familiar with network protocols, you could still just watch the HTTP traffic on your computer, and see if anyone from an foreign country is sending data to or from your computer.

Another great program, which doesn't really have any prerequisites is NetLimiter, this program allows you to see, quickly and on a simple screen, which programs are sending out/receiving data, and where that data is going. Here is an image of Net Limiter:

Here is an image of Wireshark

A good firewall program would, of course, allow you to do much of the same. However, if you want to Go Deep then Wireshark is what you want.

It's funny you asked this question, because I was just working on a script that will help you locate malicious URL's quickly without having to know network protocols and all that stuff. I'm going to post it to this section of the forum soon, so check back in this section if you're interested

 

[Super001]

i have installed comodo firewall ,and really looks great and help in controlling traffic

many thanks guys

and thanks dranfu for the appz ,i'll install them too =]

regards

 

[richc46]

Glad that we could help. You will like that firewall. Use the list that I gave you for other great free software.

 

[Borg 386]

If you're curious about the connections and want a quick view of everything, you can d/l TCP View

TCPView for Windows

TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.