Solved What is uploading?

[CarvedDuck]

Hi, I have win7 home in a VMWare Player. It has been sluggish so I opened the Network Status dialog and it is showing a steady "Received" count It has been connected for almost an hour and the count is 40MB and still rising.

I have all auto updates turned off for all things that have the option.

I tried installing TCPView but it doesn't show anything even though the Received counter is ticking over at 200K/sec.

Is there some way I can see the originating IP address?

Or the file(s) being created?

 

[Tookeri]

If TCPview doesn't show anything, this probably won't either. But it never hurts to try:

http://www.sevenforums.com/tutorials/12523-resource-monitor.html

 

[speedgamer01]

Type 'Performance monitor' in start menu search box and open that, you will find a button 'Open resource monitor'.
In resource monitor you can see the network usage per process on the last tab.

Cheers!

Edit: Ah, they were faster than me

 

[Barman58]

I find Process Hacker useful for this type of investigation Overview - Process Hacker

Totally free open source application, partly written by a former Mod here

 

[CarvedDuck]

Thanks, Barman!!!

Exactly what I needed. Excellent piece of software.

In an instant it highlighted damned Comodo firewall was doing something. I have no idea exaclt what or why it was downloading 76MB and still counting, but the only way to stop it was to uninstall it.

Time to look for a better firewall. Thoughts on that?

 

[Barman58]

Funny you mentioned Comodo, I have used it for years on many systems My own and clients, It actually has a very similar option to show network activity, though of course it's overkill for just that - If its a new install it was probably downloading definitions for problem web addresses - you can normally edit the preferences for what and when it downloads - It's a very complex program to set up at times but the protection it's capable of is worth it (In My Opinion, of course YMMV ).

Process Hacker is like Task Manager on Steroids - the fact that it can simply break out some of the contents of windows combined processes is worth the install, I think it's possible to set it to replace Task manager as the default which for someone interested in the inner workings of the OS can be a help (you can always run Task Manager from within Process Hacker )

 

[Tookeri]

FYI, Process Explorer has on option to replace Task Manager + options to check all running processes on VirusTotal.
I'm satisfied with that program so I've never checked out Process Hacker and therefor can't compare them.

Process Explorer

 

[Barman58]

The full Sysinternals Suite is part of my basic install - gets loaded on every system I setup, It's been an essential for me since long before Mark Russinovich & Bryce Cogswell became part of Microsoft.

The Autoruns App is essential to diagnose startup issues and the other utilities are probably the best in class