Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   General IT Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=19)
-   -   Something is downloading (https://www.cableforum.uk/board/showthread.php?t=33707252)

Taf 04-01-2019 20:14
Something is downloading
 
I had all programs off and opened Task Manager. I saw that it was showing slow downloads amounting to about 100kbytes per minute (144Mbytes per day).

I checked for any running programs that might be doing it, but nothing looks like it would or should.

Antivirus, Rootkit and Antispyware programs find nothing.

Any ideas? :dunce::dunce::dunce:

Mr K 04-01-2019 20:17
Re: Something is downloading
 
Windows update? They cause most pc issues !

SnoopZ 04-01-2019 20:35
Re: Something is downloading
 
It could be any of your software updating, browsers, Antivirus, Firewall, windows update etc

Taf 04-01-2019 20:49
Re: Something is downloading
 
Quote:
Originally Posted by Mr K (Post 35977863)
Windows update? They cause most pc issues !
No updates for Vista, and I've blocked them a long time ago. :(

---------- Post added at 20:49 ---------- Previous post was at 20:47 ----------

Quote:
Originally Posted by SnoopZ (Post 35977866)
It could be any of your software updating, browsers, Antivirus, Firewall, windows update etc
Cheers, I'm working through them to find the culprit.


Hmm.. it's svchost.exe (local service) connected to 239.255.255.250... :dunce:

pip08456 04-01-2019 21:13
Re: Something is downloading
 
Quote:
Originally Posted by Taf (Post 35977867)
No updates for Vista, and I've blocked them a long time ago. :(

---------- Post added at 20:49 ---------- Previous post was at 20:47 ----------



Cheers, I'm working through them to find the culprit.


Hmm.. it's svchost.exe (local service) connected to 239.255.255.250... :dunce:
That means it can be any service or programme that uses a DLL file.

idi banashapan 04-01-2019 21:16
Re: Something is downloading
 
Quote:
Originally Posted by Taf (Post 35977867)
Hmm.. it's svchost.exe (local service) connected to 239.255.255.250... :dunce:
that's likely the old NETbios requests. newer systems will use DNS only.

In order to disable NetBIOS over TCP/IP you need to;
  1. go to Network and Sharing Center
  2. change adapter settings
  3. right click on your network interface you are seeing the IP address broadcast on and select Properties
  4. Click on the ipv4 and then the properties button
  5. Click Advanced
  6. Go to the wins tab and disable tcp over netbios

it's only used by the much older Operating Systems, so is unlikely to cause you any issues by disabling it. You can always re-enable if need be. See if it stops the appearance of the traffic. If not, get Wireshark installed and get some logs started.

Paul 05-01-2019 02:42
Re: Something is downloading
 
Its SSDP (Simple Service Discovery Protocol).

See https://en.wikipedia.org/wiki/Simple...overy_Protocol

Taf 05-01-2019 13:03
Re: Something is downloading
 
Quote:
Originally Posted by idi banashapan (Post 35977873)
that's likely the old NETbios requests. newer systems will use DNS only.

In order to disable NetBIOS over TCP/IP you need to;
  1. go to Network and Sharing Center
  2. change adapter settings
  3. right click on your network interface you are seeing the IP address broadcast on and select Properties
  4. Click on the ipv4 and then the properties button
  5. Click Advanced
  6. Go to the wins tab and disable tcp over netbios

it's only used by the much older Operating Systems, so is unlikely to cause you any issues by disabling it. You can always re-enable if need be. See if it stops the appearance of the traffic. If not, get Wireshark installed and get some logs started.
I've now done that, but it's still happening. And Wireshark says I can only use ver2.2 for Vista. I downloaded the zip from their archive and all it contains are *.lib and *.pdb files, but no exe.

---------- Post added at 13:03 ---------- Previous post was at 13:02 ----------

Quote:
Originally Posted by Paul M (Post 35977882)
Its SSDP (Simple Service Discovery Protocol).

See https://en.wikipedia.org/wiki/Simple...overy_Protocol
That was all greek to me, but now I'm worried of ddos! :shocked:

pip08456 05-01-2019 14:09
Re: Something is downloading
 
Quote:
Originally Posted by Taf (Post 35977898)
I've now done that, but it's still happening. And Wireshark says I can only use ver2.2 for Vista. I downloaded the zip from their archive and all it contains are *.lib and *.pdb files, but no exe.

---------- Post added at 13:03 ---------- Previous post was at 13:02 ----------



That was all greek to me, but now I'm worried of ddos! :shocked:
exe files available here.

32 bit

https://www.filepuma.com/download/wi...t_2.2.1-12876/

64bit

https://www.filepuma.com/download/wi...t_2.2.1-12877/

Paul 06-01-2019 00:40
Re: Something is downloading
 
Quote:
Originally Posted by Taf (Post 35977898)
That was all greek to me, but now I'm worried of ddos! :shocked:
Um.. why :confused:

Taf 06-01-2019 12:45
Re: Something is downloading
 
Quote:
Originally Posted by Paul M (Post 35977970)
Um.. why :confused:
From your link....

Quote:
In 2014 it was discovered that SSDP was being used in DDoS attacks

Paul 06-01-2019 15:54
Re: Something is downloading
 
Lots of things are used for DDOS, if you start to worry about them all, you would not use the internet.


All times are GMT +1. The time now is 09:20.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.