Constant & Steady upload query

[Paul.]

As I was seeing constant network traffic (ADSL), I installed and ran
Netmeter that someone recommended. With nothing else running I have a
constant 5.4KB/s Upload and a 4.5KB/s download. These figures only change if
I open an IE window or run Mailwasher etc.

I have just ran Adaware 6.0 Pro and Spybot. I have also done a full system
scan with Norton AV. All clean.

After running TCPview and then stopping each process until the up & down
KB/s dropped to 0 I noticed that it was a svchost process.

The following services were running by each SVChost process:

svchost.exe 928 RpcSs
svchost.exe 1032 AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Messenger, Netman, Nla, RasMan, Schedule,
seclogon, SENS, ShellHWDetection,
srservice,
TapiSrv, TermService, Themes, TrkWks,
uploadmgr, W32Time, winmgmt, wuauserv,
WZCSVC
svchost.exe 1204 Dnscache
svchost.exe 1236 LmHosts, RemoteRegistry, SSDPSRV, WebClient

Any idea's which one of these would be talking at such a constant speed?

Also, I thought I had disabled Messenger!

Thanks.

Paul.

 

[Alex Nichol]

As I was seeing constant network traffic (ADSL), I installed and ran
Netmeter that someone recommended. With nothing else running I have a
constant 5.4KB/s Upload and a 4.5KB/s download. These figures only change if
I open an IE window or run Mailwasher etc.

After running TCPview and then stopping each process until the up & down
KB/s dropped to 0 I noticed that it was a svchost process.

The following services were running by each SVChost process:

svchost.exe 928 RpcSs
svchost.exe 1032 AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Messenger, Netman, Nla, RasMan, Schedule,
seclogon, SENS, ShellHWDetection,

It *might* be BITS. In Control Panel - Admin Tools - Services, look for
it (Background Intelligent Transfer) and double click. Click Stop, then
set Startup type to Manual and click Apply.

Messenger BTW is not the instant messenger, but the one that allows net
admins to send messages across networks like 'server closing for
maintenance'. You probably don't need it and might as well set it to
disabled, but I don't think that is the trouble