windows xp uploading data

[Steve P]

I've recently reinstalled XP Pro and have notice it is uploading large
amounts of data 25M in the 45 minutes I've been logged on thru my dial-up
network. I've got the firewall turned on and I ran Earthlinks 'spyware'
check and found nothing but a tracking cookies.

What is windows doing? did I miss a setting?

thanks...

 

[Curt]

I've recently reinstalled XP Pro and have notice it is uploading large
amounts of data 25M in the 45 minutes I've been logged on thru my dial-up
network. I've got the firewall turned on and I ran Earthlinks 'spyware'
check and found nothing but a tracking cookies.

What is windows doing? did I miss a setting?

thanks...

Do you have auto update turned on for either windows or a antivirus
program? If so, maybe they are updating. This is especially possible given
that you just reinstalled XP pro. It is now trying to update all the
security patches etc.

 

[Steve P]

I was "sending" lots of data, not receiving.

today Norton identified 'w32.welchia.worm.' I downloaded a removal patch
from norton and ran it. The uploads seem to have gone away.

After some web research, I found:

W32.Welchia.Worm targets computers infected with the W32.Blaster.Worm. Once
on a system, W32.Welchia.Worm deletes msblast.exe, attempts to download the
DCOM RPC patch from Microsoft's Windows Update Web site, installs the patch,
and then reboots the computer. The worm checks for active machines to infect
by sending an ICMP echo, or PING, which may result in significantly
increased ICMP traffic. ICMP is a TCP/IP protocol used to send Internet
messages.

hope this helps someone else!

 

[Paul]

Hi Steve,
Thanks for this post. I was having exactly the same problem and ur
post helped me to fix it. Thanks
Paul