Step 1: Find and disable any extra bandwidth sucking programs
Then, I ran some bandwidth monitoring programs like NetLimiter, Bandwidth Monitor and Zone Alarm and found out leeching was taking place through no other process than windows very own “svchost.exeâ€. When I restrict svchost.exe, through Zone Alarm, even the normal browsing requests were not served. When I tried to kill that particular process ID (through NetLimiter), another process started consuming the bandwidth, exactly after every 10 minutes.Step 2: Turn off Automatic Updates
I made sure that my Windows automatic updates were turned off. I went to the Automatic Updates Menu (Right click My Computer, click Properties, and Click the Automatic Updates tab). Then I selected a radio button with text “Turn off Automatic Updatesâ€, I clicked Apply and OK buttons.
The problem still remained unsolved.
Step 3: Scanning the system
I scanned my systems for viruses/worms and trojans through some well known anti virus and spy removal programs. I tried McAfee, AVG, and Norton with their latest virus definitions. In the spyware section I used Spybot Search and Destroy, Spy Sweeper. None of the software was able to fix the problem.
Step 4: Brute Force
Finally after several days of disappointment I went to the services menu. I tried to disable different weird looking services and finally found out the trouble maker.To access the services menu through: Start>Run and type services.msc
Alternatively you can go to: Start>Control Panel>Administrative Tools>Services (double click it to open)
You will see a menu like one shown below:
- Add new comment
- 5495 reads








Tue, 04/24/2007 - 16:37
You probably saw the b/w usage because it was downloading updates.
If you still _want_ to be notified when MS releases a patch for that new Windowz security hole, set Automatic updates to "Notify me but don't automatically download." Trust me, Windows is not constantly using 1MB/s just to _check_ for updates.
Tue, 04/24/2007 - 17:34
Turning off automatic updates also disables the downloading process, and trust me it wasn't downloading updates!
I always disable automatic updates when I install Win XP and believe me nothing like this ever happened! This time there was definately some virus or worm, using the svhost.exe.
Life is not as easy as you expect it to be!