Help, Unknown Program Hogging 50% Of My Upload Bandwidth

I don't where else to post this. I scanned with BitDefender 2010 Internet Security and it found nothing except a couple of infected "tracker" cookies after scanning nearly 400,000 files. As I am typing this, the unknown program has stopped using my bandwidth. But it has been doing so for the past 30 minutes at upload speeds between 200-300kbps.

I downloaded a free internet bandwidth monitor. It is telling me that a program labeled as Unknown with the process ID of 6124 is using 200-300 kbps of my upload speed, and about 2 kbps of my download speed. What the heck? It's making my net go extremely slow and it's freaking me out. I can't figure out what program is doing it and I think it did it last night too, because my internet connection light on my modem/router unit was flickering full boar (which means I'm using a crap ton of bandwidth), but I was just sitting at the desktop with nothing open. It lasted for 10-15 mins.

The only other info I have on it is that the program is receiving information from 74.125.212.86 on port 49910, and from 74.125.164.167 on port 49912. I was DMZ'ed, but I went in and turned off DMZ and closed all unnecessary ports but the program could still successfully communicate through those ports. I turned BitDefender 2010 Firewall to "Deny All", but still, this program, whatever it was, continued to use upload bandwidth at around 300kbps.

Someone help please... I've scanned with BitDefender and Malwarebytes but neither found anything. I just reformatted and reinstalled Windows 7 less than 2 months ago... I really don't wanna have to do it again.

Thanks.

Find more posts tagged with

Comments

bushpilot223

Ok get this... those IP addresses I posted are from the Google Corporation. Type them into your web browser, they lead you to Google's page.

So why the heck is this happening? Is Google intruding into my PC without my consent? There was absolutely nothing running during these attacks... no web browsers, no windows media player, no background applications that weren't vital to Windows...

Just some unknown program using most of my upload capacity and talking to Google, for constant periods up to 30 minutes.

Lionet

I don't where else to post this. I scanned with BitDefender 2010 Internet Security and it found nothing except a couple of infected "tracker" cookies after scanning nearly 400,000 files. As I am typing this, the unknown program has stopped using my bandwidth. But it has been doing so for the past 30 minutes at upload speeds between 200-300kbps.

I downloaded a free internet bandwidth monitor. It is telling me that a program labeled as Unknown with the process ID of 6124 is using 200-300 kbps of my upload speed, and about 2 kbps of my download speed. What the heck? It's making my net go extremely slow and it's freaking me out. I can't figure out what program is doing it and I think it did it last night too, because my internet connection light on my modem/router unit was flickering full boar (which means I'm using a crap ton of bandwidth), but I was just sitting at the desktop with nothing open. It lasted for 10-15 mins.

The only other info I have on it is that the program is receiving information from 74.125.212.86 on port 49910, and from 74.125.164.167 on port 49912. I was DMZ'ed, but I went in and turned off DMZ and closed all unnecessary ports but the program could still successfully communicate through those ports. I turned BitDefender 2010 Firewall to "Deny All", but still, this program, whatever it was, continued to use upload bandwidth at around 300kbps.

Someone help please... I've scanned with BitDefender and Malwarebytes but neither found anything. I just reformatted and reinstalled Windows 7 less than 2 months ago... I really don't wanna have to do it again.Thanks.

Hi Bushpilot,

Welcome on the forum,

Well... are you sure your free internet bandwitdt program is not a malware itself?

Could you restart your modem router (it has probably a protection included bypassed by the malware), Reinitialize BD firewall, check the task manager (are there unknown files in it?) and the msconfig (start section, to check soft authorized to be activated at start)

Maybe it could help to find the malware. <_<

I usually plug the hard disk with an external device to a well protected machine to be analyzed, I'm no expert at Hijackthis or ZHPdiag...

Good hunt,

Cristi Raducu

74.125.212.86 is v7.cache3.c.youtube.com

Did you recently watch a youtube video?

It's not a virus,the situation is reported also in this topic and we are currently investigating it.

http://forum.bitdefender.com/index.php?showtopic=22379

Also it would be helpful to know if you have a 32 or a 64 bit OS.

I will close this topic and we continue there.

Thank you !