[Fixed] Very Frustrating Problem With Bitdefender, Bandwidth Usage, Bandwidth Consantly And Massivel

135678

Comments

  • I am also facing the same issue. Finally, yesterday, i uninstalled BDIS and installed Nortan AV as a trial version (no such issue with Nortan).


    If the issue persists for more days then i will have to buy the keys of Nortan.


    Hope Bitdefender team works with urgency to resolve issue !!!


    Regards,


    Anand

  • Hi,


    does this issue still exist, or is it fixed by now?


    I like Bitdefender AV and would like to buy a license, but with this bug (had it while using the free trial version), the product is unusable for me :/


    Thanks in advance.

  • Okay, today I put Firefox 18 on my desktop (I run Chrome) I also installed Flash Player (I don't run it on this particular system) and installed version 11 from Adobe. I then installed TrafficLight for Firefox.


    I went to http://kallien.caster.fm/


    Listened to the music.. (sorry not my forte') and Closed Firefox. Everything stopped, no processes left open, no I/O streams still pumping data.


    My Config:


    Windows 8 Pro (64 Bit)


    BD 2013 Total Security (Sphere Edition)


    Firefox 18.0.1 (32 Bit)


    Flash Player/Shockwave 11.5.502.146 (Just installed it from Adobe)


    I also run Secunia PSI (available here for free: http://secunia.com/products/consumer/psi/sys_req/) that double checks on released


    versions and compares them to what you have on your system. It can automatically apply maintenance and tell you when things are out of date.


    Anyway, I can't reproduce the issue, can you re-post your configuration here and let's see what we can do to diagnose it?

  • Hello :)


    The issue was escalated when I received the logs via PM.


    Right now our developers are looking for a solution. The latest build has a new TrafficLight SDK, but the fix for this was not included in the .24 build because when it was reported, the build .24 was in the final testing period.


    I will keep you up to date with this.


    Thank you for your patience.


    Hello Will Wood,


    This is an old (since BDIS 2012) issue and still remains.


    Christian's above post should convince you.


    You (we) cannot do anything about this.


    Thanks for your response!

  • Hello werby3,


    I have the impression that this problem is much older than you can possibly imagine.


    Look this thread and everything will be clear :)


    http://forum.bitdefender.com/index.php?sho...=16258&st=0


    Regards.

  • Thanks for posting that link, alexx69.


    I'll try the registry fix described in that thread.


    This is ridiculous, this problem was reported years ago, and Bitdefender still doesn't care enough to fix it?! I thought this was a relatively new issue. wtf...

  • ...I have the impression...


    Hello alexx69


    I wish it was only an impression.


    It seems that takes some time for us to discover it...again.


    THX alexx69


    @BD Developers : If this issue was wine we would be happy now. But it isn't... :P


    Cheers!!!

  • Hello Will Wood,


    This is an old (since BDIS 2012) issue and still remains.


    Christian's above post should convince you.


    You (we) cannot do anything about this.


    Thanks for your response!


    Are you still running Firefox 16? Also since it's been a couple of months can you confirm what Flash version you have?

  • Problem still exists on my computer using BD Antivirus 2013, Firefox 18.0.1, Flash 11.5.502.146 on Win7 64-bit SR-1

  • Has anybody tried it with TrafficLight disabled, i.e., go into the settings and turn off the filters? Just curious

  • Hello Will Wood,


    On my Win 8 Pro 64bit, Firefox 18.0.1 with Flash 11.5.502.146 has always this issue.


    I've tried all possible settings (including your suggestion) and found only one solution: Unistallation of my BD Win 8 Security. Same with my previous OSs & BDs.


    In your previous Post #16, you mentioned about TrafficLight add-on for Firefox. I've never installed this cause TrafficLight is included in BD products so, perhaps it's not recommended or anyway this does not seem logical to me (double install).


    Once again, BD developers know very well about this issue and they work very hard for a solution for the last 3 years. That's why they don't have time to monitor and response to their forum... ;) .


    Regards!

  • wkwood
    edited January 2013
    Hello Will Wood,


    On my Win 8 Pro 64bit, Firefox 18.0.1 with Flash 11.5.502.146 has always this issue.


    I've tried all possible settings (including your suggestion) and found only one solution: Unistallation of my BD Win 8 Security. Same with my previous OSs & BDs.


    In your previous Post #16, you mentioned about TrafficLight add-on for Firefox. I've never installed this cause TrafficLight is included in BD products so, perhaps it's not recommended or anyway this does not seem logical to me (double install).


    Once again, BD developers know very well about this issue and they work very hard for a solution for the last 3 years. That's why they don't have time to monitor and response to their forum... ;) .


    Regards!


    Well I'm just curious then other than you're running the Windows 8 release of BitDefender and I'm running 2013 TS I can't see a difference in the configuration. There is an edition of Traffic Light that you can download directly as a Firefox plugin, that's what I installed because I had installed Firefox after installing BD2013. You're probably right, they're the same but in Chrome and in Firefox I don't get the same issue but it wouldn't be a double install, it's a plugin and if you already have it it should have been updated. Mine reports a date of 1/25/13, does yours? Also did BitDefender give you an issue number to track?

  • werby3
    edited January 2013

    Hi Will Wood,


    I've just installed TrafficLight add-on for Firefox (last update 26 Jan). Unfortunately, nothing have changed. Issue still remains as I expect it.


    If by "an issue number to track", you mean "support ticket" the answer is NO cause many many users have reported this issue here since 2009 (when support worked) and nothing have changed. In past, many issues fixed through forum. Now many if not all issues remain even if reported through other support channels (as many users report).


    I always prefer this forum because (especially now) there will be an answer or more like yours and it doesn't take an eternity for me to receive a typical answer (from support) that gives me to understand that they just ignore me (like other users). That's all.


    Regards

  • werby3
    edited January 2013

    ...in addition


    I know, I should not make this question but are you sure you have not this issue too?


    I mean, did you check, after exiting Firefox, in "Task Manager/Performance tab or via a download meter to see what happens?


    Regards


  • ...in addition


    I know, I should not make this question but are you sure you have not this issue too?


    I mean, did you check, after exiting Firefox, in "Task Manager/Performance tab or via a download meter to see what happens?


    Regards


    yup, no traffic on the NIC, no streaming processes or firefox processes hanging around, everything closed as it should.


    I use Process Explorer which lets me dig in a bit deeper but when I exit Firefox, everything including the Flash Player stops.

  • ...I use Process Explorer which lets me dig in a bit deeper but when I exit Firefox, everything including the Flash Player stops.


    Hi,


    You cannot see this on Process Explorer that shows everything's ok. Please open task manager and look at performance tab on Ethernet or Wi-Fi after exiting Firefox.

  • Kindly see bellow screenshots, one with Firefox opened and the other after Firefox exit.

    post-24433-1359267339_thumb.jpg

    post-24433-1359267354_thumb.jpg

  • Kindly see bellow screenshots, one with Firefox opened and the other after Firefox exit.


    Here's on my system, before and after. I used delta I/O read/write/other in process explorer to show the direct I/O related to my Wifi connection. after stopping Firefox, I still have I/O but it's not against the BD services, I have a lot of stuff running on this particular system but the process terminates, Flash shuts off as it should.


    Before


    https://www.asuswebstorage.com/navigate/s/D...93797B83C5D5BE4


    After


    https://www.asuswebstorage.com/navigate/s/1...5F0A75666159104


    I still have a lot of network activity but while streaming the I/O accounted for by Process Explorer for Flash is approximately 34KB/download/sec 7KB/upload/sec


    But when I shut off Firefox streaming that website, the processes terminate. BDAgent.exe is still there (before and after) but it won't go away. Check again using the delta I/O options otherwise you get total I/Os which is a bit misleading in this case.

  • werby3
    edited January 2013
    ...I still have a lot of network activity...


    That's why you cannot see the issue.


    If you stop all your network activity (0 Kbps) and then open only Firefox streaming from this site when you exit you will see (in task manager/performance) that streaming does not stop although in "Process Explorer" Firefox and Flash processes are terminated.


    Then the easier way to stop receiving is to disable and enable local or wi-fi connection.


    If "bdtl.dll" is renamed or uninstall BD there is no such an issue.


    Understood???

  • That's why you cannot see the issue.


    If you stop all your network activity (0 Kbps) and then open only Firefox streaming from this site when you exit you will see (in task manager/performance) that streaming does not stop although in "Process Explorer" Firefox and Flash processes are terminated.


    Then the easier way to stop receiving is to disable and enable local or wi-fi connection.


    If "bdtl.dll" is renamed or uninstall BD there is no such an issue.


    Understood???


    Hello werby3,


    To me is quite clear, more than 4 months :D

  • Here's on my system, before and after. I used delta I/O read/write/other in process explorer to show the direct I/O related to my Wifi connection. after stopping Firefox, I still have I/O but it's not against the BD services, I have a lot of stuff running on this particular system but the process terminates, Flash shuts off as it should.


    Before


    https://www.asuswebstorage.com/navigate/s/D...93797B83C5D5BE4


    After


    https://www.asuswebstorage.com/navigate/s/1...5F0A75666159104


    I still have a lot of network activity but while streaming the I/O accounted for by Process Explorer for Flash is approximately 34KB/download/sec 7KB/upload/sec


    But when I shut off Firefox streaming that website, the processes terminate. BDAgent.exe is still there (before and after) but it won't go away. Check again using the delta I/O options otherwise you get total I/Os which is a bit misleading in this case.


    Hello Will Wood,


    Thank you for actively taking part in this topic!


    Have you checked your Security Widget(left side) and your Network Activity after closing your browser ?


    Kindly look the first picture from this topic:


    http://forum.bitdefender.com/index.php?showtopic=39436


    Incoming activity = 128 KB/s, while my browser was closed, in a normal situation should be less than 1KB / s.

  • werby3
    edited January 2013

    THX alexx69



    Will Wood insists about Firefox and Flash termination trusting only "Process Explorer" and never tried to reproduce the issue under a quiet network (w/o receiving other data).


    I(we) never said that Firefox and Flash stay open after exiting.


    It's BD that holds connection opened till Network Connection disabling.


    Regards

  • THX alexx69



    Will Wood insists about Firefox and Flash termination trusting only "Process Explorer" and never tried to reproduce the issue under a quiet network (w/o receiving other data).


    I(we) never said that Firefox and Flash stay open after exiting.


    It's BD that holds connection opened till Network Connection disabling.


    Regards


    Hello werby3,


    This problem occurs due to some unknown activities inside the Bitdefender (probably firewall), or my computer is possessed by a ghost who likes to use internet for free :D


    By the way, I totally agree with you!


    Regards.

  • Hello,


    just take a look with tcpview from sysinternals. You will see the connenctions from your browser. And you wil see that - after streaming or downloading huge files - there are some connections which could not be closes. They have the status "finwait_2". That happens if the server doesn´t get the last packed which shows that the connection should be determined. BitDefender prevents those connections from closing. With tcpview you could close those connections and you will see that the unknown traffic stops immedialty.


    This should be a knewn issue, but the support doesn´t do anything...


    Yours Olli

  • werby3
    edited January 2013

    Hello olli,


    This is also a very good (if not the best) and practical solution.


    Thank you!

  • werby3
    edited January 2013

    Hello


    Excellent tool!!! It includes even "Whois" function thus you can easily see about destinations.


    olli : Thanks again


    Will Wood : With this tool (tcpview from sysinternals) you'll be able to see the issue regardless your network traffic.


    Regards

  • Hello,


    just take a look with tcpview from sysinternals. You will see the connenctions from your browser. And you wil see that - after streaming or downloading huge files - there are some connections which could not be closes. They have the status "finwait_2". That happens if the server doesn´t get the last packed which shows that the connection should be determined. BitDefender prevents those connections from closing. With tcpview you could close those connections and you will see that the unknown traffic stops immedialty.


    This should be a knewn issue, but the support doesn´t do anything...


    Yours Olli


    Actually I've been using it. Regardless of Chrome or Firefox being used with the streaming flash content. With Wireshark you can see the client (receiving the flash content) send a FIN flag to the Content Server. In this case I can't see the streaming server, kallien.caster.fm acknowledging the fin. Thus the socket on the Windows Client remains in FIN_WAIT2. Unfortunately I can trace other TCP connections where FIN is acknowledged by the Server and the socket is torn down. This is how TCP Sockets work, even in UNIX/Linux. There's some tuning you can do in the TCP stack on Windows but IMO this really looks like a Server (kaster.callen.fm) server issue at this point. I'm going to dig a bit deeper as well.


    In this case Windows is saying, "Shutdown" but the other side still keeps talking and per TCP/IP convention, the socket remains open even though the process isn't listening anymore.


    http://www.firewall.cx/networking-topics/p...ag-options.html


    And this is common in Windows on apps that don't have the options set on both sides.


    http://superuser.com/questions/215351/how-...d-but-listening


    Anyway, I'll dig through the packet traces but from the captures I have, the kaster.callen.fm system doesn't respect the FIN flag, it does acknowledge the receipt but doesn't shut off and Windows is being to nice by keeping it open. Since this is all on the app side, at this point I don't think it's Bitdefender but I haven't removed it yet. I didn't go through all the posts but has anybody removed Bitdefender and seen what the behavior then?


    post-28680-1359490495_thumb.png

    post-28680-1359490527_thumb.png

    post-28680-1359490548_thumb.png

  • werby3
    edited January 2013
    ... but has anybody removed Bitdefender and seen what the behavior then?


    Hello Will Wood


    As in my 1st post : This is a BD issue because when is uninstalled or disabled (from safe mode) or "bdtl.dll" is renamed, everything is OK.


    Regards

  • I can see the same behaviour using IE or Chrome...

  • I can see the same behaviour using IE or Chrome...


    Curious, why would BD be filtering the FIN flag from the Server side? I'll carve some time and remove BD and do some additional packet traces however there's also Windows Firewall as well. So, did Christian ever come back with a ticket / issue number for this with BD as well? That seems to be the one glaring thing in all of this, all us Pros/Semi-Pros who don't work @ BD tracing an issue for them. I think we should start charging by the hour.. ;-)

  • Curious, why would BD be filtering the FIN flag from the Server side? I'll carve some time and remove BD and do some additional packet traces however there's also Windows Firewall as well.


    This would be very interesting!


    PS:


    I don't believe that we will get any support here. Perhaps we should try it via Facebook...

  • werby3
    edited January 2013
    ... That seems to be the one glaring thing in all of this, all us Pros/Semi-Pros who don't work @ BD tracing an issue for them...


    This is a common practice for this company. It's a very c h e a p way for them to debug their products.


    That's why we can upgrade our versions with the same license.


    As for support in facebook or elsewhere there is no hope.


    This issue persists since 2009.

  • This is a common practice for this company. It's a very chea.p way for them to debug their products.


    That's why we can upgrade our versions with the same license.


    As for support in facebook or elsewhere there is no hope.


    This issue persists since 2009.


    Well, I think that it's related to the Server in this case or something in the interaction. I just tried a youtube (Flash clip) streaming away in Firefox with the Flash Plugin working away. Kill the Firefox process and guess what, no stream data coming back in. So, this is definitely strange and I can see the FIN acknowledgement coming from the server, shutting down the windows socket.


    Maybe Bitdefender doesn't like the music on killien.caster.fm? I'm more into Punk rock myself.. ;-)


    Just curious do you have another website that can be used as a comparison of the issue and I realize that "it's been reported since 2009" but maybe that's why it's not resolved, because it may be client / server traffic related or they believe it is?

  • werby3
    edited January 2013
    ..Just curious do you have another website that can be used as a comparison of the issue and I realize that "it's been reported since 2009" but maybe that's why it's not resolved, because it may be client / server traffic related or they believe it is?


    Unfortunately not. But many users in previous posts reported the same issue especially for video streaming.


    I believe that it's an issue between BD and some specific flash player streaming versions.

  • Unfortunately not. But many users in previous posts reported the same issue especially for video streaming.


    I believe that it's an issue between BD and some specific flash player streaming versions.


    Humm, okay.. I just was in a chat session with Liam (see attached) we'll see what happens.. ;-)


    I'm still going to carve out some time and try to trace this with BD uninstalled but IMO I'm not expecting it to change on this particular use case.

    post-28680-1359498728_thumb.png

  • ..hhmm...to the second level haa? :D


    Here's my opinion about second level (tier 2).


    Anyway THANK YOU Will Wood for the ticket. Perhaps it will help... :rolleyes:

  • Hello everyone,


    @werby3, @Will Wood, @olli,


    Here is the link:


    http://website.informer.com/visit?domain=watch32.com


    Every movie is divided into 7,8,10 parts etc.


    You have to see at least 2 parts from any movie(Harry Potter for example :D ), no longer than 1 minutes.


    Then leave this site and close the browser!


    At the end pay attention to Security Widget and Network Activity, It will be good enough for this test.


    Enjoy movies ;)


    Regards.

  • Perhaps it has something to do with the hoster. I have the issue when I streaming sites from the IP range 8.27.x.x or 209.84.x.x. It was the same network provider. Perhaps the servers of this provider are a little "special"

  • ...Perhaps the servers of this provider are a little "special"


    ...In relation to BD cause if you uninstall it, disable it or rename "bdtl.dll" there is nothing special on servers...


    Perhaps, all systems of the world must follow BD's way of...living :P .

  • werby3
    edited January 2013

    Hi,


    Last Build update : 16.26.0.1739 Issue still remains!


    Aloha!

  • Perhaps it has something to do with the hoster. I have the issue when I streaming sites from the IP range 8.27.x.x or 209.84.x.x. It was the same network provider. Perhaps the servers of this provider are a little "special"


    Well I haven't had a chance to remove/test/re-install but I'll get to it over the next couple of days. IN the meantime the ticket #201301301000873

  • Hello everyone,


    @werby3, @Will Wood, @olli,


    Here is the link:


    http://website.informer.com/visit?domain=watch32.com


    Every movie is divided into 7,8,10 parts etc.


    You have to see at least 2 parts from any movie(Harry Potter for example :D ), no longer than 1 minutes.


    Then leave this site and close the browser!


    At the end pay attention to Security Widget and Network Activity, It will be good enough for this test.


    Enjoy movies ;)


    Regards.


    Thank You! I don't really like the music on kaster.callien.fm LOL

  • ... I'm more into Punk rock myself.. ;-)...


    ...nobody's perfect... :)

  • ...nobody's perfect... :)


    :blink:

  • May be Bitdefender is not handling the IDM drivers e.g idmwfp.sys properly. Did anyone try to add the IDM drivers to Exclusions etc.

  • ntvolli
    edited February 2013
    Well I haven't had a chance to remove/test/re-install but I'll get to it over the next couple of days. IN the meantime the ticket #201301301000873


    Whow, you´ve got a ticket... :rolleyes:


    Any news from the support?


    BTW: If you like to figure out that problem with a german radiostation...


    Just get the livestream from www.deltaradio.de... <img class=" />


    Yours


    Olli

  • do not suffer, they have not solved this problemmu and I realized the only solution is to remove BIS and install NIS!!!

  • ...remove BIS and install NIS!!!
    Removing BIS installing NIS,


    She told me about KIS(S),


    But I wanna PIS(S),(i.e. peace)


    ...from my last poetic anthology...

  • Hi, I have had this issue where BD keeps streaming video even after the browser is closed. This is an OLD issue. I have encountered it as far back as BD 2009. I have seen multiple forum threads of people reporting this problem. And I have seen BD personnel promise a fix years ago and still it persists.


    Im on the latest BD 2013 Internet security right now, and the issue is still there.


    My pc is running Win7 64bit, latest Firefox and flash.


    WHAT I WANT TO KNOW IS WILL THIS ISSUE EVER BE SOLVED OR DO I HAVE TO BUY A DIFFERENT ANTIVIRUS?


    And yes i have seen all of these:


    http://forum.bitdefender.com/index.php?showtopic=40908


    http://forum.bitdefender.com/index.php?showtopic=40768


    http://forum.bitdefender.com/index.php?sho...=39232&st=0


    http://forum.bitdefender.com/index.php?sho...16258&st=20


    Regards


    Angry Customer

  • Hello dear angry customer,


    first of all: i am an angry customer too.


    BD support DOES NOT WORK (to say it loud)! The inner organization at BD seems to be a kind of lottery game and customers with problems are just bad customers - let's sell that product to more people not knowing what they do.


    BD does not know how to interact with customers and with the public. They have this forum in several languages but it seems that supporters don't care about messages in other languages. When ever any solution is found e.g. in Spain they do not post that solution to other subforums (english, german, romanian).


    And they do not seem to have any 'senior support engineer' who is ordered to watch this forum and to co-ordinate answers or solutions. Christian seems to be over-stressed and thus unable to give substantial support.


    Well (or not well) - to your problem:


    Microsoft has hotfixed a problem on systems running W7 64bit. In short: sometimes TCP/IP communication waits for packages and does not get them (so it waits and waits and waits...). Some customers of BD have given very useful hints to find and isolate that problem, but BD was not able to pass those hints to Microsoft in time - or? Maybe Microsoft does not respond in time to issues sent from Romania?


    Please try this:


    http://forum.bitdefender.com/index.php?sho...st&p=174667


    Hope this will help you. Just give it a try because you will not get any response from BD before next week (remember it's weekend). And then it could be possible that you get an answer like '...please make a screendump and send it in...' followed by a detailed 'who-to-make-a-screendump'.


    Regards!


    I am just and only a BD customer. Nothing connects me to BD (apart from many unanswered mails).


    And i am angry and frustrated. THIS IS NOT THE WAY TO INTERACT WITH CUSTOMERS: THAT IS SIMPLY +-+-+-+ (would be censored anyway).


    But there is one thing to say: BD seems to have a very good antivirus-engine and it works very fast and reliable (if it works). Just customers are left alone and that is absolutely not acceptable.


    :-(

This discussion has been closed.