Member Avatar for jayantroy

Hi,
I Am Having A Problem, Whenever I Connect To The Net, My Pc Starts To Send Huge Amounts Of Data - The Send Is Conts.
This Although I Havent Opened A Page Yet.
Once I Open Any Browser - Firefox Or Internet - No Site Opens Up.
I Have Tried - Spybot Which Says It Has Removed Some Spyware, Adaware, And Have Checked The Hosts File Also. All To No Effect.
I Require Some More Help Or I'll Have To Wash The Pc

  • 3 Contributors
  • 3 Replies
  • 125 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by zandiago

Dani AI

Generated

Quick, practical follow‑ups for the continuous outbound traffic scenario described. The fact the traffic stopped after you removed persistence entries is a good sign, but that doesn’t guarantee the system is clean. Replies from and point toward scanning and locking down persistence — the checklist below shows how to verify what was sending data, close the leak, and make a sensible recovery decision.

Immediate checks to map connections to processes:

  • If traffic is still happening, disconnect the PC from the network first.
  • From an elevated command prompt run these to see active connections and the owning PID, then identify the process:
    netstat -ano | findstr ESTABLISHED
tasklist /fi "PID eq <PID>"
  • Use a process/connection viewer to inspect the executable path, digital signature and open handles. Also run an autorun/persistence scanner to list services, scheduled tasks, drivers and registry run keys.

Deeper cleanup and verification:

  • Boot from a clean rescue environment or run a second-opinion on-demand scanner (from another clean PC if needed) and perform rootkit scans. If a process cannot be identified, quarantine the file and upload it to a multi-engine scanner for analysis.
  • Check the router: verify DNS and admin credentials, reset to factory defaults and update firmware if you see unexpected DNS entries or persistent redirects.
  • Backup only personal data (documents, photos) to external media and scan that backup before restoring. Do not copy executables or scripts without scanning.

Final cautions and next steps:

  • Change all important passwords using a known-clean device. Avoid online banking until the machine is confirmed clean.
  • If the infection shows signs of a kernel driver/rootkit or you cannot confidently remove it, plan a full OS reinstall and firmware/router reset.
  • Useful tools: Process Explorer, Autoruns and reputable on-demand scanners such as Malwarebytes (https://www.malwarebytes.com/).

Recommended Answers

All 3 Replies

Member Avatar for jayantroy

Thanks, I will download AVG.
In the meantime had downloaded HijackThis and ran it.
Did not send it for analysis but selectively deleted files (FIX) which I felt were not required by me. Made mistake and deleted MS Access file, but later reloaded this. Anyway the theft of my PC has stopped since yesterday.

Member Avatar for zandiago

You could also run/install spybot search and destroy which will not allow unauthorised changed to your registry.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.