Thread: Something getting downloaded in Background- Please Help

I am a bit perplexed about this situation.
I have BSNL Broadband. Whenever I start to browse in my Sony Vaio Laptop running genuine windows 7 Home Premium and pirated Office 2007 (all update disabled), the ShaPlus shows 3-5 times more usage.

But if I am reading a static page , that is not autorefreshing no more downloading is there. It is as if that malware is syncing my download activity with its downloads.

When I download through IDM ShaPlus shows a lot more.
One example is in 7 minutes I get 100MB file in IDM. But in the mean time I must have downloaded 300MB as shown by ShaPlus. At first I could not believe it. Because that would be like BSNL giving me 6Mbps instead of 2Mbps speed.
But when I check my usage at BSNL selfcare site it is according to ShaPlus.
I have disabled every update I found in Sony Vaio Care and Windows 7 Update etc.
But what makes the problem more confusing is the problem is non existent in my desktop that runs Windows XP.
By the way I am running Avast on both the Machines. But the problem is in Vaio.

I am really feeling helpless in this matter, though I was not born yesterday still I can not get to the bottom of this matter. I have scanned and rescanned.

Has anybody noticed this? Can anyone suggest me some software where in I can monitor what software is downloading almost simultaneously whenever I am downloading :P

Has anybody noticed this? Can anyone suggest me some software where in I can monitor what software is downloading almost simultaneously whenever I am downloading

A firewall will help you in this case. See which all process are accessing net and block them if you find them hostile.

This may help

http://www.indiabroadband.net/softwa...selection.html (IBF guide for Free Firewall selection)

Thanks for the early reply. I am going to implement it. But I have one point to add.
I also have a Micromax 7.2Mbps dongle + Aircel 3G sim combo, which when used in the above said Vaio Laptop, the usage is without any problem.

Are you sure that Shaplus is showing the same reading as BSNL site ? Check the correct adapter from Shaplus settings. Though I feel a firewall will work in your case. Don't assume your system to be safe and allow pre scanning of firewall.

Originally Posted by meetdilip

Are you sure that Shaplus is showing the same reading as BSNL site ?

Yes as the data downloaded is similar.
But what perplexes me most is how can I am downloading more than my max download speed of 2Mbps?

I have installed now Emsisoft Online Armor Free. In scan it has not found any odd software other than ChgSErvice.exe,IDMan.exe,Nerocheck.exe, Realtek Card Reader Icon Tool and ShaPlus.
So I am a bit disapponted as I know about ShaPlus, IDM and Nero. Just don't know about ChgService.
No idea if the culprit is amongst them anyways, installed it and now restarting

1.
CTRL+ALT+DEL Check applications/processes running.

Well Thanks a lot meetdilip
Right now I downloaded a 141MB file from mediafire via IDM and ShaPLus showed a download+upload of 150MB which is almost same. But earlier I had downloaded the set up file of Emsisoft Online Armor Free which is 21.61MB but ShaPlus showed a download of 70MB.
So I might be nit picking if I complain about the 10MB deficit. But I believe my main problem has taken care of by the firewall.
Thanks again.
And Btw install Firewall if you have not already

For INFO:

Online Armor Premium Firewall 5.1
Your Online Security Guard NEW!
Version 5.1.1.1395 - 11/1/201 21.62 MB Trial 30 days.
http://www.emsisoft.com/en/software/oa/

Another FREE application: about 17 MB.
http://www.filehippo.com/download_outpost_firewall
Download Outpost Firewall Free from FileHippo.com
2.
Another application file size is 105 MB.


Except MSE I have No resident Firewall /antimalware applications, and Shaplus is working OK.
FireFox/NoScript/ABplus used.

Always welcome

Sorry for my extra and premature enthusiasm. My problem is far from changed. It is still getting downloaded.
I am downloading a 30MB video from youtube, and Shaplus and BSNL site both are showing I am downloading 200MBs, that is insane.
I had Armor then I removed it and used Comodo, still no help.
Any other way to check?
Still my micromax data card with aircel 3g has no problem and its bandwidth use does not show in shaplus

Please help anybody.

Hope while using Online Armor, you checked which all apps are accessing net. Comodo too shows which one is accessing net. Block suspicious ones and see what happens. You must have allowed the rouge application by mistake.

Originally Posted by meetdilip

Hope while using Online Armor, you checked which all apps are accessing net. Comodo too shows which one is accessing net. Block suspicious ones and see what happens. You must have allows the rouge application by mistake.

Comod is showing following active connections
lsass.exe
services.exe
schost.exe
AvastSvc.exe
firefox.exe

These are the outbound active connections.
So only Internet download manager remains, which is a cracked version. So my logical approach would be to shut it down and download normally.
Can you give me link to a good IDM link that you might be using.
If not then OK, just let me know if I should suspect IDM as my normal browsing is becoming expensive without even downloading anything via IDM.
e.g normal yahoomail browsing for 3-5 emails costing me 10MB minimum.

As often happens with pirated/cracked software, malware is let in. Malware is very intelligent and hides itself brilliantly. A few years ago I too used to have pirated Windows, office, Norton, Nero, etc. I have moved to legal or open source/free software five years ago. I have never had such problems since then.

My suggestion is to you will be the same. It may look costly on the face but if you are slapped with a rs. 10,000 BSNL bill, you will realize that shortcuts usually end up as long routes. I may sound patronizing or holier-than-thou but believe me that I too learnt the hard way.

Run Windows in safe mode and check. Before changing IDM, make sure that it is the culprit. Download directly without IDM and see if there is any issue. According to today's standard, 30 MB/hour for browsing is normal. So 10 MB by Yahoo may be legitimate.

The above post is quite true. Most cracked software authors earn from malware hidden in it. People seldom spend their time and effort when they are not even distributed on their site or in their original name.

Also try blocking those processes one by one and see if there is any difference. Shaplus can be wrong if the adapter selected is not correct. I take your word for both Shaplus and BSNL show the same reading.

Originally Posted by meetdilip

Run Windows in safe mode and check. Before changing IDM, make sure that it is the culprit. Download directly without IDM and see if there is any issue. According to today's standard, 30 MB/hour for browsing is normal. So 10 MB by Yahoo may be legitimate.

The above post is quite true. Most cracked software authors earn from malware hidden in it. People seldom spend their time and effort when they are not even distributed on their site or in their original name.

Also try blocking those processes one by one and see if there is any difference. Shaplus can be wrong if the adapter selected is not correct. I take your word for both Shaplus and BSNL show the same reading.

Thanks for the input.
But I am talking about in and out of yahoomail in 2 minutes.
I have removed IDM, installed chrome, still the problem continues
Can Shaplus show more than what is being used?
I had only one cracked software, that was IDM.
I am trying to make and upload this downloading problem as a video in youtube shortly so people who might be thinking this to be wrong can see for themselves.

Presume you tried safe mode and stopped processes one by one. Is there any difference ?

Does BSNL site values correspond to Shaplus value in exact ? (This info is very important in solving the issue)

How do you use net ? WiFi or cable ? Try using cable mode and check.

I do not know how to embed the youtube video in here, please see this link

http://youtu.be/1WptAAoLZ8I
At the start of video it is 9.79MB on IDM and 58.18MB on Shaplus and at the end the values are 16MB and 81MB .

So when I download 6MBs, my system downloads 23MBs.
It is similar even after I have removed the cracked softwares

I do not have any download limit left of my 2.5GB limit. I have not used safe mode. I have removed the cracked softwares.
I will try to see if the shaplus and BSNL site's values match up, but there is a lag between actual use and server updation in BSNL care site, so it might take upto 24hours to see the data usage.
I have wifi, but it is same with cable also.
And my wifi is password protected too.

Now only 3g can make me busy

Did you cross check in BSNL Usage portal the data recorded.

which Interfaces you have selected in Shaplus/


Try NetworX.

Originally Posted by essbebe

Did you cross check in BSNL Usage portal the data recorded.

which Interfaces you have selected in Shaplus/


Try NetworX.

It has been 45 minutes since my last usage, but the BSNL Usage portal has not been updated yet. So I can only wait.

I do not have NetworX

You have not replied to the query which interfaces you had selected.

which Interfaces you have selected in Shaplus/

Download NetworX from

Bandwidth monitor, bandwidth speed test, bandwidth and traffic monitoring tool for Windows
Has a speed meter.
2.
No point in using Full quote immediately to preceding message.
EDIT and delete please.

Originally Posted by essbebe

You have not replied to the query which interfaces you had selected.

Download NetworX from

Bandwidth monitor, bandwidth speed test, bandwidth and traffic monitoring tool for Windows
Has a speed meter.

Thanks for the suggestion, here are the interfaces in attachments.
I am downloading NetworX now.