SEARCH

The How-To Geek Forums Have Migrated to Discourse

How-To Geek Forums / Windows 7

Internet activity without a browser on

(37 posts)
  • Started 3 years ago by popscott
  • Latest reply from fusionx22
  • Topic Viewed 8655 times

popscott
Posts: 16

I have a laptop that sucks my hughes.net usage (200mb) when I connect the

network adapter, but do not have a browser on. It is a

svchost netsvcs that is causing it. 67-148-147-128.dia.static.qwest.net

is coming up in the task manager resourse monitor screen. I can kill "end

process" the svchost at least a couple of times and the problem goes away.

I have msconfiged and the start page and stopped any un-needed programs.

Where does it getting the qwest.net addy as I can do a detailed search and

nothing comes up. Nothing appears in the Registry either (regedit)

Windows update is turned off and Nortons update and pulse checker is turned

off.

HiJack this log at

http://popscott.webs.com/hijackthis.txt

processes running at

http://popscott.webs.com/laptop.jpg

Thanks in advance

Posted 3 years ago
Top
 
whs
Posts: 17584

This is very strange because 67-148-147-128 is a Dutch soccer betting network that has a node in the US.
http://www.robtex.com/ip/67.148.147.128.html

Depending on the AV program you are using, you may be able to set it on the block list.

Posted 3 years ago
Top
 
popscott
Posts: 16

Actually when it resets itself after I "end process", it will vary the values to these (seems random) and others. 67-148-147-107
67-148-147-123. Also the qwest.net is a high speed ISP

Norton AV here. What do I put in to get this blocked, just qwest.net or the whole number static qwest thingy

Posted 3 years ago
Top
 
whs
Posts: 17584

Not sure, try both. Cannot hurt.

Posted 3 years ago
Top
 
Kelen
Posts: 283

I suggest you take a look through services and disable anything strange.

Posted 3 years ago
Top
 
popscott
Posts: 16

I have these services running when this is happening

http://popscott.webs.com/1.jpg

I get an access denied if I try top stop any of these services so I can't tell which one is doing it.

Posted 3 years ago
Top
 
ispalten
Posts: 6259

Might want to read this page, http://www.clickonf5.org/micro.....ction/7261

You can also run from an Elevated Command Prompt NETSTAT -o -b, it will show who is using the internet and where connected too.

Irv S.

Posted 3 years ago
Top
 
popscott
Posts: 16

the resource monior is how I got the static qwest.net stuff. I'm curious as to where I can find where the static.qwest.net comes from. I can search my computer and registry and can find no reference

Posted 3 years ago
Top
 
ispalten
Posts: 6259

Did you TRY the NETSTAT command?

Irv S.

Posted 3 years ago
Top
 
raphoenix
Posts: 14920

popscott,

http://commandwindows.com/index.html
http://ss64.com/index.html

***Run NETSTAT as ispalten (Irv S.) Recommends !!!!

http://commandwindows.com/netstat.htm
http://ss64.com/nt/netstat.html

Regards,
Rick P.

Posted 3 years ago
Top
 
popscott
Posts: 16

Elevated Command Prompt what does it mean.... when I put NETSTAT -o -b in the regular command prompt is says I need to elevate it, which I don't know what that means? All the links shown, I do not see how to get my command prompt elevated.

As for the http://www.clickonf5.org link above... the article describes the task manager, resource monitor that I ALREADY have been getting the static.qwest.net information from. It is the internet addy (qwest.net) that has the same PID number as the svchost that comes up and starts downloading. If I "end process" the svchost with that PID number at least 2 times, then the problem, svchost, and qwest.net go away. I get the same results when I run the "Process Explorer" program, TCPViewer program, and autorun program from Microsoft. I'm seeing the Netstat may bring me the same results as I already have.

Posted 3 years ago
Top
 
LH
Posts: 20002

Right click on your Command Prompt shortcut, and select, Run as Administrator.

Posted 3 years ago
Top
 
popscott
Posts: 16

http://popscott.webs.com/netstat.jpg
is netstat screenshot

Posted 3 years ago
Top
 
ispalten
Posts: 6259

Check here ==> http://www.robtex.com/dns/www.tvb.com.hk.html

I assume QWEST is NOT your ISP?

Do an IPCONFIG /ALL in a command prompt and post results please?

Irv S.

Posted 3 years ago
Top
 
popscott
Posts: 16
 
ispalten
Posts: 6259

Very odd setting for the DNS servers? One to your Router, another to I suppose your ISP, DIRECTPC.COM?

Remove the one in your network settings to the Router... let it default to what it finds.

Irv S.

Posted 3 years ago
Top
 
popscott
Posts: 16

Am I unistalling this in the wirless internet connection properties screen

http://popscott.webs.com/adapter1.jpg

Also I have references to 2 adapters.... one WLAN minicard and a Wifi miniport adapter (disabled), is this correct

http://popscott.webs.com/adapter2.jpg

Posted 3 years ago
Top
 
ispalten
Posts: 6259

The PROPERTIES for TCP/IPv4 need to have the DNS settings removed and let it get the DNS servers automatically. I suspect it now has the 192.xxx.xxx.xxx address in it.

Irv S.

Posted 3 years ago
Top
 
popscott
Posts: 16

http://popscott.webs.com/dns.jpg

Is this what its suppose to look like..... it did not fix the the problem, after restart

It had a gateway value of 168.192.0.3 that I deleted in IP setting screen

DHCP enabled is in the IP address , not auto config, which won't let me change it

Posted 3 years ago
Top
 
ispalten
Posts: 6259

No, on the PROPERTIES you used ADVANCED to get to the one shown. There the DNS should be blank and checked to get automatically (Obtain DNS Server addresses automatically). On the property you are showing, the IP Settings tab should show DHCP enabled.

The Gateway should also be blank, but if you had the IP Address of the Router in there, it would be OK. That would be 192.168.1.1, not what you had.

Irv S.

Posted 3 years ago
Top
 



Topic Closed

This topic has been closed to new replies.