How do I find out what programs are sending/receiving packets?

[AmdInside]

Hello. I have a laptop the network activity light goes on and off every second. I am concerned I may have some type of virus or malware that is sending information from my computer to the internet. Is there a utility which lists which files and location of files that are sending or receiving packets to/from the internet? I am running Windows Vista 32-bit btw. Thanks.

 

[mechBgon]

You could start with Windows Defender. It's on the Start > All Programs menu.

In Defender, click "Tools" at the top, then click "Software Explorer" and select "Network connected programs," and now click the "Show for all users" and approve the UAC prompt.

Another option: open Task Manager, go to the Performance tab, and click the Resource Monitor button and approve the UAC prompt. Look at the Network tab :camera: of Resource Monitor.

If you want more insight into the nature of the traffic itself, you can try out Microsoft Network Monitor 3.1. PM me if you need help with it (it can be a little daunting on the first try).

edit: I see they have a point-and-shoot variant called NM3.1 OneClick that installs NM3.1 and fires off a capture session, so you might try that. Once it's capturing, you can put this into the Display Filter box and click Apply, to reduce the amount of info displayed:

HTTP.Request OR DNS

Also (duh) scan for malware. F-Secure has a decent online scanner if you want a second opinion to supplement your installed antivirus (if any).

 

[AmdInside]

Thank you so much. That helped me find the malware that was connecting to the internet. I was able to get rid of it. Thanks again.

 

[mechBgon]

Originally posted by: AmdInside
Thank you so much. That helped me find the malware that was connecting to the internet. I was able to get rid of it. Thanks again.

excellent