Home > Uncategorized > VStuff – stuffs up your bandwidth

VStuff – stuffs up your bandwidth

Recently I’ve often been finding my internet connection really, really slow. Looking at my bandwidth usage, I saw that the upstream was flat out – 512kbps plus – and so any web browsing, email, etc. was slow. However, if I tried a speed tester, or watched video, this was usually fine – as my downstream, and internet connection, was OK.

I killed all programs on my computer that were associated with the internet: Orb, Vstuff, Dropbox… they all went. Still, the stream of data going out of my system continued. I feared a trojan, something stealing my data…

Finally, I got round to installing Wireshark on my desktop. Fired it up, and I was watching every single packet that was going into and out of my desktop connection. And almost all were over SSL to a 70. address. Ouch!

So – I did an nslookup on that 70. address, and it came up with a server at Steek. Now, Steek are a French company (bought by F-Secure last year) that do online backup – and who Virgin Media use for their VStuff service. So – evidently, it was Steek who was burning up my upstream sending all my data to their servers. Despite it saying my account was 90% full, and having done this for weeks. What were they sending??

It’s more worrying that it took my skills as an IT Networking guy to discover what was going on. Most users would just notice the slow internet, and wonder why. The VStuff app has little to say what it’s doing. And – note – I had killed the app, and the tray icon, and yet somewhere in the bowls of the system, a hidden service kept sending the data.

I’ve since removed the app, and I hope it’s worked. If I see that upstream surge again, I’ll be even more worried!

Advertisements
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: