Windows XP SP3, time synchronization and excessive traffic consumption
Yesterday, a friend of mine asked me to help him with a small problem — after installing SP3, Internet traffic began to leak mysteriously, and there was no apparent reason for this. Surfing was uncomfortable, ICQ did not connect, and indeed any programs using Internet lagged. Standard excuses such as "check for viruses," "see the processes," etc. did not help, so I had to personally visit for a visit.
Indeed, there was no virus and other misfortune on the examined car. But Casper briskly reported on the established connection with the IP of the type 207.46.xxx.yyy and the intensive exchange of traffic in both directions (and only Casper, no other installed utilities did not report anything). In total, in a couple of days, about 5 GB was received and a little more than 3 GB was sent !!! Search by IP in the IANA base yielded interesting results:
"NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET »
those. from the “well-known software giant” subnet =)
Google also informed that an NTP server is located on this type of IP (I didn’t want to download / install any additional utilities for viewing ports). It would seem - that's it! We climb into the time synchronization settings, select another NTP server and ... see the same intense traffic exchange, but with another host = (Only a complete shutdown of synchronization turned out to be a way out !!! That's it ...
About SP3 and so not always flattering reviews go, and now another bug in his piggy bank. It is possible, of course, that the case is single. Nevertheless, I ask Habravchan to repulse — have you experienced any such problems ?!
')
PS: Google search did not give anything concrete on this issue.
ZZY: maybe I was looking bad ?!
Indeed, there was no virus and other misfortune on the examined car. But Casper briskly reported on the established connection with the IP of the type 207.46.xxx.yyy and the intensive exchange of traffic in both directions (and only Casper, no other installed utilities did not report anything). In total, in a couple of days, about 5 GB was received and a little more than 3 GB was sent !!! Search by IP in the IANA base yielded interesting results:
"NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET »
those. from the “well-known software giant” subnet =)
Google also informed that an NTP server is located on this type of IP (I didn’t want to download / install any additional utilities for viewing ports). It would seem - that's it! We climb into the time synchronization settings, select another NTP server and ... see the same intense traffic exchange, but with another host = (Only a complete shutdown of synchronization turned out to be a way out !!! That's it ...
About SP3 and so not always flattering reviews go, and now another bug in his piggy bank. It is possible, of course, that the case is single. Nevertheless, I ask Habravchan to repulse — have you experienced any such problems ?!
')
PS: Google search did not give anything concrete on this issue.
ZZY: maybe I was looking bad ?!
Source: https://habr.com/ru/post/27128/
All Articles