constant network activity with Linksys Router

[radbasa]

Anybody else use the Linksys Router BEFSRx1?
I got mine last week and have noticed some network activity that wasn't there before. The BEFSRx1 replaced a PC running Win2000 ICS. Now that PC is not part of the network anymore, but the 2 clients still are. The two clients seem to be interacting with the router at a steady 44kbps up/44kbps down. It does seem to be confined within my local network, for the WAN Act light doesn't show any activity. Furthermore, one of my svchost.exes constantly eat up CPU cycles (about 15-20%). I've tried using the router's default NAT mode and the Zone Alarm Pro mode.
I've found ways to stop the stream and svchost though:
1. remove patch cable to DSL bridge
2. disconnect the PPPoE session
3. in Zone Alarm, deny Generic Host Process for Win32 Services (svchost.exe) access to the Trusted Zone (which blocks access to the Internet as well)

I'm fearing this could be a trojan, but it isn't going out to the Internet nor is anything going back in. NAV2002 can't detect anything. Tried Trojan Remover too.

Help

[AllGamer]

you are right that is not normal activity.

it smells like SPY ware.

run Ad-Aware

http://www.lavasoftusa.com/downloads.html

that should take care of those hidden network spies

by the way i do have Linksys

[radbasa]

it wasn't spyware. the network activity's still there

[jmichna]

This is a curious one. You could always go back and remove all the network components within the network settings (clients, protocols and devices) and rebuild you little LAN. At least you'd start out clean.

I run Linksys BEFSR41, on three pcs (all running WinXPPro... one is dual boot XP/98se), all using ZAPro, and don't get anything like you describe. Do you have any other NT services running, say like some sort of indexing of a mapped PC "A" by PC "B"?
jmichna

[BipolarBill]

XP has various modules which facilitate networking and maintain connectivity over a LAN. There is always some level of communication going on there - especially if you load freeware "helper" utilities on the system. Try killing your firewall - it may be responsible.