Hi,
About four weeks ago I noticed that even when I wasn't searching webpages or downloading content, the connection icon was flashing merrily away and downloading data. I experimented by disconnecting and re-connecting to the internet but not opening internet explorer and sure enough something begins to download as soon as I connect and continues downloading for hours if I let it. (it's not Windows updates or Virus definitions as they are all up to date).
After I do these experiments I have done a Windows search and checked all the files modified within that period but it just seems to be Windows files modified. I've tried to Block everything possible via Norton Program Control but end up just blocking myself from the internet. I've tried turning on Advanced Events Monitoring but nothing unusual pops up apart from when I try to access the internet, which is what I would expect.
I've also checked security history and the only "Medium" severity block relates to a Norton Internet Security file - \Engine\16.8.0.41\ccSvcHst.exe
I am guessing there must be a way to find out what site it is connecting to and blocking it, but I don't know how. Anybody got any ideas cos it's making my slow dial up even slower having to compete with a constant background download. There are no other ill effects from this problem that I have noticed.
Thanks heaps, Paul
[edit: changed subject from "ghost download" as to not confuse with Norton Ghost]