Hi,
I'm asking for a friend, but I know a lot of people on this BBS are in the know about this kind of stuff.

He's got a single computer hooked up to a cable modem and the ISP gives 5 GB a month in bandwidth. Last month he used 8GB and they charge an extra $20 for each additional GB. This turned into a problem when he got his bill. But I'm thinking about it and I don't know how even someone sitting at the computer constantly viewing web pages could use this much bandwidth. So, naturally, I suspect someone is using his computer as a network hard drive and uploading and downloading from it at odd times of day (since he leaves it on all the time) and is probably using a windows remote exploit to be undetected. Question is how do I look for dormant viruses or trogans that allow someone to use his connection this way? Also, there are of a lot of stuff against me here, such as he is using WINME and AOL... both known for being open to exploits. Thanks for any help,

Tom