Unplugging the cable won't buy you much because the activity is happening when you use it, also. The incoming stream isn't typical of malware. If something was being downloaded by malware, it would complete the operation and stop. If something is being uploaded, it wouldn't show up as incoming. It is likely a legitimate process on your computer. Non-productive traffic in the 1M range seems excessive, though, so let's see if we can figure out what it is. Re-enable anything you disabled in previous diagnostics. Try these next:
- Look in Task Manager, Services tab. The last column is labelled Group. Look for any entries LocalServiceAndNoImpersonation. If you find any and the Status is Running, stop them. See if the incoming stream stops.
- There are three safe modes: Safe Mode, Safe Mode with Networking, and Safe Mode with Command Prompt. Select Safe Mode with Networking and see if you get the incoming stream.
- Try a clean boot. This is similar to safe mode in that it limits what is loaded, but it loads more than the bare minimum for Windows to function. Follow these instructions: http://support.microsoft.com/kb/929135 Make notes of anything you disable so you can put it back later. See if you get the incoming stream in this mode.