While zone alarm and xolox are the only programs running, zone alarm tells me that I´m uploading approx 0,5mb/s at the same time xolox Upload transfer window shows very low activity eg 8kb/s.

Am I hacked, is it possible that hackers use xolox as a cover?

I am behind xp´s firewall and use hi security with zone alarm.