[SlicketyRickety]

Ok, so 3 days ago im browsing the internet when it get real slow, so i check my network someone is in, so i try to remove them but can't. Then i unplug the router from the wall and reboot so the person is gone, i go in turn of all wireless, now i have noticed these past day my upload speed is half of what it used to be was @ 2,743upload now its always at 1,285 i get DC'ed from games left and right and my internet is real sluggish. i have reset modem and router and nothing has worked, is there a way they could still be using my internet connection even with wireless off? I am really noob when it comes to networking thanks.

 

[stanrc]

If your wireless network is off then they aren't leaching your network unless they are plugged into your router (and you would probably have noticed that

)

Make sure you set up WPA encryption on your router so that doesn't happen.

 

[SlicketyRickety]

Quote:

Originally Posted by stanrc If your wireless network is off then they aren't leaching your network unless they are plugged into your router (and you would probably have noticed that ) Make sure you set up WPA encryption on your router so that doesn't happen.

Ok thanks, also would they have been able to get my IP in anyway and use it that way and if so would it affect me?

 

[trogalicious]

also, I often will limit the range of IP's that my router will assign to the number of trusted machines that I have in my house. I had a few leechers trying to get on a while ago.

 

[SlicketyRickety]

Quote:

Originally Posted by trogalicious also, I often will limit the range of IP's that my router will assign to the number of trusted machines that I have in my house. I had a few leechers trying to get on a while ago.

Hmm, its wierd because now i have to click a web page then click stop then click again for it to go in, even if i click a link.

 

[trogalicious]

Quote:

Originally Posted by SlicketyRickety Hmm, its wierd because now i have to click a web page then click stop then click again for it to go in, even if i click a link.

It may not have anything to do with it, but have you ran any anti-spyware/malware/hijackthis/AVG since it happened?

It oculd be that you have a browser hijacker rolling since the visitor came in.

 

[SlicketyRickety]

Quote:

Originally Posted by trogalicious It may not have anything to do with it, but have you ran any anti-spyware/malware/hijackthis/AVG since it happened? It oculd be that you have a browser hijacker rolling since the visitor came in.

Haven't tried this yet, any ideas of a good free program that scans for this?

seems like i cant see him on the network but hes there. This is not good because i dont even understand the network lingo

 

[trogalicious]

Quote:

Originally Posted by SlicketyRickety Haven't tried this yet, any ideas of a good free program that scans for this? seems like i cant see him on the network but hes there. This is not good because i dont even understand the network lingo

you could...

click start/run/command... type in netstat and take a look. That should, if I'm not mistaken, give you a list of networked connections? If netstat doesn't, maybe it's net user.

...beyond this, you should be able to see the list of users connected to your network from your router setup page. If he has taken your IP on the unsecured network, it's going to cause "there is a duplicate IP on your network" errors.

What router are you running?

 

[Lt.JD]

use malwarebytes to scan for malware: http://download.cnet.com/Malwarebyte...-10804572.html

 

[SlicketyRickety]

Quote:

Originally Posted by trogalicious you could... click start/run/command... type in netstat and take a look. That should, if I'm not mistaken, give you a list of networked connections? If netstat doesn't, maybe it's net user. ...beyond this, you should be able to see the list of users connected to your network from your router setup page. If he has taken your IP on the unsecured network, it's going to cause "there is a duplicate IP on your network" errors. What router are you running?

Old school-D-link DI-524

Quote:

Originally Posted by Lt.JD use malwarebytes to scan for malware: http://download.cnet.com/Malwarebyte...-10804572.html

Thanks!

 

[stanrc]

Quote:

Originally Posted by trogalicious you could... click start/run/command... type in netstat and take a look. That should, if I'm not mistaken, give you a list of networked connections? If netstat doesn't, maybe it's net user. ...beyond this, you should be able to see the list of users connected to your network from your router setup page. If he has taken your IP on the unsecured network, it's going to cause "there is a duplicate IP on your network" errors. What router are you running?

netstat will show active connections on his computer. But if someone is just on his network (not communicating with his PC) then he won't see it. Netuser shows user accounts on the computer

Open up your router management and look at is DHCP list and see who is connected.

 

[SlicketyRickety]

On another note, since my 790i MoBo has 2 ethernet ports could i eliminate the router all together and and just daisy chain them?

it found some hijack crap... in the registry even.

 

[trogalicious]

Quote:

Originally Posted by stanrc netstat will show active connections on his computer. But if someone is just on his network (not communicating with his PC) then he won't see it. Netuser shows user accounts on the computer Open up your router management and look at is DHCP list and see who is connected.

I knew I was a little off on that, thanks.

Also, with your dlink, when you go into router setup.. the dhcp is on the bottom left of your screen. Click that. On the very bottom, it has your client list.

your screen should look like this: http://support.dlink.com/emulators/di524/h_dhcp.html

you can limit the users that are connected by limiting the IP range on your router.

 

[stanrc]

Yes you could, just bridge your connections. What did it find? Most anti-malware programs will always find something, even if its just cookies or something like that.

 

[SlicketyRickety]

Quote:

Originally Posted by stanrc Yes you could, just bridge your connections. What did it find? Most anti-malware programs will always find something, even if its just cookies or something like that.

Its called: HiJack.displayproperties

Found it in both computers, deleted restarted and changed nothing, im going to see if i eliminate the router what happens.

 

[trogalicious]

Quote:

Originally Posted by SlicketyRickety Its called: HiJack.displayproperties

http://www.malwarebytes.org/malwaren...playProperties

apparently, it can be whitelisted. Is that all that malwarebytes found?

 

[TheSandman]

Never had this issue, I keep mac address filtering turned on, except I dont ban the mac address, unless I say that Mac Address can connect you cant touch my router. Is rather funny when company comes over with there laptops though, cause then I tell them if they want access tell me mac address, and most of the people I hang out with, know how to check email, myspace and log on to yahoo messenger

 

[stanrc]

I hope you also use some sort of encryption. If you are only mac filtering then all your traffic is wide open. I could sit outside your house and sniff all your traffic (read: passwords). Not to mention I could bypass your mac filtering in about 2 seconds, maybe less.

 

[SlicketyRickety]

Quote:

Originally Posted by trogalicious http://www.malwarebytes.org/malwaren...playProperties apparently, it can be whitelisted. Is that all that malwarebytes found?

Thats all it found, i just removed the router and daisy chained the 790i to the 780 my score is normal again



But... the second computer that is recieving the daisy chained connection wont find it for some reason. It just says unidentified network even when i renew the ip

 

[SlicketyRickety]

I would be good if i get passed the unidentified network on computer 2. I have them set to private, all options on for sharing, and it cant find an IP from the main computer am i missing a step? its like this

mainPC-------------Switch---------------gateway-------internet
|
|
|
|
SecondPC----------Switch

line connects from switch to switch