Infiltrated?

990 Views 39 Replies 9 Participants Last post by Lige, Mar 16, 2009

SlicketyRickety

Discussion Starter · Mar 16, 2009

Ok, so 3 days ago im browsing the internet when it get real slow, so i check my network someone is in, so i try to remove them but can't. Then i unplug the router from the wall and reboot so the person is gone, i go in turn of all wireless, now i have noticed these past day my upload speed is half of what it used to be was @ 2,743upload now its always at 1,285 i get DC'ed from games left and right and my internet is real sluggish. i have reset modem and router and nothing has worked, is there a way they could still be using my internet connection even with wireless off? I am really noob when it comes to networking thanks.

1 - 20 of 40 Posts

stanrc

· #2 · Mar 16, 2009

If your wireless network is off then they aren't leaching your network unless they are plugged into your router (and you would probably have noticed that

)

Make sure you set up WPA encryption on your router so that doesn't happen.

See less See more

SlicketyRickety

Discussion Starter · #3 · Mar 16, 2009

2

Quote:

Originally Posted by stanrc

View Post

If your wireless network is off then they aren't leaching your network unless they are plugged into your router (and you would probably have noticed that

)

Make sure you set up WPA encryption on your router so that doesn't happen.

Ok thanks, also would they have been able to get my IP in anyway and use it that way and if so would it affect me?

See less See more

trogalicious

· #4 · Mar 16, 2009

also, I often will limit the range of IP's that my router will assign to the number of trusted machines that I have in my house. I had a few leechers trying to get on a while ago.

SlicketyRickety

Discussion Starter · #5 · Mar 16, 2009

Quote:

Originally Posted by trogalicious

View Post

also, I often will limit the range of IP's that my router will assign to the number of trusted machines that I have in my house. I had a few leechers trying to get on a while ago.

Hmm, its wierd because now i have to click a web page then click stop then click again for it to go in, even if i click a link.

See less See more

trogalicious

· #6 · Mar 16, 2009

Quote:

Originally Posted by SlicketyRickety

View Post

Hmm, its wierd because now i have to click a web page then click stop then click again for it to go in, even if i click a link.

It may not have anything to do with it, but have you ran any anti-spyware/malware/hijackthis/AVG since it happened?

It oculd be that you have a browser hijacker rolling since the visitor came in.

See less See more

SlicketyRickety

Discussion Starter · #7 · Mar 16, 2009

2

Quote:

Originally Posted by trogalicious

View Post

It may not have anything to do with it, but have you ran any anti-spyware/malware/hijackthis/AVG since it happened?

It oculd be that you have a browser hijacker rolling since the visitor came in.

Haven't tried this yet, any ideas of a good free program that scans for this?

seems like i cant see him on the network but hes there. This is not good because i dont even understand the network lingo

See less See more

trogalicious

· #8 · Mar 16, 2009

2

Quote:

Originally Posted by SlicketyRickety

View Post

Haven't tried this yet, any ideas of a good free program that scans for this?

seems like i cant see him on the network but hes there. This is not good because i dont even understand the network lingo

you could...

click start/run/command... type in netstat and take a look. That should, if I'm not mistaken, give you a list of networked connections? If netstat doesn't, maybe it's net user.

...beyond this, you should be able to see the list of users connected to your network from your router setup page. If he has taken your IP on the unsecured network, it's going to cause "there is a duplicate IP on your network" errors.

What router are you running?

See less See more

Lt.JD

· #9 · Mar 16, 2009

use malwarebytes to scan for malware: http://download.cnet.com/Malwarebyte...-10804572.html

Reactions: 1

SlicketyRickety

Discussion Starter · #10 · Mar 16, 2009

3

Quote:

Originally Posted by trogalicious

View Post

you could...

click start/run/command... type in netstat and take a look. That should, if I'm not mistaken, give you a list of networked connections? If netstat doesn't, maybe it's net user.

...beyond this, you should be able to see the list of users connected to your network from your router setup page. If he has taken your IP on the unsecured network, it's going to cause "there is a duplicate IP on your network" errors.

What router are you running?

Old school-D-link DI-524

Quote:

Originally Posted by Lt.JD

View Post

use malwarebytes to scan for malware: http://download.cnet.com/Malwarebyte...-10804572.html

Thanks!

See less See more

stanrc

· #11 · Mar 16, 2009

Quote:

Originally Posted by trogalicious

View Post

you could...

click start/run/command... type in netstat and take a look. That should, if I'm not mistaken, give you a list of networked connections? If netstat doesn't, maybe it's net user.

...beyond this, you should be able to see the list of users connected to your network from your router setup page. If he has taken your IP on the unsecured network, it's going to cause "there is a duplicate IP on your network" errors.

What router are you running?

netstat will show active connections on his computer. But if someone is just on his network (not communicating with his PC) then he won't see it. Netuser shows user accounts on the computer

Open up your router management and look at is DHCP list and see who is connected.

See less See more

SlicketyRickety

Discussion Starter · #12 · Mar 16, 2009

On another note, since my 790i MoBo has 2 ethernet ports could i eliminate the router all together and and just daisy chain them?

it found some hijack crap... in the registry even.

trogalicious

· #13 · Mar 16, 2009

Quote:

Originally Posted by stanrc

View Post

netstat will show active connections on his computer. But if someone is just on his network (not communicating with his PC) then he won't see it. Netuser shows user accounts on the computer

Open up your router management and look at is DHCP list and see who is connected.

I knew I was a little off on that, thanks.

Also, with your dlink, when you go into router setup.. the dhcp is on the bottom left of your screen. Click that. On the very bottom, it has your client list.

your screen should look like this: http://support.dlink.com/emulators/di524/h_dhcp.html

you can limit the users that are connected by limiting the IP range on your router.

See less See more

stanrc

· #14 · Mar 16, 2009

Yes you could, just bridge your connections. What did it find? Most anti-malware programs will always find something, even if its just cookies or something like that.

SlicketyRickety

Discussion Starter · #15 · Mar 16, 2009

Quote:

Originally Posted by stanrc

View Post

Yes you could, just bridge your connections. What did it find? Most anti-malware programs will always find something, even if its just cookies or something like that.

Its called: HiJack.displayproperties

Found it in both computers, deleted restarted and changed nothing, im going to see if i eliminate the router what happens.

See less See more

trogalicious

· #16 · Mar 16, 2009

Quote:

Originally Posted by SlicketyRickety

View Post

Its called: HiJack.displayproperties

http://www.malwarebytes.org/malwaren...playProperties

apparently, it can be whitelisted. Is that all that malwarebytes found?

See less See more

TheSandman

· #17 · Mar 16, 2009

Never had this issue, I keep mac address filtering turned on, except I dont ban the mac address, unless I say that Mac Address can connect you cant touch my router. Is rather funny when company comes over with there laptops though, cause then I tell them if they want access tell me mac address, and most of the people I hang out with, know how to check email, myspace and log on to yahoo messenger

stanrc

· #18 · Mar 16, 2009

I hope you also use some sort of encryption. If you are only mac filtering then all your traffic is wide open. I could sit outside your house and sniff all your traffic (read: passwords). Not to mention I could bypass your mac filtering in about 2 seconds, maybe less.

SlicketyRickety

Discussion Starter · #19 · Mar 16, 2009

2

Quote:

Originally Posted by trogalicious

View Post

http://www.malwarebytes.org/malwaren...playProperties

apparently, it can be whitelisted. Is that all that malwarebytes found?

Thats all it found, i just removed the router and daisy chained the 790i to the 780 my score is normal again

But... the second computer that is recieving the daisy chained connection wont find it for some reason. It just says unidentified network even when i renew the ip

See less See more

SlicketyRickety

Discussion Starter · #20 · Mar 16, 2009

I would be good if i get passed the unidentified network on computer 2. I have them set to private, all options on for sharing, and it cant find an IP from the main computer am i missing a step? its like this

mainPC-------------Switch---------------gateway-------internet
|
|
|
|
SecondPC----------Switch

line connects from switch to switch

1 - 20 of 40 Posts

This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.