Do you use the Google public DNS? 8.8.8.8 or 4.4.4.4?On Fri, Mar 14, 2014 at 9:47 PM, <ybed0@hushmail.com> wrote:
Hello,
I fear that my home PC is compromised, every now and then starts to open a lot of connection
and sends packets (about 200kbs) to certain ip addresses (eg google) without me doing anything.
Using debian 7 and I tried to reinstall the distro several times, taking care to remove all services
by checking with the nmap over 65,000 doors, also the dhcp service is uninstalled.
The machine is behind a modem / router with proprietary firmware and the things I can do are quite a few there.
With wireshark I think of strange packets do not arrive as soon as connected,
so I think the compromise starts when I start the browser. Iceweasel and chromium, seems indifferent.
I do not know what to do, any advice would help me,
I believe that those who succeed in the attack can do whatever you want with my PC.
(My suspicion is some sort of ip / dns spoofing but it could be more, I do not understand)
Sorry for my English