Re: pc is compromised

To: debian-security@lists.debian.org
Subject: Re: pc is compromised
From: ybed0@hushmail.com
Date: Sat, 15 Mar 2014 14:10:35 +0100
Message-id: <[🔎] 20140315131036.752BB608D1@smtp.hushmail.com>
In-reply-to: <CALsfj6a85q+_zr-aw4cHHc1K2mwYkpPZatjEvCkgb_jkg3dZ3w@mail.gmail.com>
References: <20140314203008.789048E@bendel.debian.org> <20140314203013.A2CE6D2@bendel.debian.org> <[🔎] 20140314204722.60F832038E@smtp.hushmail.com> <[🔎] CALsfj6Z4AiWXYxfemBjOTcFu0pRdrjnp3iH2+Z=Lc+fNuhwfnA@mail.gmail.com> <20140314214050.31CFF2038C@smtp.hushmail.com> <CALsfj6a85q+_zr-aw4cHHc1K2mwYkpPZatjEvCkgb_jkg3dZ3w@mail.gmail.com>

here is the log of wireshark, I removed some packages that reported the mac andress, attach the files that are pcapng

this and 'the newly connected PC (here I'm using google dns)
https://filetea.me/t1s9VaxuNRWQAWOftoZ1foOUg

and this' when I start firefox and go to google.com
https://filetea.me/t1sV3uEy37JRU2y9ofZqvRhXA

this (the interesting and not too long) is the log before installing fresh, I had nothing open (services, browsers, etc.)
https://filetea.me/t1sEexcOWJvSnK1HLE9CLlSxw

Reply to:

Follow-Ups:
- Re: pc is compromised
  - From: Tomasz Ciolek <tmc@vandradlabs.com.au>

References:
- pc is compromised
  - From: ybed0@hushmail.com
- Re: pc is compromised
  - From: "Dimas Yudha P." <dhiemaz.mitnick@gmail.com>