Do you use the Google public DNS? 8.8.8.8 or 4.4.4.4?
On Fri, Mar 14, 2014 at 9:47 PM, <yb...@hushmail.com> wrote: > Hello, > > I fear that my home PC is compromised, every now and then starts to open a > lot of connection > and sends packets (about 200kbs) to certain ip addresses (eg google) without > me doing anything. > > Using debian 7 and I tried to reinstall the distro several times, taking > care to remove all services > by checking with the nmap over 65,000 doors, also the dhcp service is > uninstalled. > The machine is behind a modem / router with proprietary firmware and the > things I can do are quite a few there. > > With wireshark I think of strange packets do not arrive as soon as > connected, > so I think the compromise starts when I start the browser. Iceweasel and > chromium, seems indifferent. > > I do not know what to do, any advice would help me, > I believe that those who succeed in the attack can do whatever you want with > my PC. > (My suspicion is some sort of ip / dns spoofing but it could be more, I > do not understand) > > Sorry for my English
