Re: pc is compromised

2014-03-16 Thread ybed0
I do not know how to thank you! I am trying snort wireshark etc. to solve, and did not even know the existence of these tools LOL Maybe I overdid it with the paranoia. I apologize for disturbing the list. So you say that I do not have to worry too much, I'll try. Again, thank you :)

Re: pc is compromised

2014-03-16 Thread ybed0
I logged the traffic with wireshark, http://stashbox.org/1440698/wireshark and simultaneously the output of lsof http://stashbox.org/1440699/lsof and the output of netstat-anp http://stashbox.org/1440700/netstat I had nothing running (eg browsers or other clients). What could it be?

Re: pc is compromised

2014-03-15 Thread ybed0
all 3 links arew empty? Can you see the files? As you seem logs? I put back the links to safety here is the log of wireshark, attach the files that are pcapng this and 'the newly connected PC (here I'm using google dns) http://stashbox.org/1438705/start and this' when I start firefox and go

Re: pc is compromised

2014-03-15 Thread ybed0
all 3 links arew empty? sorry, I uploaded a wrong service here is the log of wireshark, attach the files that are pcapng this and 'the newly connected PC (here I'm using google dns) stashbox.org/1438705/start and this' when I start firefox and go to google.com stashbox.org/1438686/firefox t

Re: pc is compromised

2014-03-15 Thread ybed0
here is the log of wireshark, I removed some packages that reported the mac andress, attach the files that are pcapng this and 'the newly connected PC (here I'm using google dns) https://filetea.me/t1s9VaxuNRWQAWOftoZ1foOUg and this' when I start firefox and go to google.com https://filetea.me/t

pc is compromised

2014-03-14 Thread ybed0
Hello, I fear that my home PC is compromised, every now and then starts to open a lot of connection and sends packets (about 200kbs) to certain ip addresses (eg google) without me doing anything. Using debian 7 and I tried to reinstall the distro several times, taking care to remove all service