Hello. Please help me out, I have reason to believe someone is trying to fuck with my computer.
I have noticed that my computer was acting a little strange (like I heard random clicks like when windows starts up a process) and that some unknown device had managed to connect to my router's network through wi-fi and was shown in my network window as "user-3" with MAC address that I traced on my router's info page. (00:16:44:9f:5e:e8)
My computer is connected through ethernet, so what I did right away is disabling the router's radio interface. This didn't make user-3 go away in the Window's networks page, so I disabled file sharing on the network and that got rid of it.
So then I tried netstat and then netstat -banfo and there were indeed some connections that seemed odd. One IP was transmitting from Taiwan for example and that seemed pretty odd.
I changed the router's password just recently so maybe someone successfully cracked my wi-fi password through that recent WPA expolit that was found? Or is it just windows acting up?
Please give me some more insight on this.
Also, i cannot filter out that MAC address nor I can change the wi-fi's password if the radio interface on my router is off, so I'm scared to turn it back on. What should I do?
00:16:44 is a mac address for lite-on devices, so that's probably a NAS or some computer using lite-on hardware,
random clicks are usually associated with hard drives, older ones can be louder as its searching for whatever data is required for stuff, got a old HDD as your boot drive?
as for connections on your router, they can be services that are located in other countries from your main PC.
I might be wrong but from what I can gather from your post it seems like you're being over paranoid about stuff and shouldn't worry about it.
[editline]2nd November 2017[/editline]
actually lite-on is from taiwan so that should clear that up
I think you should be safe, if it's the actually click sound you hear from Windows then a lot of adware does that, run a scan with Malwarebytes to get rid of it.
If you don't have any reason to share files/printers/resources with Windows workgroup, you can also disable network discovery and file sharing.
If the device is wired into your network, and you only have a single router, the device must be plugged into the router? Can you figure out what cables go where and find the device?
Sorry, you need to Log In to post a reply to this thread.
