Internet CAP stolen

[Eyenstyn]

Hi, i recently found data being uploaded without my permission to an unknown user. That person/virus/spyware has uploaded about 2 gigs. Has anyone had a similar experience or know what the problem could be?

Thanx.

 

[HavocXphere]

Install a proper firewall and change your router password and your internet a/c password.

 

[mercurial]

I got this from a post a while back...

This is the correct procedure for any abuse case, should you want to take it further...

You need to open a Police case for bandwidth theft or possible fraud. Once the case number has been issued, you need to request the Investigating Police Officer to get a Sec 205 subpoena made out in the name against Telkom SA Ltd. On the Sec 205 you may request the following

- The telephone numbers used to access the ADSL platform with the username: "USERNAME@ISP";
- The registered owner details of the identified telephone numbers; and
- the physical installation addresses of the identified telephone numbers.

Once the Sec 205 has been issued, the Police Officer needs to hand the Sec 205 to their Technical Support Unit for delivery upon Telkom SA Ltd.

And do what HavocXphere said.

 

[lilGr]

Install a proper firewall and change your router password and your internet a/c password.

+1

 

[hawker]

Hi, i recently found data being uploaded without my permission to an unknown user. That person/virus/spyware has uploaded about 2 gigs. Has anyone had a similar experience or know what the problem could be?

Thanx.

We had a similiar problem where another person had gained access to our account details (username and password) we contacted the ISP and were told to report it to the SAPS after getting a reference number from Telkom.

Just change all your passwords(router,ADSL account, home network) etc.
Something with lots of randome characters e.g. H8*njs@hwJA1X*m

 

[Eyenstyn]

Thanx guys for your replies. I am going to change my login details but i have a problem with router login. I tried changing the login details but it reverts back to the default which is admin. I have said save changes and restart router but it doesnt work. Do any of u perhaps know how to change it?

My comp works fine in ubuntu with the occasional bandwidth drop but after a restart its back to normal.

 

[HavocXphere]

TI am going to change my login details but i have a problem with router login. I tried changing the login details but it reverts back to the default which is admin. I have said save changes and restart router but it doesnt work. Do any of u perhaps know how to change it?

What router? Just change the passwords, not the username.

My comp works fine in ubuntu

Its highly unlikely that Ubuntu caught a virus/adware/hacked. Is there also a Windows copy installed or just ubuntu?

As for firewalls, I've had good luck with Comodo firewall, but any firewall where you have total control will do. These firewalls that are integrated into anti-virus apps are often pretty useless cause they only have an On/Off button and zlich real control.

Some ISP offer to lock your DSL account to your phone line (more accurately port number). That way even if some gets your username and password the can still not use it.

 

[Eyenstyn]

HavocXphere: Thanx for your help I am going to follow up on locking my dsl account to my phone line. I think that there is a trojan on my comp that has given access to somebody who has created a backdoor.

I have a Mega 100WR router and I am running windows on one hard drive and linux on the other.

 

[milomak]

Where you change the router password, there will be a section with username. type in the username you want.

Click Apply. Click Save Settings.

This is from memory given I am not in front of my Mega router.

 

[Cube3]

This thing always happens, and people don't seem to care much. They change their passwords and move on..... rather get the little bastard arrested so that a message gets sent out to all those bandwidth thieves...

I'd love to see a Mybroadband.co.za headline "Bandwidth thieves get 3 years".

It's theft.

 

[Eyenstyn]

I started using Comodo Firewall and its working like a charm Thanx HavocSphere!

I think this is the hackers ip 5.8.134.214/255.0.0.0, as a message pops up saying if i want to connect to this network.