Someone is stealing my internets

[Brookie23]

For the past month or so, I've seen a lot of data usage in MUM that I'm sure I'm not responsible for. I've tried changing my wireless password, disabling SSID broadcast and changing the SSID, changing my modem's admin password (it was previously still on the default password - I know, I know!), but the unexplained data usage continues. My wireless security has always been on WPA2 and I change the wireless password on a regular basis. I've been told it could be that someone has hacked into my modem. I would have thought changing the admin password would have locked them out, but guess not. Any ideas? I'm hopeless with networking crap!

I was even considering purchasing the full version of Netlimiter so I can easily see who/what is connected without doing any complicated cmd prompt stuff. Limiting connections through MAC addresses isn't really an option because I often have friends over who want to use my wireless, and messing with MAC addresses would just be too complicated.

[grandinferno]

It could be coming from within the machine (ie. something/program updating/downloading). Could be malware? Just use free NL to check out what's what. It's enough to determine whether it's a network related problem.

[KidCynic]

shotgun and a torch round the neighbor's places should stop it.

[Brookie23]

It could be coming from within the machine (ie. something/program updating/downloading). Could be malware? Just use free NL to check out what's what. It's enough to determine whether it's a network related problem.

I didn't think the free NL provided enough detail for that. I'll try it. I also didn't think it could be malware coz I have script and flash blockers for my browsers, I'm the only user and I'm pretty careful with what I download/install. I did consider automatic updates as the cause, but it's been 1500mb +/-200mb per day every time it's happened, and it's intermittent, like I'll have a few days' break and then suddenly another 1500mb or so. There hasn't been any icons in my system tray indicating that some updates were going on in the background, either.

I think I'll do a few malware scans, a factory reset of my modem and run NL tomorrow and see if that fixes it.

[Brookie23]

shotgun and a torch round the neighbor's places should stop it.

Lol. I considered doorknocking, but I live in a complex of 32 unit and half the residents probably don't speak English. I suspect there are some smart enough geeks living here coz I've seen some geekish SSIDs before, but haven't seen then for at least a few months - maybe coz they're leeching off me?

[morge]

what modem do you have there should be a table in there to show waht devices are connected.

[Knight Of Nih]

It could be coming from within the machine (ie. something/program updating/downloading). Could be malware? Just use free NL to check out what's what. It's enough to determine whether it's a network related problem.

yes i agree with this
how much data is being downloaded that you think is not yours?
remember windows updates, virus definitions, if you have a ps3 or xbox they are always update, alwell as itunes podcasts might be updating, there is many things that can be happening internally that you dont suspect.

[Ratty]

Mac address filtering FTW.

[jabsy]

Check the DHCP allocation table, grab their IP, logon via an administrative share, delete all their documents and fill their hard drive with animal porn.

[Harbinger]

Try changing your ISP password, could be concurrent logins. It's unlikely someone is successfully cracking your wireless.

[Brookie23]

I've only been browsing really, no YouTube even, so I think pretty much all of it isn't me. I don't own any gaming consoles, don't have Steam or anything that could be downloading huge game updates, haven't seen the windows update icon in ages and never use podcasts/audiobooks etc. My torrent programs don't open at startup either, so it can't be them. Did an iTunes and iOS update recently but that's only 700mb tops, and once off, not consistent as this usage has been. I have both my computers off most days and this still happens. They're the only devices I have that could be using my ADSL while I'm not home.

I have a Billion 5200G RC and no idea how to check the DHCP allocation table or see what devices are connected :/

I really don't want to have to resort to MAC address filtering. I have random people staying at my place all the time through couchsurfing.org and I imagine it'd just be a pain in the arse.

Try changing your ISP password, could be concurrent logins. It's unlikely someone is successfully cracking your wireless.

When I unplug my modem, absolutely nothing is metered. That rules out concurrent logins, right?

[Aegis]

switch the wireless side of the router off, then run a network cable from your computer to the router for a few days - if that doesn't sort it, you know you have a virus.

maybe install SNMP and a tracking app for it on your machine too, so you can see what it's doing network-wise.

[Knight Of Nih]

speak to me tonight about looking up the dhcp stuff, ill walk you through it.

[Joshuayu101]

Do you have usenet clients installed? The one me aegis use secretly load up at startup in the background and downloads

[Brookie23]

After having my modem off since last night, I did a factory reset this morning, used all new passwords, and so far only 42mb metered. Another thing I just thought of is the Internode radio stations that I listen to a lot. Maybe they're suddenly being metered when they shouldn't be? I just updated the MUM radio list and the ones I listen to are still on it.

Just installed NetLimiter and haven't seen anything suspicious yet. However, I installed Malwarebytes Anti-Malware and something is blocking its internet connection so it can't update. I don't use any hardcore firewalls, just the Windows one I think. I updated AVG (was already installed) and so far a scan has only shown a few software cracks.

No usenet clients installed.

Thanks Craig, if it happens again today I'll give you a call.