Someone leaching my Internet?

[Fliko]

My step-dad was recently explaining how the router was indicating that my computer was running an internet connection, when there was nothing updating, or anything else running.
He also was complainning that the internet was very slow (I use Shaw Cable, usually fast.)
We use a LinkSys (?) Router with Wireless Internet (G).
I however do not use the wireless internet, but an ethernet cable to connect to the router from my computer. My step-dad uses the wireless internet.
I run NOD32, and F-Shaw Secure (They both are updated).
How should I approach this.

I was thinking someone was using the connection off the Wireless Transmitter, though, would it be possible to choose a specific port (In this case, Port # 4, whereabouts his is Port #3) to use bandwith on.

He said he had to unplug my connection to stop it.

Something makes me doubt this, but, he will not agree that it was something else without solid proof (He only accepts proof, with more proof behind the proof.)

Please, help, I do scans monthly with both Shaw and NOD32.

EDIT: He also claims he uses a password, and encryption. A neighbour would have around 1 year to crack it. Yet again, I doubt he does. Though, is there a program that can check for bandwith leachers?

 

[giant384]

My step-dad was recently explaining how the router was indicating that my computer was running an internet connection, when there was nothing updating, or anything else running.
He also was complainning that the internet was very slow (I use Shaw Cable, usually fast.)
We use a LinkSys (?) Router with Wireless Internet (G).
I however do not use the wireless internet, but an ethernet cable to connect to the router from my computer. My step-dad uses the wireless internet.
I run NOD32, and F-Shaw Secure (They both are updated).
How should I approach this.

I was thinking someone was using the connection off the Wireless Transmitter, though, would it be possible to choose a specific port (In this case, Port # 4, whereabouts his is Port #3) to use bandwith on.

He said he had to unplug my connection to stop it.

Something makes me doubt this, but, he will not agree that it was something else without solid proof (He only accepts proof, with more proof behind the proof.)

Please, help, I do scans monthly with both Shaw and NOD32.

EDIT: He also claims he uses a password, and encryption. A neighbour would have around 1 year to crack it. Yet again, I doubt he does. Though, is there a program that can check for bandwith leachers?

then make a new encryption password and that person must have alot of free time to crack a 10 number code

 

[Fliko]

then make a new encryption password and that person must have alot of free time to crack a 10 number code

Aye, will do that.
Still, he believes that the person is *Somehow* accessing the my computer's share of bandwith through the internet, I don't see how this is possible.

 

[Lahire149]

can you use WEP encryption?

 

[Cole]

Still, he believes that the person is *Somehow* accessing the my computer's share of bandwith through the internet, I don't see how this is possible.

Very possible actually. I know a couple people who have actually done it to download rather big files without using up there bandwidth.

 

[PickledGecko]

I set mine to only allow specified MAC ID's.

 

[Fliko]

Very possible actually. I know a couple people who have actually done it to download rather big files without using up there bandwidth.

How would you suggest I can dectect this person, and stop him?
That is, if this is so.

 

[Asus]

If you have your wireless network encrypted then it is very very unlikely anyone is leaching off your internet.

-change your password/encryption key
-disable broadcasting
-only allow the MAC IDs for your wireless Computers

 

[Glirk Dient]

go to start -> run -> cmd -> netstat and see if there is anything you can find out that shouldn't be there. Like...disconnect your comp from the internet, do it again and compare.

Some software could help out a lot and it could tell you the programs that are using each port. You might want to look into that more as it will be easier than netstat.

 

[Fliko]

I'll moniter the internet connections with another program, I think I can handle it from there.
Thanks Everyone.
http://www.tucows.com/preview/362927
-
Great program for tracking what programs connect to the internet, and logs. Very clean, easy to use. Some neat tracing programs, and it recoginizes some programs as a company. It will log connection for you. That, and it is just plain cool. Oh, its free too.

 

[Lahire149]

If you have your wireless network encrypted then it is very very unlikely anyone is leaching off your internet.

-change your password/encryption key
-disable broadcasting
-only allow the MAC IDs for your wireless Computers

It's just that easy, change your password.

blame wardrivers

 

[Fliko]

It's just that easy, change your password.

blame wardrivers

Yeah, he did that.
Still, its his computer trying to access mine, I think someone managed to get a trojan through, atleast 5 firewalls and Antiviruses on his computer.
EDIT:
>> Resolving hostname whois.arin.net.
>> Connecting to
>> Connected.


OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address:
City:
StateProv:
PostalCode:
Country:

NetRange:
CIDR:
NetName: IANA-CBLK1
NetHandle:
Parent:
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is reserved for special purposes.
Comment: Please see RFC 1918 for additional information.
Comment:
RegDate: 1994-03-15
Updated: 2002-09-16

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone:
OrgAbuseEmail:

OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone:
OrgTechEmail:

Anyone has an idea?
BTW, I took out some private info from there, that isn't my info, its just info that came up when I traced my Step-dads computer. Uhh... It traced back to the U.S. but I live in Canada.

 

[Asus]

5 firewalls...on his computer?

 

[Fliko]

Yeah... Atleast, last time I checked.
He also has every port but the required ports closed.

He mighta changed it, he is paranoid though about viruses.

Huh, I searched up on IANA, seemed to just be a port number company for handling.. well, port numbers. Kinda cool.
EDIT: 5 Firewalls and Anti Viruses.
I haven't checked since a lil' while after he moved into my house. He never cleaned his computer, so he had a lot of Antiviruses and Firewalls he ran because they were on there.
It was either 3 Firewalls,
2 Anti Viruses
or
Vice Versa.

 

[Asus]

Shouldn't have more than one software firewall on at the same time. It can cause problems.

 

[giant384]

Shouldn't have more than one software firewall on at the same time. It can cause problems.

lol i agree the comp. prob. dosent know which one to use

 

[NJspeed]

My router light blinks light somethings going on, even when my PC is turned off. Yours might just be the same. I have a Linksys I think its the 634, 434, or something, one of the cheap ones.

If you want to make sure, get a program like "Protowall" (google it), it's not a firewall, it's an IP blocker. However it will show you ALL incoming and outgoing IPs, and you can download regularly updated blacklists that will block the IPs of numerous sites that are blacklisted for adware, trojans, viruses, government sites, etc etc etc So then if you have no functions running and you see constant pings to a specific IP, you can just blacklist it. Best of all, Protowall takes up virtually no resources.

 

[giant384]

My router light blinks light somethings going on, even when my PC is turned off. Yours might just be the same. I have a Linksys I think its the 634, 434, or something, one of the cheap ones.

If you want to make sure, get a program like "Protowall" (google it), it's not a firewall, it's an IP blocker. However it will show you ALL incoming and outgoing IPs, and you can download regularly updated blacklists that will block the IPs of numerous sites that are blacklisted for adware, trojans, viruses, government sites, etc etc etc So then if you have no functions running and you see constant pings to a specific IP, you can just blacklist it. Best of all, Protowall takes up virtually no resources.

u mean it blinks contiously or every 10-15 sec because if its 10-15 secs thats normal

 

[NJspeed]

No like its always blinking pretty fast.

I just looked and I have the D-Link 604, not a linksys.

 

[Fliko]

No like its always blinking pretty fast.

I just looked and I have the D-Link 604, not a linksys.

The internet recieves immense slowdowns, and it will stop working on my stepdad's comp. Still don't understand why, maybe I should go talk with my brother.