I'm having a problem with one of my computers. I suspect it's being used for something malicious.
A few weeks ago my internet connection went down, I called my ISP and they told me that no MAC adress could be recieved from my computer, but a day later the internet went back online, only this time there was an unidentified public network connected via internet to my computer, and the light on my motherboards network adapter was glowing red even though traffic came through.
At first I didn't give it much thought, just resetted the internet connection when the network popped up. It did so randomly, sometimes 2-3 times a day, sometimes once every few days.
Yesterday I decided to look into it and found out the network was sending huge amounts of information to and from my computer, 180MB recieved, 30MB sent over a period of 20 minutes when my computer was idle, having no other established connections other than to that network.
I decided to take a look at the traffic using wireshark and found out a lot of PDU parts being sent to me from the IP I was connected to, and random queries sent out to a couple of other IP's from my computer.
I did a full format erasing everything to see if I could solve it, but somehow the network is still there sending data.
I'm in way over my head here, so I would appreciate if you guys could shed some light on this.