0

My father told to me that his PC has turned on by itself. I have no idea about what this can be, and this has never occurred before. After this, he turned off the PC and I checked my router, and seen that his PC was sending (but not receiving) few packages even when turned off.

I would like to know if this packages (even in a very little amount) are normal when a PC is turned off.

Besides that, my father is not concerned about security, so I installed a firewall one month ago, and a few days ago I noticed that some connections from his PC to multicast addresses (like 239.255.255.250 and 224.0.0.251) is being blocked buy my firewall, but I blocked inbound and outbound connections from/to these addresses in my father's PC, and today I checked if this configuration stay fine and it looks fine.

Any ideas of what could I do? Both Malwarebytes and RogueKiller reported nothing.

  • 1
    The easiest answer is that it was not turned off. People think the machine is turned off when only the screen is turned off or it is in "sleep mode". Confirm that it was actually turned off. – schroeder Jun 14 at 7:20
  • @schroeder It was turned off. My father was watching TV and turned off his PC some minutes before it turned on by itself. – Mycroft Jun 14 at 7:25
  • Maybe the PC entering sleep mode? I will not make my speculation on Wake-on-LAN, but if you worry about it, you can go into the system UEFI/BIOS and check whether there is an option to disable it. – mootmoot Jun 14 at 7:34
  • I said that, when I checked my router, I seen that his PC was sending (but not receiving) few packages even when turned off. This could be normal? – Mycroft Jun 14 at 7:42
  • @Mycroft the simple thing is to try to repeat the situation. Turn it off in the same way as before, check to see if there are packets, and see if it turns itself back on. Then try to confirm that your "turning off process" is actually turning it off. Machines that are turned off do not function by definition, so you ar either misunderstanding something or some hacker has completely rewritten the hardware in the computer to prevent the machine from actually turning off. – schroeder Jun 14 at 8:12
2

Many BIOS support a variant of "Wake on LAN" command. This means, among other things, that there is a minimal network function even when nominally powered off.

More unlikely scenarios could include hidden firmware based malware, but a glitchy wake-on-lan seems more likely.

  • This seems the most likely to me. I've personally experienced a lot of frustration from this kind of thing... – Nic Hartley Jul 15 at 22:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.