1

I received a new router from Verizon. A month or so after my PC couldn't get the Internet consistently. It started doing crazy things around the wireless issue. So I had it professionally cleaned twice. Installed all the best virus protection. Finally took it in to Geek squad who says they found 356 virus'

During this time I buy another ( open box but supposed clean and antivirus installed) PC. Within 1 day the new PC has wireless Internet problems. So I call geek squad and watch for 4 hours remotely while they removed the installed virus protection. They find a bunch of threats and viruses. Cleaned it up and reinstalled virus protection.

Next day no Internet. My apple products are fine. So desperate I use my ATT hot spot from my phone instead of the Verizon wireless connection- no problem!

Verizon insists that I don't know what I am talking about and has been extremely difficult.

Now I am bringing my cleaned computer home and don't know what to do. I can't keep paying people to clean it. I am returning the open box one for a new one but then what?

Thank you for bearing with me on this

Can you assist?

closed as off-topic by Steffen Ullrich, user45139, Gilles, schroeder Sep 6 '15 at 18:20

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Steffen Ullrich, Community, Gilles, schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Unfortunately, we are not technical support and we have no access to your equipment to help. You don't state what the technicians you used said the source of the problem was. Do they think it was your router? Did they have any other suggestions? – schroeder Sep 6 '15 at 16:07
2

A compromised router (which is just another computer that happens to be on the network path between your other computers and the Internet) can attack hosts and compromise them. It can also redirect your HTTP (not HTTPS) requests to malicious websites in an attempt to fool you into installing malware. However, I would be really surprised that it could compromise a brand new, up to date Windows machine assuming the user wasn't an idiot and didn't intentionally execute the crap served from the malicious websites it redirected to. I'm not saying it's not possible - there is always a risk of a zero-day vulnerability (which would work silently without any user intervention), but nobody is going to "waste" a valuable zero day on you unless you're a really valuable target (and then they'll do a better job at silently compromising you rather than alerting you because your Internet doesn't work).

I'm actually sure your problems aren't caused by malware, but given that both PCs seem to have malware (at least according to the so-called "technicians") it looks like both computers continuously compromise each other so it's time for a proper solution.

Stop paying incompetent people for installing useless "best virus protection" (there is no such thing, antivirus evasion is trivial and the best antivirus is you) on an already compromised machine. Follow the usual procedure for dealing with compromised hosts : from a known clean machine (friend's PC, etc), download the ISO corresponding to the Windows version on your computer - pirate sites are a good source for them but make sure to verify the hashes against the official hashes published on MSDN to make sure you didn't get a compromised version. Now burn that on a disc, bring it home, disconnect your computers from any network (Ethernet disconnected and Wi-Fi switch set to "off"), boot from the disc, nuke everything and reinstall. Do the same for all machines on your network, then reset your router, connect the machines to it and only let them install updates - don't browse the Internet just in case your router redirects to malicious websites that would exploit the still unpatched Windows. Once it's up to date, if you still see weird stuff like redirections to malicious pages (sometimes full of nasty ads like porn), return the compromised router to your ISP and invest in a better one that has at least a somewhat decent firmware.

Note that you should never trust the "Refresh My PC" feature nor the built-in recovery partition for reinstalling a compromised machine - writing to that partition is trivial and malware can easily use it to persist.

Not the answer you're looking for? Browse other questions tagged or ask your own question.