Official GIGABYTE Forum

Questions about GIGABYTE products => Motherboards with AMD processors => Topic started by: Lia on August 03, 2010, 03:59:44 pm

Title: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 03:59:44 pm
Hello everyone!

I need to make an important question. This is the model of my motherboard: FCGIGABYTE GA K8NMF - 9.
I have had it since 1996.
 I need to know if someone can connect to my stable pc, as part of a local network. Can the equipment on board make any type of connection possible, even if there is no ethernet cable connected to the back of the tower, or a usb?
This is important because, although I have no equipment to connect to the Internet, someone has been accesing my machine. The service of telephony is running and there are a lot of security incidents (control panel) which mention that a successful connection had been performed. It's a type 3 connection (network).
Please help me!
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:05:21 pm
Hi and welcome to the forum. Sounds like you have problems but if you do not connect to the internet in any way from this machine then it must be a local(very near) connection. Do you use any WiFi or wireless connections for anything? Keyboard, mouse? Do you have any bluetooth enabled for anything? For someone to connect to your computer they have to either do it wirelessly or via a wired connection like a lan cable or telephone cable if you have a built in  modem.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: absic on August 03, 2010, 04:10:50 pm
Hi,
the only way any outside source can connect to your PC is if you are physically linked through Ethernet, Modem or Wireless or Bluetooth
If your PC is not connected by any of these methods then, as far as I know, there is no way that anybody else can connect to your PC and there is nothing on the motherboard that would allow it either.

The problems on your PC might originate from files that you have copied onto it from an outside source and this is the most likely case.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:12:28 pm
Hi and welcome to the forum. Sounds like you have problems but if you do not connect to the internet in any way from this machine then it must be a local(very near) connection. Do you use any WiFi or wireless connections for anything? Keyboard, mouse? Do you have any bluetooth enabled for anything? For someone to connect to your computer they have to either do it wirelessly or via a wired connection like a lan cable or telephone cable if you have a built in  modem.

Thank you so much for answearing. I am afraid I don't know much about networks and I am trying really hard to figure this out. I have located the house and it's only 100  feet (maybe less) away.
I am not aware of any wifi equipment on my machine. Yet, I got a message which said that there was a new device "Windows Mobile Service" and it was trying to download the relevant software.  If I have a bluetooth, how would I know?
There is no cable.
I might have a built in modem but how can I see that? The mouse and keyboard are not wireless.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:15:17 pm
There is nothing on your motherboard that would allow it by default so if there is a connection(presumabley wireless) it must be from a "dongle" a piece of equiptment that is plugged into you computer. A bit like a USB pen or similar?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:17:26 pm
Hi,
the only way any outside source can connect to your PC is if you are physically linked through Ethernet, Modem or Wireless or Bluetooth
If your PC is not connected by any of these methods then, as far as I know, there is no way that anybody else can connect to your PC and there is nothing on the motherboard that would allow it either.

The problems on your PC might originate from files that you have copied onto it from an outside source and this is the most likely case.

I think I have a virus named conficker/kido and they are using it to perform a reverse connection. There is no doubt that someone is hacking my pc. Everytime I start it, they are automatically logged in as well. I have heard them talk about it and they have wrecked a laptop we have four times. Please, it's not just the virus. How can I figure out what equipment is giving them access?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: absic on August 03, 2010, 04:17:35 pm
Have you got a mobile phone that you have installed software for and connected to your PC?

That could be the reason as they are often Wi-Fi and Bluetooth enabled.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: absic on August 03, 2010, 04:22:13 pm
If you have access to the internet form another PC you could download the Malicious Software Removal Tool from Microsoft. That might help clear your system.

You might only be able to download this if your copy of Windows is genuine but here's a link: http://www.microsoft.com/downloads/details.aspx?familyid=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

I should say that this version can be downloaded on one PC and moved via a usb drive to the infected computer. You don't have to connect the infected PC to the internet.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:22:38 pm
Have you got a mobile phone that you have installed software for and connected to your PC?

That could be the reason as they are often Wi-Fi and Bluetooth enabled.

I have copied stuff from the pc to my mobile before, using a wire comming with the mobile. How can this be permanent on the pc for future use. How does this work? Does it need for my mobile to be on for that to happen?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:23:06 pm
Quote
I think I have a virus named conficker/kido and they are using it to perform a reverse connection. There is no doubt that someone is hacking my pc. Everytime I start it, they are automatically logged in as well. I have heard them talk about it and they have wrecked a laptop we have four times. Please, it's not just the virus. How can I figure out what equipment is giving them access?

A laptop is much easier to accesss in general because most do us wireless connectivity for the internet/lan. You other machine is quite old and so doesn't have that capability. The only thing is if someone managed to physically access your computer and install something. Are you running up to date anti virus software etc?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:24:25 pm
A laptop is much easier to accesss in general because most do us wireless connectivity for the internet/lan. You other machine is quite old and so doesn't have that capability. The only thing is if someone managed to physically access your computer and install something. Are you running up to date anti virus software etc?
[/quote]

I am running an antivirus but since I do not connect to the Internet, I can not keep up.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:25:51 pm
Have you got a mobile phone that you have installed software for and connected to your PC?

That could be the reason as they are often Wi-Fi and Bluetooth enabled.

I have copied stuff from the pc to my mobile before, using a wire comming with the mobile. How can this be permanent on the pc for future use. How does this work? Does it need for my mobile to be on for that to happen?

Your phone would have to be conected to your PC to enable anyone to access the data but it is impossible when itis disconnected. However it doesn't take long for the data to be transmitted. Therefor if you connect your phone with bluetooth enabled it could be hacked.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: absic on August 03, 2010, 04:26:32 pm
I have copied stuff from the pc to my mobile before, using a wire comming with the mobile. How can this be permanent on the pc for future use. How does this work? Does it need for my mobile to be on for that to happen?

You only need to have connected a few times, through your Mobile, for your PC to have become infected. It isn't connecting every time you switch your PC on but it is running and the OS thinks that it is connecting. When you do connect your Mobile phone then it will try to connect again, to the outside world.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:26:40 pm
Someone having accessed my house is very possible. So, something has been added and I am trying to fing what it is. I think it could be something to do with my mobile.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:27:45 pm
You only need to have connected a few times, through your Mobile, for your PC to have become infected. It isn't connecting every time you switch your PC on but it is running and the OS thinks that it is connecting. When you do connect your Mobile phone then it will try to connect again, to the outside world.
[/quote]

Please tell me how I could stop this.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: absic on August 03, 2010, 04:29:20 pm
You need to remove the virus that has infected your PC.

Check my earlier post for details of Microsoft tool to try and do this.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:32:11 pm
How far away from the pc does my mobile need to be, in order to be used as means of wireless connection by an outsider?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:33:00 pm
How far away does my mobile need to be from the pc for someone to use it as a means of wireless connection?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:33:43 pm
Well firstly I would report it to the police. Now they are not very good when it comes to computer crime but if you make enough noise they will do something in the end. It is a breach of privacy as well as theft plus maybe other crimes as well from what you say.

As far as the computer goes do you know or have a friend who knows anything about the inside of a computer? Also get an up to date( I know that you don't have an internet connection) anti virus and sort out the infection. You may have to connect to the internet to do this but use a wire even if it is the old fashioned dial up with a modem.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:34:33 pm
You need to remove the virus that has infected your PC.

Check my earlier post for details of Microsoft tool to try and do this.

I will definately do that but, it's only a matter of time before they figure out a way for me to get it again. Is there any other way to stop this?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:35:43 pm
You need to remove the virus that has infected your PC.

Check my earlier post for details of Microsoft tool to try and do this.

I will definately do that but, it's only a matter of time before they figure out a way for me to get it again. Is there any other way to stop this?
What makes you think that it is these people that are doing it?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:37:16 pm
Well firstly I would report it to the police. Now they are not very good when it comes to computer crime but if you make enough noise they will do something in the end. It is a breach of privacy as well as theft plus maybe other crimes as well from what you say.

As far as the computer goes do you know or have a friend who knows anything about the inside of a computer? Also get an up to date( I know that you don't have an internet connection) anti virus and sort out the infection. You may have to connect to the internet to do this but use a wire even if it is the old fashioned dial up with a modem.

Contacting the police is something I have been trying to do and I am willing to make all the noise it will take. Finding someone to help me is a tough one. Can you help me a little more on how my mobile contributes to all this?

I have heard them talk about it and they laugh everytime something goes wrong or make sure we can see them to make us feel hopeless. I know it sounds crazy but someone has been helping them and they don't feel threatened, although I have mentioned going to the police.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 04:41:50 pm
Well unless they have managed to place a device in your computer(usually attached to one of the ports) then it would only be possible when your phone was attached. This you can stop by disabling Bluetooth on your phone. That is the most likely access point. It doesn't matter how close the phone is unless it can make a connection, either wired or wireless(bluetooth or WiFi).
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 04:48:36 pm
Then there is a device on my pc and I can not see it, as I don't know much. Here is some extra information:

- The RPC Remote Process Control is working like crazy.
- When I used Windows XP, during shut down, it mentioned that it was terminating the Internet connections. Is that normal? What was it terminating as I had no connections to the internet.

- Once, I saw my firewall block a command/file called ping. I checked it on the Internet and I found that it checks out if you are on line. Why did the command start running out of nowhere? I am not part of a Network. I do not have an internet connection.

- Most or all of the programs I use, even simple arcade games, try to perform actiong through Iscvhost.exe-irpcss and RPC (Remote process control).

- DHCP, DNS, SMB, NAStatus UI, LP Remote, I will not pretend I know what these thing are, but they have run on a daily basis. Once my firewall blocked a java script.

- I had a problem with svchost files, Local Network. One or two of its proccesses and one of the SYSTEM as well, were causing my CPU use reach 100%. This started when I tried to install a firewall program "On line Armor". I had to terminate these proccesses to finish the installation. My pc kept running without any problems despite terminating these proccesses.

- All the programs running on my desktop keep trying to access and modify my registry. Even paintbrush. Additionally, all programs try to control my firewall! Not the other way around! I can see it as a notification by the firewall. Even paintbrusth. The programs perform these actions through DNS resolver/RPC!

- Once a program was trying to connect to the Network using DNS resolver/RPC through svchost. It was referring to a recursive type of connection.

- My screen turned blue a few days after that as soon as Windows started and I had to reinstall Vista. I don't know what caused this.

- Power Bios server with the server RPC CONTROL\OLEEE8087F002824DC6A2060115E55A and svchost as a port was trying to control a network enebled connection using OLE.

- There is a Local connection but it says that the wire is disconnected. It uses Web client, my firewall driver,QoS, shares (files, printers), TCP Ipv6, TCP Ipv4, I/O and something like answering detectionplace of connection, level.

- There are incidents like: system,workgroup, 0*3e7, process 0*26c, services.exe, advapi, negotiate,
And another that says: null sid, 0x0, type 3, anonymous logon, NT Authority, 0x60920, GUID (00000000-0000-0000-0000-000000000000), 0x0, NTLMssp, NTLM. What's that?

- I ran the commant ipconfig show helpers. It was full of details like proxy server, RPC, DNS ....

- the service of Telephony is running on my PC. What equipment do I have for this to happen?

- I tried to install a firewall program some days ago and since it required an internet connection, it opened Internet Explorer and the adress I was to connect to was "LocalHost 6060 server something...." It even required a password and username. At first I thought it was the program, but now I am thinking that it could be that I need the password to connect to the Web. I read that in reverse connection the adress of the attacker is saved on the pc in this format so that everytime I open my PC, I connect to their router/server. Could it be that the program showed me by default the fastest or the only way to connect to the Internet? Meaning that it showed me how they connect?

I read a magazine article lately which explained that you can access a pc just through its network card. That a series of programs like Web client, DNS, IPV6, και 4, Ι/Ο e.t.c collaborate for this to happen. All these programs run on my pc like crazy, I get notifications from the firewall. The article said that to do this you need a hacking tool and that the rest is done by a worm. It is called "conficker/Kido". That the worm creates a cory of the svchost file and takes control of the system. It even starts procedures, like the ones of Local Network I had to terminate due to CPU reaching 100%. My ad-aware Pro antivirus had once detected Kido/conficker. I kept removing it and adding it to the quarantine but everytime a ran a new scan, it was there. I finally never saw it again.
If I have anderstood the procedure. On reverse connection the Web Client opens a port and then they can connect using their router. That they use the Outbound connections created by the firewall.
I think that something like this is what is happening here.

These are my Web adopters (if I am saying it right), in Managing devices:
How can they be there since, as far as I know, I don't have a wireless card? And does them being there proove that I have one?
WAN MINOPORT (IP)
WAN MINOPORT (IP) COMODO FIREWALL MINOPORT
WAN MINOPORT (IP) PC TOOL DRIVER
WAN MINOPORT (IPv6)
WAN MINOPORT (IPv6) COMODO FIREWALL MINOPORT
WAN MINOPORT (IPv6) PC TOOL DRIVER
WAN MINOPORT (L2TP)
WAN MINOPORT (PPPOE)
WAN MINOPORT (PPTP)
Host Controller Nvidia nForce COMODO FIREWALL MINOPORT (my firewall)
Host Controller Nvidia nForce PC TOOL DRIVER
Host Controller Nvidia nForce 2 PC TOOL DRIVER

In Mobile Devices: There is a Windows Mobile Device (Since reinstalling Windows, it has been trying to download its drivers)

I am willing to attatch any data you will need, from my pc. I have many screenshots.

Technitians say I should perform a format but I know they will be in my system before I even start the Windows. I have already tried this option. It does not shut them off.

PLEASE, I know it’s a lot of work.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 05:01:16 pm
Quote
Contacting the police is something I have been trying to do and I am willing to make all the noise it will take. Finding someone to help me is a tough one.

Well I notice you are in Greece so that rules out any physical help from this forum but maybe there is someone nearer to hand that you could call on to look at your PC.
Are you British citizens? If so go to the British Consulate and tell them. It is one of the things they are there for, protection of their citizens.
I would agree with the technicians that a full format of the drive and then running an up to date anti virus would be the safest thing for you to do. Bare in mind however that any drive or CD/DVD or anything else with data on it can be harbouring the virus as well as your hard drive. So even if you get rid of the infection off the hard disk you will then need to disinfect everything else.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:03:29 pm
I am sorry for the extention of my previous message. I noticed that there is something like a tiny silver box behind a port, It has these numbers on it: 00148533EA25 and 001485328274. It is like to pieces together. Do you know what that may be?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:06:17 pm
I am sorry for the extention of my previous message. I noticed that there is something like a tiny silver box behind a port, It has these numbers on it: 00148533EA25 and 001485328274. It is like to pieces together. Do you know what that may be?

Right now I wish I were British, guys. Any idea comming from the information I have added? Removing the virus is possible but I need to figure out how they do it, or else it will be useless.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 05:06:48 pm
It doesn't sound familiar but is it possible that you could take a photo and attach it here? It does sound suspicious.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:09:48 pm
I will try to do that as soon as possible. Have you seen the WAN adopters described in devices? Doesn't that prove that there is wireless equipment? And why is the service of telephony running?
These are my Web adopters (if I am saying it right), in Managing devices:
How can they be there since, as far as I know, I don't have a wireless card? And does them being there proove that I have one?
WAN MINOPORT (IP)
WAN MINOPORT (IP) COMODO FIREWALL MINOPORT
WAN MINOPORT (IP) PC TOOL DRIVER
WAN MINOPORT (IPv6)
WAN MINOPORT (IPv6) COMODO FIREWALL MINOPORT
WAN MINOPORT (IPv6) PC TOOL DRIVER
WAN MINOPORT (L2TP)
WAN MINOPORT (PPPOE)
WAN MINOPORT (PPTP)
Host Controller Nvidia nForce COMODO FIREWALL MINOPORT (my firewall)
Host Controller Nvidia nForce PC TOOL DRIVER
Host Controller Nvidia nForce 2 PC TOOL DRIVER

Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:13:05 pm
I can't possibly thank you enough for your help. Please don't give up on me!
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 05:16:02 pm
Dont worry just had to take a telephone call. My son is an internet security advisor but he isn't home at the moment, maybe later. How are we managing to converse at the moment?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:16:58 pm
Dont worry just had to take a telephone call. My son is an internet security advisor but he isn't home at the moment, maybe later. How are we managing to converse at the moment?

I am using the pc at my workplace,
If that was your question. Thank you for mentioning that your son could help. I could really use that.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 05:22:39 pm
Ok. A lot of the protocols etc that you referred to are fairly innocuous and will be on your system anyway but there are others that I am not so sure about. My expertise is not in communication protocols etc. I will have  a word with my son when he comes in and get him to look over all your information that you sent, it will mean a lot more to him than to me to be honest. Can you log back on later say in a few hours?
By the way the word is "adaptors" ;)
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:22:44 pm
Are you making an other phonecall or have I said something wrong?

Any idea on these?
why is the service of telephony running?
These are my Web adopters (if I am saying it right), in Managing devices:
How can they be there since, as far as I know, I don't have a wireless card? And does them being there proove that I have one?
WAN MINOPORT (IP)
WAN MINOPORT (IP) COMODO FIREWALL MINOPORT
WAN MINOPORT (IP) PC TOOL DRIVER
WAN MINOPORT (IPv6)
WAN MINOPORT (IPv6) COMODO FIREWALL MINOPORT
WAN MINOPORT (IPv6) PC TOOL DRIVER
WAN MINOPORT (L2TP)
WAN MINOPORT (PPPOE)
WAN MINOPORT (PPTP)
Host Controller Nvidia nForce COMODO FIREWALL MINOPORT (my firewall)
Host Controller Nvidia nForce PC TOOL DRIVER
Host Controller Nvidia nForce 2 PC TOOL DRIVER

Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 03, 2010, 05:24:40 pm
Thank a lot! I just saw your previous message. I am afraid I will be accesing the net sometime tommorrow. I will certainly look for your answer.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 03, 2010, 05:26:00 pm
I will try and get him to talk to you himself if he isn't too busy. See you tomorrow and don't forget the picture ;)
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: ByteBackSecurity on August 03, 2010, 09:07:59 pm
Hello,

Please allow me to introduce myself. My name is Richard, I am the lead Security Consultant and Web Developer of ByteBack Security http://bytebacksecurity.com (http://bytebacksecurity.com). I am also the son of DarkMantis.

I have just read through the thread and noticed a few comments which I would like to advise on:


Quote
I am afraid I don't know much about networks and I am trying really hard to figure this out. I have located the house and it's only 100  feet (maybe less) away.
The house which you have located is the one in which the data is being sent to? If so, then it is possible that somebody could have inserted a device in which simply sends packets to and from your computer simply for this reason (data stealing). This is quite probable if someone has had access to your house or computer at any time. There are many dongles which can do this, you can even make your own home made "modem" which is essentially what the device would be. Once the device has been connected, any malicious program could be installed remotely on your computer to send the data packets back to a remote area. This can then be used to steal any of your details.

I'm not 100% sure that your motherboard does not have built in wireless, however I would most definatly check on that before going any further.


Quote
I am not aware of any wifi equipment on my machine. Yet, I got a message which said that there was a new device "Windows Mobile Service" and it was trying to download the relevant software.  If I have a bluetooth, how would I know?
If you do not have any wireless devices there should be no reason why you should recieve this message. However, a virus could produce this message as a diversion from your attention, as lots of people would not think twice about having this message pop up on their screen. However, please check on the back of your computer to ensure there is nothing obviously different there. If you can take a picture of the back and inside of your computer case this would be greatly appreciated.


Quote
I think I have a virus named conficker/kido and they are using it to perform a reverse connection.
I would personally chose to use an anti-virus not created by Microsoft to scan your computer with. I would personally use a free anti-virus called AVAST anti-virus, which you can use to create a boot-scan with. This can be useful as it will scan all files before your Windows can boot up. If it finds anything you can delete it before it manipulates itsself again.


Quote
There is no doubt that someone is hacking my pc.
Well, this would not be possible if your computer truley does not have any access to the internet, or any local network (which is then connected to the internet) or any other connection devices such as wifi, bluetooth or IrDA.

 
Best Regards,
Richard
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 04, 2010, 03:04:17 pm
Nice to meet you Richard, I am honoured. I am in dept to you both for your help. I am attaching some information from the user's manual of my motherboard. Please, take a look.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 04, 2010, 03:09:30 pm
Nice to meet you Richard, I am honoured. I am in dept to you both for your help. I am attaching some information from the user's manual of my motherboard. Please, take a look.

Lia there was nothing with your post ???
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 04, 2010, 03:31:54 pm
Lia I have the feeling that you are typing out a load of info from the manual. If that is right don't bother just tell me where to look on the website manual here: http://www.gigabyte.com/products/product-page.aspx?pid=1911&dl=1#dl   I have PMd you but I guess you didn't read it!  :-\
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 04, 2010, 04:03:38 pm
I am very sorry, I had great difficulty with the pc at my workplace. I am at an Internet cafe now and I will try again.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 04, 2010, 04:04:06 pm
No problem ;)
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 04, 2010, 04:22:29 pm
Please, forgive my ignorance. I can not upload my images. They were created with a scanner. I don't know how I could do it using http://www.gigabyte.com/products/product-page.aspx?pid=1911&dl=1#dl . Is it alright if I send you my email on a private message so that you could send me yours? I am really sorry.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 04, 2010, 04:24:30 pm
Yes that will be fine, I know that it is difficult to post pictures on the forum. You don't even need to do that you can just use the little button under my avatar.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 04, 2010, 04:35:07 pm
Yes I forgot I can see it but you can't, cool eh! 8) Not much point really is there. I suppose I could email myself if I felt lonely. :-\  I have emailed you anyway so check you post.

Well basically an update for anyone watching this thread the OP sent me some pictures from  the motherboard manual with various questions about the parts and if they could be used for a connection. It was all standard parts and I am waiting for them to send me a couple of photos(nudes on the beach- no, wishfull thinking ;D) of the computer to decide if there is anything alien attached.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 04, 2010, 06:27:58 pm
I have just managed to send you the shots!
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 04, 2010, 06:43:16 pm
I have received the pictures ok. They are not great quality because of the phone I guess but I couldn't see anything there that wasn't supposed to be. So you can breath a sigh of relief. There is no way they can be hacking your computer unless you plug it into another system like your phone or the internet etc. It is perfectly safe as it is. That isn't saying that it doesn't have a virus or keylogger or other malware on board. But at least you know that they can't connect to it. What you should do now is do a complete format of your hard drive and wipe it all clean. Then you can load Windows and any other programs that you need but make sure every one of them are virus free before even putting them in the computer. If necessary have a local IT shop or someone scan them for viruses for you first.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 05, 2010, 09:29:29 pm
Have you managed to make any headway with the help I gave you yet?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 05, 2010, 09:40:15 pm
.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 06:38:03 pm
Hello everyone! I' ve been trying to upload my images for the rest of you to see, but it says that the upload folder is full, yet my file is only 484 kb. That should be small enough.

My motherboard has an On chip Mac lan and Usb host controller, number 2.0 or something. Is there any way for anyone close enough to connect without a wire?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 06:38:16 pm
The question you were asking about the On chip MAC LAN doesn't mean that someone can access your computer without a hard connection. If you go into your BIOS and then integrated peripherals.
You will see On-Chip MAC Lan.
It is just a feature of the motherboard. The same applies to the USB2.0 host controller.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 06:39:49 pm
Thank you for the information. So, you are certain that there is no way for someone to connect? Is there any way for me to clear the forlder and upload my pictures?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 06:50:03 pm
Could you explain to me briefly what these things are? Please, I know it is boring. DHCP, DNS, SMB, NAStatus UI, LP Remote.

And why was there an incident which mentioned that a successful connection of type 3 (network) had been performed?

What is nVidia On-Chip LAN?
The Gigabit LAN capabilities on certain nForce3-250 chipsets is not really a fully integrated LAN. Like solutions in a few other chipsets that remove the LAN from the confines of the PCI bus, nVidia provides a port for direct communication of a Gigabit LAN PHY (Physical Layer) with the nForce3-250 family chipset. There is still an external Gigabit LAN chip providing PHY Gigabit LAN capabilities, which communicates directly with the nF3-250 chipset.

As a result, you cannot determine if an nVidia nForce3-250 family board has on-chip Gigabit LAN merely by looking at the specifications for other brand LAN chipsets. The on-chip LAN will still have an external Gigabit LAN chip providing PHY Gigabit capabilities. This makes the on-chip LAN more like a port to communicate with the external Gigabit LAN PHY than it is a fully integrated Gigabit LAN chip. The end results are the same however - removing the Gigabit LAN from the constraints of the slower PCI bus.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 06:59:41 pm
Please, somebody.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 07:41:12 pm
Could you explain to me briefly what these things are? Please, I know it is boring. DHCP, DNS, SMB, NAStatus UI, LP Remote.

And why was there an incident which mentioned that a successful connection of type 3 (network) had been performed?

What is nVidia On-Chip LAN?
The Gigabit LAN capabilities on certain nForce3-250 chipsets is not really a fully integrated LAN. Like solutions in a few other chipsets that remove the LAN from the confines of the PCI bus, nVidia provides a port for direct communication of a Gigabit LAN PHY (Physical Layer) with the nForce3-250 family chipset. There is still an external Gigabit LAN chip providing PHY Gigabit LAN capabilities, which communicates directly with the nF3-250 chipset.

As a result, you cannot determine if an nVidia nForce3-250 family board has on-chip Gigabit LAN merely by looking at the specifications for other brand LAN chipsets. The on-chip LAN will still have an external Gigabit LAN chip providing PHY Gigabit capabilities. This makes the on-chip LAN more like a port to communicate with the external Gigabit LAN PHY than it is a fully integrated Gigabit LAN chip. The end results are the same however - removing the Gigabit LAN from the constraints of the slower PCI bus.


NB In answer to a previous questiion: If your mouse is optical then no there would be nothing to clean. As I explained before there are programs that will do what you described but it is perfectly possible that there was another explanation.

You will just have to accept my word that the details you quoted are nothing out of the ordinary. They simply explain the workings of the motherboard chipset with regard to LAN connection between the different chips.

Trust me there is no connection between the computer that you sent the pictures of and the outside world.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 07:43:53 pm
Thank you for the information. So, you are certain that there is no way for someone to connect? Is there any way for me to clear the forlder and upload my pictures?

No! Definitely not. I don't know what folder it is that you are talking about so I can't comment on that I'm afraid.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 07:49:09 pm
Hello again. When I try to upload pictures, it says that I can't because there is no space, but my file is smaller than 1024 Kb which are allowed. Any idea how I could bypass this?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 07:54:13 pm
Are you talking about uploading pictures from the phone to the computer or from the computer to the internet? If so where on the net do you want to upload them to?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 07:55:55 pm
I want to upload the pictures you saw to this page from the computer. To let others know what we are talking about. Any ideas?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 07:58:32 pm
Oh, right now I understand. If you click on this link it will tell you how to do it but I must warn you it is a bit complicated.
http://forum.giga-byte.co.uk/index.php/topic,22.0.html
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 08:07:49 pm
https://mail.google.com/mail/?ui=2&ik=994814bbf6&view=att&th=12a3e373df08fec3&attid=0.1&disp=thd&zw
https://mail.google.com/mail/?ui=2&ik=994814bbf6&view=att&th=12a3e373df08fec3&attid=0.2&disp=thd&zw
https://mail.google.com/mail/?ui=2&ik=994814bbf6&view=att&th=12a3e373df08fec3&attid=0.3&disp=thd&zw
https://mail.google.com/mail/?ui=2&ik=994814bbf6&view=att&th=12a3e373df08fec3&attid=0.7&disp=thd&zw
https://mail.google.com/mail/?ui=2&ik=994814bbf6&view=att&th=12a3e373df08fec3&attid=0.8&disp=thd&zw
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 08:15:03 pm
Well done now everyone can see them.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 08:16:09 pm
Just lucky, I guess. Thank you for your help.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 08:19:18 pm
Your welcome. Try and put your mind at rest now regarding the people hacking into your computer. Just make sure that you clean the viruses off the drive and any other disks etc that you have.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 08:25:56 pm
http://www.insomnia.gr/forum/attachment.php?attachmentid=32365&d=1278417382

Dark Mantis, any idea why I got this message? Type 3 it is referring to, is network and the protocols it mentions allow anyone to connect without the need of administrative password. How can there have been a successful network connection on my pc?

I have many reasents to believe that someone manages to connect. Like I said, my brother and I have heard them talk about it. Could there be some kind of dongler at an other possition? Less obvious?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 06, 2010, 09:46:32 pm
If you look at the message that you uploaded in the bottom right hand corner it tells you the date and time of the login. From that you should be able to tell who it was. The connection was an anonymous login but that doesn't mean it came from outside it could just as easilly been someone using the computer. There is NO WAY that a dongle could be put somewhere other than attached to the computer and then be remotely connected. Your computer isnt being remotely hacked. 8)
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 10:19:47 pm
Ι am using my mobile now, when a user connects to the pc, starting it's a different type like 5 or 2. I have been checking these incidents. Τype 3 is netwοrk. Check the site of micrοsοft.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 06, 2010, 10:34:48 pm
Dοn't fοrget that paintbrush was trying tο cοntrοl my firewall with Dns resοlver/rpc. Τhat's netwοrk tοο, right? Αnd what is a recurcive type of cοnnectiοn, which a prοgram was trying tο access the net with, with svchοst?   
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 07, 2010, 09:02:36 am
Ι am using my mobile now, when a user connects to the pc, starting it's a different type like 5 or 2. I have been checking these incidents. Τype 3 is netwοrk. Check the site of micrοsοft.
Dοn't fοrget that paintbrush was trying tο cοntrοl my firewall with Dns resοlver/rpc. Τhat's netwοrk tοο, right? Αnd what is a recurcive type of cοnnectiοn, which a prοgram was trying tο access the net with, with svchοst?   
Lia, I have just had a word with my son about this and he agrees these are just your computer trying to make outbound connections to the internet. It can't so it keeps trying hence "recursive". Lots of programs try to "phone home" to check for updates etc. If there is any untoward connection attempts it is because of your virus, because that is the nature of a virus - to spread. Kill it off, clean the drive and move on.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: absic on August 07, 2010, 09:07:52 am
Got to agree with Dark Mantis. From the pictures you have posted there is no added physical connection to the outside world on your PC. The messages you are getting are pretty much the norm from a PC that wants to make contact with Microsoft and other software manufacturers for updates and security patches.

You should re-format the hard-drive and do a clean install of your OS,  you are not being hacked and you can stop worrying about something that really isn't a major problem.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 07, 2010, 12:45:05 pm
What is nVidia On-Chip LAN?
The Gigabit LAN capabilities on certain nForce3-250 chipsets is not really a fully integrated LAN. Like solutions in a few other chipsets that remove the LAN from the confines of the PCI bus, nVidia provides a port for direct communication of a Gigabit LAN PHY (Physical Layer) with the nForce3-250 family chipset. There is still an external Gigabit LAN chip providing PHY Gigabit LAN capabilities, which communicates directly with the nF3-250 chipset.

As a result, you cannot determine if an nVidia nForce3-250 family board has on-chip Gigabit LAN merely by looking at the specifications for other brand LAN chipsets. The on-chip LAN will still have an external Gigabit LAN chip providing PHY Gigabit capabilities. This makes the on-chip LAN more like a port to communicate with the external Gigabit LAN PHY than it is a fully integrated Gigabit LAN chip. The end results are the same however - removing the Gigabit LAN from the constraints of the slower PCI bus.


Please, give me some more information on that, the way I see it the motherboard has a way out. Could this be why I got the message about a recurcive type of connection? Don't forget that the incident said that it was a succesful connection, not just an attempt.
And how can the service of telephony be running on this pc?
Like I said, I can format the pc at any time, so unless I am annoying you, please help me a little more on that first.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 07, 2010, 01:10:23 pm
Lia, listen to what I am going to tell you. The specifications of the motherboard really don't matter. I could explain it right down to Electron Theory if you want but it isn't going to make it possible for your computer to transmit to ANYWHERE!

Now the listening devices under the floor are something entirely different ;)
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 07, 2010, 01:36:26 pm
Now the listening devices under the floor are something entirely different  I am not getting that, sorry.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 07, 2010, 03:27:42 pm
It was just a joke Lia. Don't worry about it. English humour. ;)
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 07, 2010, 11:41:52 pm
Sο hοw can there have been a succesful cοnnectiοn tο a netwοrk repοrted and why is telephοny running? Αny ideas?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 07, 2010, 11:46:58 pm
I can only think that it must have happened when your phone was connected to it. The telephony would be running anyway even if it is not being used it is just a protocol.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 08, 2010, 05:59:44 am
This incident has been reported mοre than οnce and I have nοt cοnnected it since the last fοrmat.
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Lia on August 08, 2010, 06:09:56 am
Fοrgive my asking again, it was using cpu. Hοw can this be withοut any type οf hardware tο suppοrt it? Dοes this prοtοcοl have tο dο with ethernet?
Title: Re: FCGIGABYTE GA K8NMF - 9 - Please Help!
Post by: Dark Mantis on August 08, 2010, 11:31:42 am
Any program or utility running on your computer, no matter how small or in the background will use CPU cycles. It is just the way the computer runs. There are processes running all the time even if you are not using them.