Question re: computer security

[KimR]

We have a password protected wireless router and since last night, I've been getting pop-up warnings from McAffee saying that an intruder has connected to our network. Sure enough, when I open up the network map, it shows about 10 unknown computers that appear to be connected to our network. I'm confused - how is this possible with a password protected router? Do I need to be concerned about this?

I've already flagged these as intruders so I don't know what else I can do. I thought with password protection as well as McAffee we wouldn't have to worry about this kind of thing.

 

[FireDancer]

Do you mean password protected or encrypted? If you mean password protected you did change the default password, right? Password protected is just the web interface used to configure the router. A router that is only password protected and the connections not encrypted is just as wide open for other people to connect. Also, the default password is known to everyone or can be found via a Google search. Lastly, if you are using WEP as opposed to WPA for the encryption it might as well be open as WEP is so easily crackable.

A couple of things I would do to secure your router:

1. Change the default admin password, turn of WAN side administration, and turn of uPNP (Universal Plug and Play).

2. Change the default LAN address. If it is set to 192.168.0.1 change it to 192.168.something else.0

3. Turn on WPA2 if it is available, if not at least WPA. If it has neither get a new router.

4. Set a good encryption string that is at least twenty characters long. Check the rules of the router to see if it will take the full ASCII character set, alpha-numeric character set, or if it is restricted to something like the HEX set. It will most likely be the former. By good I mean go to a site like this that will generate a psudo random string and use it. Since it only has to be entered once into the router and once into each computer you use you don't have to memorize it. Don't store the password on a computer but write it down and file it.

The password should look something like:

[FONT=courier new,courier]ty*+gwOcSm<>Q@r~zH-M?NQ+xgYvwwx)U[z@[/FONT]

 

[KimR]

DH is the one who set it up and I'm sure he changed the default password; however I don't know if it's encrypted. I will show this to him - thank you!

Weird, though, that all of a sudden we've started having problems.

 

[agnes!]

I think your situation could be one of two things...

Either
it's all real and ten of your neighbors are stealing bandwidth from you...
(I have to admit I find it kind of hard to believe that folks would go after a password-protected system when I *know* - for instance in my suburban neighborhood - that there are so many people whose networks are completely unsecured)
*or*
this whole thing (with the sudden "McAfee" pop-ups) is a malware/adware/spyware/virus that is not 'real'.

In either case, I would still take FireDancer's advice, even though I don't understand it . (I'll have to show his post to my teen-age DD, she might get it.)
agnes!

 

[HappyDznyCamper]

While waiting to follow the pp advice to secure your network properly, check to make sure it isn't malware. Go to malwarebytes.org and run their free scan, after that you may also want to look into AVG free for protection vs McAfee. I haven't needed malware removal in a while, but I'm pretty sure that is the site, AVG free is very good, in some opinions better than many paid antiviral programs.

 

[agnes!]

Just thought of something else... Google your situation. If this is malware, then I bet other people on the 'Net are posting about their system's infections.

agnes!

 

[DisneyBamaFan]

Unless you live in an apartment, I seriously doubt that there are 10 people close enough to connect to your wireless router...

 

[dawson5]

I'm in subdivision, I usually see 6 throughout the day. Sometimes a few more on the weekend, a few less. (and yes we can connect, oldest DS tested this on his touch before we had the router, granted some better than others)

 

[Eeyore'sthebest]

Do you mean password protected or encrypted? If you mean password protected you did change the default password, right? Password protected is just the web interface used to configure the router. A router that is only password protected and the connections not encrypted is just as wide open for other people to connect. Also, the default password is known to everyone or can be found via a Google search. Lastly, if you are using WEP as opposed to WPA for the encryption it might as well be open as WEP is so easily crackable.

A couple of things I would do to secure your router:

1. Change the default admin password, turn of WAN side administration, and turn of uPNP (Universal Plug and Play).

2. Change the default LAN address. If it is set to 192.168.0.1 change it to 192.168.something else.0

3. Turn on WPA2 if it is available, if not at least WPA. If it has neither get a new router.

4. Set a good encryption string that is at least twenty characters long. Check the rules of the router to see if it will take the full ASCII character set, alpha-numeric character set, or if it is restricted to something like the HEX set. It will most likely be the former. By good I mean go to a site like this that will generate a psudo random string and use it. Since it only has to be entered once into the router and once into each computer you use you don't have to memorize it. Don't store the password on a computer but write it down and file it.

The password should look something like:

[FONT=courier new,courier]ty*+gwOcSm<>Q@r~zH-M?NQ+xgYvwwx)U[z@[/FONT]

I'm reading this and thinking "Wow, I thought I understood computers. Obviously not!" You could have typed that in Greek for all the sense it made to me. I'll stick to finances.

 

[scrapquitler]

I was thinking about this last night...could some of those 'unknown computers' on your network be things you actually have on your network but aren't thinking about , like an Itouch, a web enabled cellphone, a TIVO, a security system, a Wii or other videogame system, a Nintendo DS, etc???