Firefox는 빠른 계획에도 불구하고 엄청난 지연으로 URL을로드하기 시작했습니다 (70MBit 다운로드)
또한 창 하단의 상태 표시 줄에 때때로 인쇄됩니다. waiting for 192.168.101.1:8888
노트북이 dns-nameservers구성되어 있지 않은 WiFi를 통해 연결되어 /etc/network/interfaces있고 라우터가 ISP에 유선으로 연결되어 있습니다.
그 IP 주소는 누구의 것입니까? 브라우저가 이상한 주소를 기다리는 이유는 무엇입니까?
최신 정보:
~ > ifconfig
eth0 Link encap:Ethernet HWaddr e0:db:55:d9:75:56
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:51841 errors:0 dropped:0 overruns:0 frame:0
TX packets:51841 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2886606 (2.8 MB) TX bytes:2886606 (2.8 MB)
wlan0 Link encap:Ethernet HWaddr 60:36:dd:5b:45:58
inet addr:192.168.1.64 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:135266 errors:0 dropped:0 overruns:0 frame:0
TX packets:125324 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:125014077 (125.0 MB) TX bytes:21390135 (21.3 MB)
UPDATE2 :
내 노트북이 해킹되었다고 결론을 내 렸습니다.
연결 telnet 192.168.101.1 8888에서 명령을 보여주는 것은 무엇입니까?GET / HTTP1.1
을보십시오 <LI><A HREF="data_durablis/">data_durablis/</A>. 나는에 자신에 의해, 따라서 이러한 링크를 해당 폴더를 만들어 내 폴더를 설치 리눅스 전형적이지, 루트 디렉토리 폴더.
<HTML>
<HEAD>
<TITLE>Directory /</TITLE>
<BASE HREF="file:/">
</HEAD>
<BODY>
<H1>Directory listing of /</H1>
<UL>
<LI><A HREF="./">./</A>
<LI><A HREF="../">../</A>
<LI><A HREF=".rpmdb/">.rpmdb/</A>
<LI><A HREF="0">0</A>
<LI><A HREF="bin/">bin/</A>
<LI><A HREF="boot/">boot/</A>
<LI><A HREF="cdrom/">cdrom/</A>
<LI><A HREF="core">core</A>
<LI><A HREF="data/">data/</A>
<LI><A HREF="data_durablis/">data_durablis/</A>
<LI><A HREF="dev/">dev/</A>
<LI><A HREF="etc/">etc/</A>
<LI><A HREF="home/">home/</A>
<LI><A HREF="initrd.img">initrd.img</A>
<LI><A HREF="initrd.img.old">initrd.img.old</A>
<LI><A HREF="lib/">lib/</A>
<LI><A HREF="lib32/">lib32/</A>
<LI><A HREF="lib64/">lib64/</A>
<LI><A HREF="libnss3.so">libnss3.so</A>
<LI><A HREF="lost%2Bfound/">lost+found/</A>
<LI><A HREF="media/">media/</A>
<LI><A HREF="mnt/">mnt/</A>
<LI><A HREF="opt/">opt/</A>
<LI><A HREF="proc/">proc/</A>
<LI><A HREF="root/">root/</A>
<LI><A HREF="run/">run/</A>
<LI><A HREF="sbin/">sbin/</A>
<LI><A HREF="srv/">srv/</A>
<LI><A HREF="sys/">sys/</A>
<LI><A HREF="tmp/">tmp/</A>
<LI><A HREF="usr/">usr/</A>
<LI><A HREF="var/">var/</A>
<LI><A HREF="vmlinuz">vmlinuz</A>
<LI><A HREF="vmlinuz.old">vmlinuz.old</A>
</UL>
</BODY>
</HTML>
Can't connect to HTTP1.1:80 (Bad hostname)
LWP::Protocol::http::Socket: Bad hostname 'HTTP1.1' at /usr/share/perl5/LWP/Protocol/http.pm line 41.
과 route
> route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.1.254 0.0.0.0 UG 0 0 0 wlan0
192.168.1.0 * 255.255.255.0 U 9 0 0 wlan0
과 traceroute
> traceroute 192.168.101.1
traceroute to 192.168.101.1 (192.168.101.1), 30 hops max, 60 byte packets
1 192.168.1.254 (192.168.1.254) 7.812 ms 8.046 ms 8.306 ms
2 10.134.0.1 (10.134.0.1) 12.951 ms 13.556 ms 13.567 ms
3 10.254.246.49 (10.254.246.49) 15.881 ms 15.197 ms 16.198 ms
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
UPDATE3 :
> cat clamscan,report3.txt
> grep -v ": OK" clamscan,report2.txt | grep -v ": Empty file" | grep -v ": Can't read file ERROR" | grep -v ": Symbolic link" | grep -v "/proc/"
/usr/local/share/multisystem/EFI/BOOT/BOOTx64.EFI: Win.Trojan.Agent-1428496 FOUND
/home/user/Azureus Downloads/Kingpin - How One Hacker Took Over the Billion-Dollar Cybercrime Underground/Kingpin - How One Hacker Took Over.tgz: Html.Phishing.Bank-1305 FOUND
/home/user/.thunderbird/fbndhlgo.default/Mail/pop.mail-2.ru/Trash: Heuristics.Phishing.Email.SpoofedDomain FOUND
/home/user/Dropbox/books/программирование/Э. Хант, Д. Томас
/home/user/Dropbox/books/программирование/Kingpin - How One Hacker Took Over.epub: Html.Phishing.Bank-1305 FOUND
/home/home/user/.wine/drive_c/Games/Counter-Strike 1.6/hlds.exe: Win.Trojan.Agent-1276168 FOUND
/home/home/user/.wine/drive_c/Games/Counter-Strike 1.6/proxy.dll: Win.Trojan.Ramnit-7771 FOUND
/home/home/user/.wine/drive_c/Games/Counter-Strike 1.6/valve/cl_dlls/particleman.dll: Win.Trojan.Ramnit-6181 FOUND
/home/home/user/.wine/drive_c/Games/Counter-Strike 1.6/platform/AddOns/spades/Spades.dll: Win.Trojan.Ramnit-5848 FOUND
/home/home/user/.wine/drive_c/Games/Counter-Strike 1.6/platform/Friends/friendsUI.dll: Win.Trojan.Ramnit-7169 FOUND
/home/home/user/.thunderbird/fbndhlgo.default/Mail/pop.mail-2.ru/Trash: Heuristics.Phishing.Email.SpoofedDomain FOUND
그것은 로컬 IP입니다. 컴퓨터의 IP는 무엇입니까? 프록시 또는 VPN이 설정되어 있습니까?
—
TheWanderer
VPN과 프록시 모두에 해당되지 않습니다.
—
zuba
ifconfig출력 문제가 업데이트되었습니다
출력은
—
Terrance
netstat | grep 192.168.101.1무엇입니까?
12 분 후 telnet GET / HTTP / 1.0에서 192.168.101.1로 보낸 명령은 유효한 HTTP를 반환했습니다 .Firefox에서 열릴 때 매력처럼 횡단 할 수있는 하위 디렉토리에 대한 작업 링크가있는 루트 파티션이 표시되었습니다.
—
zuba
내 노트북이 해킹 되었습니까?
—
zuba