Weird Thing Happening With Virgin Wifi

donnac2558

Okay, sorry if I come across as dumb but here goes.

I have internet with VirginMedia.

So since the weekend I keep getting Malicious Site warnings on both Firefox and E also antivirus shows warnings when using Wifi.

So as I have a few Ethernet cables in a drawer plugged one in. Not happening at all!

So Facebook, here and a few other forums and blogs I read, on wifi malicious, yet plug in Ethernet and bang all is well.

So is this a problem with the router/hub on wifi?

Thank you for any suggestions.

esuhl

Is it possible you have some kind of malware that's redirecting requests over wifi to a malicious proxy/dns server...?

I'm not sure why only wifi would be affected though. I'd check your network settings while you're connected via wifi, double-check you're not inadvertently connecting to somebody else's (unsecured?) network.

And maybe run scans for malware with adwCleaner and Anti-Malware:
https://www.malwarebytes.com/adwcleaner/
https://www.malwarebytes.com/

System

Hi

It is possible that your WiFi settings are set to AUTO DHCP etc. Which could mean your ethernet cable is pointed at 194.168.4.100 and your WiFi at 68.105.28.11 or similar and being hijacked.

donnac2558

No idea never check the auto dhcp?

I have used wifi for years and this only started at the weekend. A few times Firefox was doing this, but they did an update and all was well.

Both wifi and ethernet show 351409.2G secure

donnac2558

esuhl wrote: »

Is it possible you have some kind of malware that's redirecting requests over wifi to a malicious proxy/dns server...?

I'm not sure why only wifi would be affected though. I'd check your network settings while you're connected via wifi, double-check you're not inadvertently connecting to somebody else's (unsecured?) network.

And maybe run scans for malware with adwCleaner and Anti-Malware:
https://www.malwarebytes.com/adwcleaner/


https://www.malwarebytes.com/

But wouldn't it do the same on Ethernet and not just wifi if infected?

kwikbreaks

Are you 100% certain that it's your own wifi that you are connecting to?

esuhl

donnac2558 wrote: »

But wouldn't it do the same on Ethernet and not just wifi if infected?

I would have thought so, but malware could have modified the network settings of just your wifi (perhaps because you were using Ethernet at the time the malware installed). Just a guess. But it's easy to run a scan to rule it out.

You could also run ipconfig /all from a command prompt when connected to Ethernet and wifi and confirming that you're connecting to the same gateway on the same subnet, etc. (Just post the output here if you're not sure.)

System

Hi

Just as an aside,
EG:
WiFi settings
IP4.ADDRESS[1]: 192.168.0.14/24 IP4.GATEWAY: 192.168.0.1 IP4.DNS[1]: 68.105.28.11 IP4.DNS[2]: 68.105.29.11 IP4.DNS[3]: 68.105.28.12
DHCP4.OPTION[24]:domain_name_servers = 68.105.28.11 68.105.29.11 68.105.28.12

Ethernet (Yeah I know it's Google, but each to their own).
DNS Servers . . . . . . . . . . . : 8.8.8.8 8.8.4.4

donnac2558

johndough wrote: »

Hi

Just as an aside,
EG:
WiFi settings
IP4.ADDRESS[1]: 192.168.0.14/24 IP4.GATEWAY: 192.168.0.1 IP4.DNS[1]: 68.105.28.11 IP4.DNS[2]: 68.105.29.11 IP4.DNS[3]: 68.105.28.12
DHCP4.OPTION[24]:domain_name_servers = 68.105.28.11 68.105.29.11 68.105.28.12

Ethernet (Yeah I know it's Google, but each to their own).
DNS Servers . . . . . . . . . . . : 8.8.8.8 8.8.4.4

Sorry but I an not that tech minded just simple instructions please.

donnac2558

esuhl wrote: »

I would have thought so, but malware could have modified the network settings of just your wifi (perhaps because you were using Ethernet at the time the malware installed). Just a guess. But it's easy to run a scan to rule it out.

You could also run ipconfig /all from a command prompt when connected to Ethernet and wifi and confirming that you're connecting to the same gateway on the same subnet, etc. (Just post the output here if you're not sure.)

Sorry writing this out on paper like war and peace.

default Gateway: :dchpv6 IAID 452984832
DHCPv6 Client DUID 452984832

DHCPv6 Client DUID 00-01-00-01-1B-AE-23-F6-88-51-FB-C6-2F-C4

NetBIOS OVER TCPIP DISABLED

Hope this helps the idea of having to hand write the whole thing:eek:

donnac2558

Just to update. Unplugged Ethernet this morning and Wifi is working normally again. Now whether later in the day it will start the random warnings?