WiFi Network Connection Security Problem?

Black Swan

Running Windows XP-2 with all the recent update/patches on a laptop. WiFi is a built in "g." If I leave the Wireless Network Connection Status (General) window up while I am running on WiFi and monitor the Speed, I have noticed that it sometimes drops from the normal 54.0 Mbps all the way to 1.0 Mbps, but more often in the 30's. If I switch off my WiFi card for just a second then back on, it immediately reconnects and jumps back up to 54.0 Mbps and stays there awhile before dipping to the 30's or below (sometimes never dropping again). When it drops to the 30's or below the system noticably slows if surfing or doing email. But when I toggle off/on the WiFi switch, it jumps back to 54.0, it runs fast again.

I keep my system pretty clean, and when off-line, it runs just as fast as it did when new. Only does it slow when this drop occurs from 54.0 to something less on WiFi.

I have suspected a security problem, and, although I have the standard MS Windows Firewall, I do have about 8 different anti-virus/malware programmes running (all updated daily), and have done sweeps without detecting anything.

I am wondering if I might have been infected with a RAT (Remote Access Trojan) or something similar, that has enslaved my system and turned it into a networked zombie? Or perhaps a root of some sort on my hard drive that cannot be detected, that is doing the same thing?

Not to sound paranoid in this day and age, I have also thought that someone might have installed something on my system that somehow depresses my Speed when they are taking a look (snooping) or transferring data from work that I share with another (I am a fictional novel co-author with someone). Often the drop in Speed from 54.0 Mbps occurs when I transmit, but not always. I have searched for keyloggers, backdoors, trojans, and such types of malware without any luck.

It should be noted that this problem occurs at several different cafe free hotspots that I visit when logged on to WiFi (with different ISPs).

Does anyone understand why this is occurring, and if spyware, or whatever, how to detect and remove it safely?

layke

Most likely it's not a Trojan or Spyware. Your connection rate should still read 54MBS althought the usage would be through the roof if you get me.

have suspected a security problem, and, although I have the standard MS Windows Firewall, I do have about 8 different anti-virus/malware programmes running (all updated daily), and have done sweeps without detecting anything.

REMOVE all but one AV product! They do not like each other and probably won't work at all if more then one is installed.

Try another wireless card if you can bud, i've seen problems like this and it turned out to bwe the hardware. Or even try your card on a mates PC, just to check if it works.

Black Swan

layke wrote:

REMOVE all but one AV product! They do not like each other and probably won't work at all if more then one is installed.

Was following the recommendations found in several articles of PC WORLD, MAXIMUM PC, and WIRED magazines over the past few months regarding the detection and removal of malware. Although they recommend that only one firewall be used, they have often recommended that more than one malware programme be used, as no one programme will detect or block the vast number of malware that is created each day. Have experimented with the addition of anti-malware programmes, and some, like you say, do not mix well with others. The several that I am currently running in a bundle seem to get along without programming bugs and will, on occasion detect, block or quaranteen malware that the others do not. I have detected little or no drain on my CPU with these, except when they are scanning, updating, or blocking/quanteening.

NutJob

See what rootkit revealer turns up

seamus

Sounds to me like interference more than anything. Does this happen on every wireless network you use (if you use more than one)?

CiaranC

Sounds like normal WiFi performance to me. Normal interference will cause the variance in signal strength you describe. Dont expect 54Mb/s anywhere away from right beside the AP.

Black Swan

seamus wrote:

Sounds to me like interference more than anything. Does this happen on every wireless network you use (if you use more than one)?

I go to several hotspots. It seems to happen at most of them. I might be at a hotspot an hour or so before it happens, or shorter, or not at all. I quickly switch my WiFi off then on. The Speed then jumps back to 54.0 Mbps everytime.

Live near a major university that has a large IS/Computer Programming Department. Rumour has it that a lot of the students play cracking others laptops. Have busted a couple cracking me over the past few months.

I've been at this hotspot for about 23 minutes, and I'm still running at 54.0. No change.

Black Swan

NutJob wrote:

See what rootkit revealer turns up

Will try this tonight.

Black Swan

It just happened in this cafe hotspot. Was on boards.ie and running at 54.0 Mbps and about 59 minutes had passed without a decline in speed. Noticed the boards.ie window slightly got brighter and then returned to normal, but the speed had dropped to 36.0. I flicked the wifi button off then on in less than one second, and the speed jumped back to 54.0.

Karoma

Update your network card drivers & turn off power saving mode.

For home: survey, using NetStumbler or Kismet for surrounding networks. Ensure that the channel which you're using is at least +/- 2 channels away from the nearby net's.

NutJob

Blue_Lagoon wrote:

It just happened in this cafe hotspot. Was on boards.ie and running at 54.0 Mbps and about 59 minutes had passed without a decline in speed. Noticed the boards.ie window slightly got brighter and then returned to normal, but the speed had dropped to 36.0. I flicked the wifi button off then on in less than one second, and the speed jumped back to 54.0.

Wifi is flakey as hell and expect everything from flakey drivers(noted for it ) to all sort of interference due to the frequancy being unlicenced so all sorts of devices run on the band.

I should have read ur post more carefully but was rushing as usual. I think its unlikely that malware would have the effect below and remember that the max speed to the internet isnt at the 54 mb wireless speeds its only 1mb or 2mb so effect of slight speed drops should be minimal.

Karoma

Oh... I'm slipping...