Have I been hacked?

[LooK iTz Jinjo]

Ok so a couple weeks ago (7/11 to be exact) I changed ISP's from Optus, to Internode (the actual names are irrelevant so don't worry if you aren't from Australia and have no idea who either are). I went from a 512/128 kb/s connection to an ADSL2+ "Extreme" connection, though the line quality in my area is poor so I'm still only getting 4/1 Mb/s. I have a secure wireless network, strong password and it is hidden, firewalled etc.

So thats the background here is my problem, Optus never counted uploads, Internode on the other hand do, I have a 50GB limit and as of 4pm 19/11 I have used 41869.0 MB of data (Up and Down) but 29340.7 of it has been UPLOADS.

Now I do play a fair amount of online games (CoD, Gears, Halo) and I have been hosting of late, but I have friends who do so much more and yet don't use anywhere near this amount. So I decided to take constant screen shots of the usage and compare (Yet photobucket won't let me upload them so I can post them here for some reason). Today I was out all day and every computer and xbox was off (only the wireless network was left on). I came home and 2.5GB of data has been uploaded from my connection, yet no one was home to do any of it.

I have already changed all my network settings and passwords, uTorrent is only ever open when downloading and I have restricted the little uploading it can do to 1kb/s, I'm at my wits end, it says I've used over 40GB in 2 weeks and at this rate i will be capped in 3 or 4 days leaving me at dial-up speeds for a week and half. I am about to switch off my wireless network now for 2 or so hours and then come back and check if anymore uploads have been performed.

EDIT: A couple of you are suggesting getting rid my wireless network, this is impossible, we have 2 desktop computers, a laptop, an Xbox 360 and a printer all connected wirelessly, the house is far to big for them all to be wired as getting the cabling run through the walls is too expensive and the modem and router are in the kitchen as the only two phone ports we have are there and in my parents room (where the printer is allowing for faxes). As I said I completely changed my network name and password and it is hidden (you need to actually know the network name to connect).

EDIT2: I have WPA password.

EDIT3: So I just unplugged my wireless network for 2 hours (and in that time it appears that 6MB were UPLOADED, how? Fucked if I know, I'm going away for the weekend (YAY Schoolies) and will return on monday, the xbox and my computer will not be on in that time, if I get back and still have this problem I am most likely going to shut my network for a couple of days and maybe reformat the computers (in case it is a virus). Other than that I don't know what I can do.

 

[CuddlyCombine]

snip

Sounds like somebody's piggybacking your signal. Either this, or the ISP fucked up somewhere. I'm willing to bet one of your neighbours aircracked your network and is uploading torrents or something equally devious.

 

[NickIsCool]

if you have a wireless router, someone could be bumming internet off of you to upload stuff

im not sure how to help with it, i just want to be helpful in finding a solution

 

[grimsprice]

one of two things are happening. Either you have been hacked. Or the internet company is shitting on your forehead and hoping you won't notice. Most likely you're being pigybacked on by some douche with a laptop.


FIX: try connecting your computer strait to your router. Move it around and do what you have to do to cut out the wireless. That should fix your wireless piggybacker.

 

[Canadamus Prime]

Hmmmm.... Do you use any kind of anti-virus? Might want to have it run a thorough scan for any trojans.

 

[LooK iTz Jinjo]

Hmmmm.... Do you use any kind of anti-virus? Might want to have it run a thorough scan for any trojans.

I am an arrogant Mac user and my laptop has 0 protection, not sure about the others (brothers and parents computers) but yeah.

 

[elfalot]

I'm with Internode myself (Standard ADSL though) I assume your are checking your usage through the website, I use a tool from their site called Monthly Usage Meter (MUM for short) which has sometimes reported that my usage has jumped significantly in a short amount of time due to a server problem, but i don't know if the website has the same problem. Have you checked the advisories section sometimes they mention problems like incorrect usage reported.
Plus an easy way to eliminate the possibility of a hijack would be to use a wired network if possible for a little while at least until you can tell, and probably contact internode to check if their is something wrong at their end that they can fix.

 

[Canadamus Prime]

Hmmmm.... Do you use any kind of anti-virus? Might want to have it run a thorough scan for any trojans.

I am an arrogant Mac user and my laptop has 0 protection, not sure about the others (brothers and parents computers) but yeah.

Fair enough. Might want to check into their activities though and security precautions.

 

[Weaver]

make sure you have at least WPA encryption on any wireless signals you're hosting. WEP is pretty easy (and fun) to break.

 

[Baggie]

Quickest and easiest is to unplug your wireless and go wired for a few days. If that works, then you might want to go linching.
Or maybe ungrade your network security somehow.

 

[DarkMessiah]

Are you using WEP or WPA encryption on your wireless?

 

[Diablini]

If you REALLY don't want to cap your usage, unconnect from that network, call your provider and tell them all that. They'll tell you if it's someone leaching or it's on their end.

 

[Christemo]

connect straight to your router via cable, cut the wireless connection, install Avira Antivirus and make it scan your mac, and you should be alright.

 

[xDarc]

You didn't download a game from the web like Lord of the rings online did you? Those games download on a peer to peer connection instead of from a server. So what that means is when you download the game it installs the p2p component and will continue to upload itself to other people trying to download it until you get rid of the p2p program. I think it's called pando or something like that.