Am I being hacked? I really think so.

[SONIC Life]

Hello Everyone!

i\ve consulted the forum often but i just registered now, i really hope someone could give me advices, i had to install like 15 times all kinds of OS, now im on TRY ubutnu 12.10, because suddenly and as always my password changed itself when the 12.10 version was installed, so does passwords for firewall and antivirus when i used win 7 thats why i changed to ubuntu but even with linux i have really weirds thinks going on like my gmail account saying my account is open on more than one device when i only have one device, and that like i have like 5 browsers using it, it never happened before, it always told me its was open on 1 device and used 1 browser *mozilla! now i even have safari and other weird browsers.

i have dowloaded Firestarter, but it says that the log doesnt work so no adresses appears anymore, so i downloaded Gufgw to be able to confirgure the firewall, i do have the Icon but i could click a thousand times it wont open itselfs, i have no printer so when i remove a printer or scan apps on the ubuntu software center then it get shady and refuse to delete simple stuff or says that it depends on my drum machin !! hydrogen, like the scan depends on a drum machine !! and then the app center disappear most of the time and plenty of other things like that, been trying to protect my connection and pc for months now since the 24 of december in fact, im getting really annoyed bored of all this, i think my PC is corrupted and someone has acces to all the file systems and can change applications behaviours and/or sabotage them. All this happened to me with lubuntu, ubuntu 12.04 and ubuntu 12.10 and win 7. i think they have corrupted the initrg or intramfs or something but im a noob and powerless.

when i try to install the 12.10 with erase everything it refuses like a part of my PC is locked and secured FROM me, i cannot format the disk and install any OS,


when i type who on the terminal i get this

ubuntu   tty6         2013-03-13 09:55
ubuntu   tty5         2013-03-13 09:55
ubuntu   tty2         2013-03-13 09:55
ubuntu   tty4         2013-03-13 09:55
ubuntu   tty3         2013-03-13 09:55
ubuntu   tty1         2013-03-13 09:55
ubuntu   tty7         2013-03-13 09:59 (:0)
ubuntu   pts/2        2013-03-13 10:55 (:0.0)

also iv dowled

netstat:

roto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        1      0 192.168.1.2:57790       barbadine.canonica:http CLOSE_WAIT 
tcp        0      0 192.168.1.2:51054       64.209.77.25:http       ESTABLISHED
tcp        0      0 192.168.1.2:51059       64.209.77.25:http       ESTABLISHED
tcp        1      0 192.168.1.2:58414       barbadine.canonica:http CLOSE_WAIT 
tcp        1      0 192.168.1.2:57889       barbadine.canonica:http CLOSE_WAIT 
tcp        1      0 192.168.1.2:58365       barbadine.canonica:http CLOSE_WAIT 
tcp        1      0 192.168.1.2:58415       barbadine.canonica:http CLOSE_WAIT 
tcp        0      0 192.168.1.2:51055       64.209.77.25:http       ESTABLISHED

if this can help

sudo apt-get install ethtool
Reading package lists... Done
Building dependency tree       
Reading state information... Donefrom
The following NEW packages will be installed:
  ethtool
0 upgraded, 1 newly installed, 0 to remove and 304 not upgraded.
Need to get 97.6 kB of archives.
After this operation, 305 kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu/ quantal/main ethtool i386 1:3.4.1-1 [97.6 kB]
Fetched 97.6 kB in 0s (154 kB/s) 
Selecting previously unselected package ethtool.
(Reading database ... 160331 files and directories currently installed.)
Unpacking ethtool (from .../ethtool_1%3a3.4.1-1_i386.deb) ...
Processing triggers for man-db ...
Setting up ethtool (1:3.4.1-1) ...
ubuntu@ubuntu:~$ sudo ethtool eth0
Settings for eth0:
    Supported ports: [ TP MII ]
    Supported link modes:   10baseT/Half 10baseT/Full 
                            100baseT/Half 100baseT/Full 
                            1000baseT/Half 1000baseT/Full 
    Supported pause frame use: No
    Supports auto-negotiation: Yes
    Advertised link modes:  10baseT/Half 10baseT/Full 
                            100baseT/Half 100baseT/Full 
                            1000baseT/Half 1000baseT/Full 
    Advertised pause frame use: Symmetric Receive-only
    Advertised auto-negotiation: Yes
    Link partner advertised link modes:  10baseT/Half 10baseT/Full 
                                         100baseT/Half 100baseT/Full 
    Link partner advertised pause frame use: Symmetric
    Link partner advertised auto-negotiation: Yes
    Speed: 100Mb/s
    Duplex: Full
    Port: MII
    PHYAD: 0
    Transceiver: internal
    Auto-negotiation: on
    Supports Wake-on: pumbg
    Wake-on: g
    Current message level: 0x00000033 (51)
                   drv probe ifdown ifup
    Link detected: yes

My PC is a small asus made for XBMC which i dont use Eb 150 or something like that.

if someone could help me i would be very very very greatful !

Thank you for your time and good day

SL

[coldraven]

Are you using a wifi router?
One of your "friends" may have copied the wifi password which is usually on a sticker on the router.

If so I would log into the router change the router's password and then disable the wifi.
Then using a network cable go to https://www.grc.com/ and use the ShiedsUp to see if you have any ports open.
Your problems may be just caused by bad memory so it would be worth running memcheck from a Live CD
It takes a long time so let it run overnight.

[varunendra]

Thread moved to Security Discussions.

[SONIC Life]

i am using a wifi router but not the wifi itself i use a cable: modem, then router (wifi router but with a cable directly connected) then PC, i disabled wifi in the bios. i\ll try that thanks a lot.

[CharlesA]

I don't see anything wrong from either who, netstat or ethtool.

[JLeon85]

what is impossible to believe precisely?

You're telling us you have Safari on Ubuntu.

[CharlesA]

You're telling us you have Safari on Ubuntu.

Wow, I totally missed that. The only way I found to have Safari installed was to run it in WINE or PlayOnLinux.

[Soul-Sing]

barbadine.canonical.com is geo-ip which synchronize date/time on your computer. It isn't wise to turn it off.

[coldraven]

i am using a wifi router but not the wifi itself i use a cable: modem, then router (wifi router but with a cable directly connected) then PC, i disabled wifi in the bios. i\ll try that thanks a lot.

Turning off wifi on your own machine is not what I meant.

You need to log in to your router and switch it off there so that no-one can use or abuse your network.
I log into mine using Firefox, the address is http://192.168.2.1/ but yours may be different.

You will need to know the router's password and if you are worried then it would be best to change it.
Make the new password at least 15 characters long and make a note of it somewhere.

When logged in check your router's firewall status, make sure that it is set to maximum.
Read the instructions that came with your router or Google for it.

[SONIC Life]

no thats what gmail says im using when i log on to it. i never said i had safari on my computer. its says im logged with: firefox, gecko etc + safari and apple web kit, when i click on the last ten connections and that it is open on three different devices when i only have one even my phone isnt synced to anything and is turned off., thats is why in my INSANE mind, like you immeidiatly said, i start to think my connection might be hacked, corrupted or whatever, but that there is something wrong since i dont use any apple product, doesnt it seem weird to you?