F5F Stay Refreshed Hardware Desktop Seeking advice on completely clearing your devices.

Seeking advice on completely clearing your devices.

Seeking advice on completely clearing your devices.

H
hamstercandy26
Member
50
10-20-2021, 02:35 PM
#1
Hello everyone, I’m really drained—both mentally and physically. Let me set the scene: I’ve been dealing with a series of strange events for about three to four months now. Around four weeks ago, I noticed a MITM and DNS attack. To try and avoid it, I reset everything and cleared all old accounts, usernames, phone numbers, and more. I replaced my modem and router. It was a Friday. Then, on Monday, things got really intense. At one point, it felt like they were throwing a martyrdom grenade—running Hitman Pro caused two 1TB NVMe drives to vanish and made my OS write-protected. Since then, the situation has only gotten worse, with daily escalations from them. It’s like playing an odd version of King of the Hill or Capture the Flag, especially concerning my router and network. The challenge is they can take over a machine in just 24 hours, possibly faster if I wasn’t working a day job. My main concern is that it might be a root kit, and combined with their network takeover, they could install harmful software across my system. They’re also likely using a Windows Mirror Trojan or similar to stay active both inside the OS and online, gradually limiting my access by protecting key files. I need to clear everything down to bare metal—PCBs and metal. Any suggestions? I’m especially curious about motherboards first: I have a Z690 with 12900K, an Asus Prime 560M-A, an i9 10900 EVGA X299, and a Windows 11 Pro with an upcoming i5. I’ve considered wiping the SPI interface, but every file I download seems infected with malware. Any advice would be greatly appreciated. Thanks.
H
hamstercandy26
10-20-2021, 02:35 PM #1

Hello everyone, I’m really drained—both mentally and physically. Let me set the scene: I’ve been dealing with a series of strange events for about three to four months now. Around four weeks ago, I noticed a MITM and DNS attack. To try and avoid it, I reset everything and cleared all old accounts, usernames, phone numbers, and more. I replaced my modem and router. It was a Friday. Then, on Monday, things got really intense. At one point, it felt like they were throwing a martyrdom grenade—running Hitman Pro caused two 1TB NVMe drives to vanish and made my OS write-protected. Since then, the situation has only gotten worse, with daily escalations from them. It’s like playing an odd version of King of the Hill or Capture the Flag, especially concerning my router and network. The challenge is they can take over a machine in just 24 hours, possibly faster if I wasn’t working a day job. My main concern is that it might be a root kit, and combined with their network takeover, they could install harmful software across my system. They’re also likely using a Windows Mirror Trojan or similar to stay active both inside the OS and online, gradually limiting my access by protecting key files. I need to clear everything down to bare metal—PCBs and metal. Any suggestions? I’m especially curious about motherboards first: I have a Z690 with 12900K, an Asus Prime 560M-A, an i9 10900 EVGA X299, and a Windows 11 Pro with an upcoming i5. I’ve considered wiping the SPI interface, but every file I download seems infected with malware. Any advice would be greatly appreciated. Thanks.

P
PGVortex
Member
146
10-24-2021, 05:02 AM
#2
Isn't this the kind of issue TPM is meant to address? Also, what security tools were you using before this? So I can avoid them. Additionally, if they’re consistently breaching your network, it makes sense to involve your ISP.
P
PGVortex
10-24-2021, 05:02 AM #2

Isn't this the kind of issue TPM is meant to address? Also, what security tools were you using before this? So I can avoid them. Additionally, if they’re consistently breaching your network, it makes sense to involve your ISP.

T
thibdu87
Member
229
10-27-2021, 09:29 AM
#3
They control the equipment. I’m guessing. It seems they might be using Bluetooth and still sending data even without a network. USB works too—they glow like Christmas lights whenever the device connects, sending broadcasts every second. My luck has been limited to resetting the router, switching to a clean laptop, clearing DNS caches, trying different browsers, resetting the password, and finally blocking incoming connections. I’m forced to complete this in just five minutes. I reached out to my ISP, but moving from their first to second line of contact is quite challenging. I asked for a new IP allocation next time I try, and I’m with Comcast. The company doesn’t list a customer service phone number on their contact page. This should stop what TPM is meant to prevent. It looks like they already have the keys, or B: they’re actually in there, or C: they’re breaking it through decryption. You can see it in the logs—it’s really interesting. Edited May 1, 2022 by M1904
T
thibdu87
10-27-2021, 09:29 AM #3

They control the equipment. I’m guessing. It seems they might be using Bluetooth and still sending data even without a network. USB works too—they glow like Christmas lights whenever the device connects, sending broadcasts every second. My luck has been limited to resetting the router, switching to a clean laptop, clearing DNS caches, trying different browsers, resetting the password, and finally blocking incoming connections. I’m forced to complete this in just five minutes. I reached out to my ISP, but moving from their first to second line of contact is quite challenging. I asked for a new IP allocation next time I try, and I’m with Comcast. The company doesn’t list a customer service phone number on their contact page. This should stop what TPM is meant to prevent. It looks like they already have the keys, or B: they’re actually in there, or C: they’re breaking it through decryption. You can see it in the logs—it’s really interesting. Edited May 1, 2022 by M1904