Odd network behavior: Think I am being monitored or spoofed.

[joeyppeters]

I've been having consistent weird network issues over the last two weeks. I've contacted my ISP spectrum twice, downloaded dozens of different anti-virus software and have been unable to find an issue, even using Spectrum's own router diagnostics. However, I downloaded a tool called Xarp and it is detecting attacks coming from IP's I do not recognize, I am getting very upset and am unsure what to do.

I am running Windows 10 the most alarming odd behavior is notifications of other users accessing my documents and Avira notifications of suspicious access attempts to a hosts file.

 

[jojesa]

Does it happens to all devices connected to your network?
Does it happens when you visit certain websites?

 

[dshort01]

Use "Whois" or one of the other sources to look up the IP addresses and you can see where the sources are coming from.

 

[joeyppeters]

Does it happens to all devices connected to your network?
Does it happens when you visit certain websites?

There is no detection from Xarp on my laptop. I am pretty certain that I am having issues no matter what sites I am using. Although, I forgot to mention above, there is oddly high CPU usage on my both of my machines and it suspiciously lowers back to normal usage when I open Task Manager.

 

[mdd1963]

Nuke and pave all systems exhibiting such behavior...; many malicious cryptomining apps will suspend/hide themselves when task manager is opened...

Try MS's process explorer instead....
https/docs.microsoft.com/en-us/sysinternals/downloads/process-explorer

 

[joeyppeters]

Nuke and pave all systems exhibiting such behavior...; many malicious cryptomining apps will suspend/hide themselves when task manager is opened...

Try MS's process explorer instead....
https/docs.microsoft.com/en-us/sysinternals/downloads/process-explorer

I've used process explorer and found the culprit is svchost.exe. There are a lot and I cannot locate the specific process causing it so I may have to nuke as you said.