Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 02-21-2005, 11:07 AM   #1
Baseband Member
 
thecoolkid's Avatar
 
Join Date: Feb 2005
Posts: 91
Default Hacked?

Hey my name is james.

I was recently looking through the taskmanager and found cmd.exe running. It was taking up no ram but was just sitting there. I checked the user name and I found that it was one of a previous account that was not working at the time and that I had not logged in on. I found no other suspicious process runned under that name so I am very confused. I fear that they might be running a listening netcat but I found no evidence of this. I have found no other signs of a any backdoors and I
have a pretty good knowledge of computer systems.

Programs used:
Fport-found nothing unusual
Netstat -an-found a few suspicious ports and telneted to them and found nothing
Taskmanager-found suspicious process
NTLast-Found Logged in unused account
Event Viewer-found audited accounts for unused user account and found that it had logged in multiple times over the last few months.

Plz help. This computer is extremely important to business and other parts of my life.

OS-WinXP Home
Computer-HP
Email me if you have any suggestions/questions. jammerx12@yahoo.com

Thanks again...
__________________

__________________
"Computers are one per cent inspiration and ninety-nine per cent perspiration. Accordingly, a 'computer' is often merely a talented machine who has done all of its homework."

-Thomas Edison, Modern Day.
thecoolkid is offline   Reply With Quote
Old 02-28-2005, 12:47 PM   #2
Baseband Member
 
Join Date: Feb 2005
Posts: 32
Default

Hi,

try http://housecall.trendmicro.com/hous...start_corp.asp or another online virus scan... and if it wont work and ur computer is important like u say, just safe all ur data on a dvd or another harddisk and format c:.

cya
__________________

Lizard is offline   Reply With Quote
Old 02-28-2005, 02:37 PM   #3
Daemon Poster
 
DevilHack's Avatar
 
Join Date: Feb 2004
Posts: 523
Send a message via AIM to DevilHack
Default Re: Hacked?

Erg.. Baka!
1]You have the Linux penguin icon but your on win32..

2]If you have multi-users or are connected to another person in the house they could have had it up and it would have showed.

3]Even if someone hacked you they only hacked cmd.exe so they can't do much that you can prevent.. Just take the computer offline and see if cmd.exe goes away.
DevilHack is offline   Reply With Quote
Old 02-28-2005, 04:27 PM   #4
In Runtime
 
Maelmord's Avatar
 
Join Date: Mar 2003
Posts: 191
Default

hahaha, BAKA BAKA BAKA

ogenki desuka davilhack kun
__________________
http://www.lindonslog.com
Maelmord is offline   Reply With Quote
Old 02-28-2005, 07:20 PM   #5
Daemon Poster
 
DevilHack's Avatar
 
Join Date: Feb 2004
Posts: 523
Send a message via AIM to DevilHack
Default Re: Hacked?

O-O Uhm.
Sasuke? XD;;
DevilHack is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 07:02 PM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0