Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 02-27-2008, 02:15 AM   #1
Daemon Poster
 
geek_gal's Avatar
 
Join Date: Jun 2005
Posts: 1,245
Send a message via MSN to geek_gal Send a message via Yahoo to geek_gal
Default Possible hacker/Trojan ect?

Ok so ive had werid thing's happen to my pc, my screen use to blank black, like 'ghosting' i read that it was a sign of hacking, so parnoira set's in, i changed moniter, just incase.

Now out of know where msn try's to acess the net, even though i barely, if anytime use msn anymore.
Now i googled it coz before ive unticked somewhere in options(ive totally forgotten) that not to let something like msn spam or something?

It was something like 'Disable Windows Messenger broadcasts on UDP port 1900'.

Msn tryed to acess that port, 1900
msnmsgr.exe was the program.

Also to note my IP address changed a few weeks ago, which is strange since i was told it does'nt change the first 3 numbers. Like;
122.
__________________

__________________
Am2 AMD 64 X2 3600+, 1G Ram DDR,
[[*Need a new Gfx Card & 1 more Ram stick// 1GB*]]
Sony Avatar's!
geek_gal is offline   Reply With Quote
Old 02-27-2008, 03:50 AM   #2
Daemon Poster
 
geek_gal's Avatar
 
Join Date: Jun 2005
Posts: 1,245
Send a message via MSN to geek_gal Send a message via Yahoo to geek_gal
Default Re: Possible hacker/Trojan ect?

Yeah total BS, i know for sure it's a hacker, and your from here to arent you.

My screen blinked black again, just 3 mins ago.

What they did'nt know is the screen ghosting stoped a while ago, so i have narrowed it down to someone from this forum, not so smart..

If your reading this why in the world target me?
__________________

__________________
Am2 AMD 64 X2 3600+, 1G Ram DDR,
[[*Need a new Gfx Card & 1 more Ram stick// 1GB*]]
Sony Avatar's!
geek_gal is offline   Reply With Quote
Old 02-27-2008, 09:28 AM   #3
Fully Optimized
 
blackjack's Avatar
 
Join Date: Mar 2007
Posts: 2,945
Send a message via MSN to blackjack
Default Re: Possible hacker/Trojan ect?

I had my MSN constantly dialing up a year or so ago so I ran the Macafee av I had on at the time, it found nothing, so I I downloaded there Antispyware suit and i found a dialer Trojan that the av missed, it removed it and the problem was solved, I use Nod32 now instead.
__________________
Compaq Presario CQ5305K-m Intel® Pentium® Dual Core E5300 (2.6 GHz), Windows® 7 Home Premium 64 bit, 2048 MB , Hard drive: 320 Gb, with 18.5 Widescreen
SPURS TILL I DIE (DIAMONDS ARE FOREVER SO ARE SPURS)
TO DARE IS TO DO
blackjack is offline   Reply With Quote
Old 02-27-2008, 11:54 PM   #4
Daemon Poster
 
geek_gal's Avatar
 
Join Date: Jun 2005
Posts: 1,245
Send a message via MSN to geek_gal Send a message via Yahoo to geek_gal
Default Re: Possible hacker/Trojan ect?

Na, it prob a hacker, i bet that its through the ports.

Backdrop trojan or something like that.

I bet it.
I bet that its a hacker full stop ive had this for a long time now, 'funny' it's how i never had these problems before i join CF..

Anyone wanna help me get unhacked? Or something.
__________________
Am2 AMD 64 X2 3600+, 1G Ram DDR,
[[*Need a new Gfx Card & 1 more Ram stick// 1GB*]]
Sony Avatar's!
geek_gal is offline   Reply With Quote
Old 02-28-2008, 06:23 PM   #5
Daemon Poster
 
wmorri's Avatar
 
Join Date: May 2007
Posts: 1,066
Send a message via AIM to wmorri
Default Re: Possible hacker/Trojan ect?

First what OS are you using? The reason I ask is becuase I am wondering if you can block all the ports except the ones that you use. Like 80 for the internet, your email ports, and Instant messenger and scype ports. Also if you have a router you might want to try disabling ports on that as well if you can.

I know that with most Linux distros they have firewall programs, but I haven't played with the windows firewall or other apps.

Start with that and see what that gets you.
__________________
LEARN BY DOING NOT BY FOLLOWING DIRECTIONS!
Linux Forever!

I thought you were a hispanic/african american? Who is the white guy in the pictures?
wmorri is offline   Reply With Quote
Old 03-01-2008, 08:44 PM   #6
Daemon Poster
 
geek_gal's Avatar
 
Join Date: Jun 2005
Posts: 1,245
Send a message via MSN to geek_gal Send a message via Yahoo to geek_gal
Default Re: Possible hacker/Trojan ect?

Apprantly all my ports are closed or stelthed, but i doubt it if things are going on.

I just don't know what to do..
__________________
Am2 AMD 64 X2 3600+, 1G Ram DDR,
[[*Need a new Gfx Card & 1 more Ram stick// 1GB*]]
Sony Avatar's!
geek_gal is offline   Reply With Quote
Old 03-01-2008, 10:41 PM   #7
Daemon Poster
 
wmorri's Avatar
 
Join Date: May 2007
Posts: 1,066
Send a message via AIM to wmorri
Default Re: Possible hacker/Trojan ect?

What program do u use for your firewall and av protection? Maybe, I can help you find some information out about that.
__________________
LEARN BY DOING NOT BY FOLLOWING DIRECTIONS!
Linux Forever!

I thought you were a hispanic/african american? Who is the white guy in the pictures?
wmorri is offline   Reply With Quote
Old 03-03-2008, 10:56 AM   #8
BSOD
 
0x0161's Avatar
 
Join Date: Apr 2007
Posts: 441
Default Re: Possible hacker/Trojan ect?

Quote:
It was something like 'Disable Windows Messenger broadcasts on UDP port 1900'.

Msn tryed to acess that port, 1900
msnmsgr.exe was the program.

Also to note my IP address changed a few weeks ago, which is strange since i was told it does'nt change the first 3 numbers. Like;

I don't think you have a hacker. If the application MSN is trying to connect to the net using port 1900 which is a little odd considering port 1900 is for
SSDP

Purpose:
UPnP Simple Service Discovery Protocol


Quote:
This UDP port is opened and used by Universal Plug N' Play (UPnP) devices to receive broadcasted messages from other UPnP devices. UPnP devices broadcast subnet-wide messages to simultaneously reach all other UPnP devices.
<--from GRC

If you disable the service you close the port. If I was you and I no longer used MSN, then I would un-install it from my computer (prevent it from trying to connect to the net).then I would close port 1900 by disabling the service that runs on port 1900 in this case it's SSDP (Simple Service Discovery Protocol)

Just from the information you posted theirs more than one way of getting in your system thats pretty obvious, you might wanna secure your box a little bit just my opinion.
0x0161 is offline   Reply With Quote
Old 03-05-2008, 08:42 PM   #9
Daemon Poster
 
geek_gal's Avatar
 
Join Date: Jun 2005
Posts: 1,245
Send a message via MSN to geek_gal Send a message via Yahoo to geek_gal
Default Re: Possible hacker/Trojan ect?

Quote:
Originally Posted by 0x0161 View Post
If the application MSN is trying to connect to the net using port 1900 which is a little odd considering port 1900 is for
SSDP

Just from the information you posted theirs more than one way of getting in your system thats pretty obvious, you might wanna secure your box a little bit just my opinion.
Yah i no. Strange
The thing is i did disable the service, so i dont no?

Yeah i no, you cant stop hacking anyways, ive known that for a long time now lol.

How so? Pm me?

Thanks for your help!
__________________
Am2 AMD 64 X2 3600+, 1G Ram DDR,
[[*Need a new Gfx Card & 1 more Ram stick// 1GB*]]
Sony Avatar's!
geek_gal is offline   Reply With Quote
Old 03-07-2008, 10:19 AM   #10
Fully Optimized
 
BrynF_UK's Avatar
 
Join Date: Jun 2007
Posts: 1,574
Send a message via MSN to BrynF_UK
Default Re: Possible hacker/Trojan ect?

Do you use a Firewall at all?

Also, do you have a router (Wireless or otherwise) ?
__________________

__________________
`

Visit today! ---> www.smouch.net/lol <---

_______________________________________________
BrynF_UK is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 04:50 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0