1. Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

I think I've been hacked...

Discussion in 'General Software' started by Eric3988, Oct 23, 2007.

  1. Eric3988

    Eric3988

    Joined:
    Dec 21, 2005
    Messages:
    281 (0.07/day)
    Thanks Received:
    24
    Location:
    El Paso, TX
    I do not know for sure, but I think some mischievous hacker has infiltrated my pc. Last night when I was browsing the web, the pages kept on scrolling by themselves and it was very distracting. Then when I started watching videos I had on my hdd and they started resizing all by themselves. I had it on full screen then it went just a bit smaller at a time. Then right after that, it started fast forwarding by itself. After that I figured I was under attack and I immediately disconnected my ethernet cable. Magically enough, the trouble stopped completely for me for the rest of the night.

    So far I've run spyware and virus scans to no avail. I hope this was a once in a blue moon thing because that sucked. I've changed the password to my account in hopes that will help too. If anybody has some advice or other useful information on how to stop or minimize this crap from happening again, it's much appreciated.
     
    10 Year Member at TPU
  2. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    hmmm wierd its almost as if someone has jumped into your connection with a program similar to Remote Assistance, did you have that activated?? ive never heard of an attack like this before, if it happens again please inform me
     
    Eric3988 says thanks.
  3. Eric3988

    Eric3988

    Joined:
    Dec 21, 2005
    Messages:
    281 (0.07/day)
    Thanks Received:
    24
    Location:
    El Paso, TX
    If remote assistance is activated, I don't know about it. Don't worry I be sure to post again if said attack happens again! :laugh:
     
    10 Year Member at TPU
  4. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    best thing is get rid of remote assistance as best you can, (even just disabling it) just the way you've been attacked seems as if someone was just toying with you while having access to your system tools, ie mouse controls.
     
  5. Eric3988

    Eric3988

    Joined:
    Dec 21, 2005
    Messages:
    281 (0.07/day)
    Thanks Received:
    24
    Location:
    El Paso, TX
    How do you disable remote assistance?
     
    10 Year Member at TPU
  6. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    im not exactly sure, try getting rid of it through the windows components
     
  7. Eric3988

    Eric3988

    Joined:
    Dec 21, 2005
    Messages:
    281 (0.07/day)
    Thanks Received:
    24
    Location:
    El Paso, TX
    Well I managed to disable remote assistance from getting past windows firewall at least. I'm still looking on how to turn it off completely though. Thanks for the help so far, hopefully the sucker will stay out my system.
     
    10 Year Member at TPU
  8. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    well thats should stop remote assistance from starting! ill keep having a look for something that will tell you how to disable it completely. Hope he stays out your system aswell mate!! good luck :toast:
     
  9. d44ve New Member

    Joined:
    Apr 16, 2007
    Messages:
    2,520 (0.68/day)
    Thanks Received:
    309
    If someone "hacked" you.... they wouldnt care about making it harder for you to surf and watch porn.....

    I wouldnt worry about it being a hacker and look towards a hardware confilict
     
    10 Year Member at TPU
  10. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    but to have sprung from nowhere?? thats what gave me the idea of a jump attack through remote assistance, ive seen it done before at school!
     
  11. Eric3988

    Eric3988

    Joined:
    Dec 21, 2005
    Messages:
    281 (0.07/day)
    Thanks Received:
    24
    Location:
    El Paso, TX
    Normally I would think that, but I know a few people from high school who would do this crap to people all the time. I used to watch them do it in class to anybody they felt like doing it to. So, I'm thinking maybe I just have one of these jackoffs in my system messing with me until he/she gets bored and moves on.
     
    10 Year Member at TPU
  12. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    yup, i seen it at school. thats why i went and disabled remote assistance a long time ago and never have it on my OS at any time, ive seen what these guys can do and i dont trust them one bit.
     
  13. rampage

    Joined:
    May 31, 2007
    Messages:
    1,050 (0.29/day)
    Thanks Received:
    69
    Location:
    Port Fairy, Victoria, Australia
    my brother (mussles) did this me to me for ages.. i know your pain


    (that sounds kinda wrong)
     
  14. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    lol hahahaha i get you aswell.
     
  15. Eric3988

    Eric3988

    Joined:
    Dec 21, 2005
    Messages:
    281 (0.07/day)
    Thanks Received:
    24
    Location:
    El Paso, TX
    Still this is better than getting your computer crashed. Not much better, but still a little better...
     
    10 Year Member at TPU
  16. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    yeah, count yourself lucky someone or something was just winding you up and not causing serious damage to your system!
     
  17. GLD

    GLD

    Joined:
    May 13, 2006
    Messages:
    1,540 (0.38/day)
    Thanks Received:
    287
    Location:
    City 17, California, U.S.A.
    If you haven't found it yet, Remote Assistance can be found in the: My Computer/properties/remote. I always left those boxes unchecked.
     
    Fuse-Wire says thanks.
    10 Year Member at TPU
  18. Fuse-Wire

    Fuse-Wire New Member

    Joined:
    May 30, 2007
    Messages:
    855 (0.23/day)
    Thanks Received:
    43
    Location:
    Scotland, Far away from normality as possible
    thats what you need to do
     
  19. casper250c New Member

    Joined:
    Jul 25, 2006
    Messages:
    195 (0.05/day)
    Thanks Received:
    7
    To disable remote assistance completely press start click run type msconfig and in services UNCHECK remote assistance, remote access auto co (Remote Access Auto Connection Manager), remote access auto connection, remote desktop, and remote registry..

    These steps will make it much more difficult for someone to come in and take over your machine again, mind you this will not make it impossible but at least it will be tougher
     
    10 Year Member at TPU
  20. Tatty_One

    Tatty_One Senior Moderator Staff Member

    Joined:
    Jan 18, 2006
    Messages:
    19,337 (4.66/day)
    Thanks Received:
    5,584
    Location:
    Worcestershire, UK
    If there is a hacker on board, they actually dont need to use remote assistance to access your PC, anyways I was under the impression that not only is remote assistance got to be enabled on your PC but you also have accept at your end unless you have it set to auto.

    It may well be that a hacker has managed to place a specific exe file on your PC, through a site you have visitied, the exe file starts up when connected to the internet and actually pulls the hacker through the firewall, because the activation is on your PC through the file your PC's security accepts that your doing it.

    I had a similar experience 2 weeks ago :eek: and NO spyware/antivirus could find it. What I had to do was check the processes that were active in task manager, any I didnt immediatly recognise I listed, then I went to "start".....search.......entered the name of the file told it to look on my hard drives and searched away, when it found the file I looked to see when the file was added/modified, if that is within the times you started having the problem yesterday then the chances are that thats is your little new pet! Then you can see the source/route directory the file is in...........open windows explorer, go to it and delete it, job done! This is the safe way to address the issue IMO, some times, the little Bar Stewards are so clever it wont let you delete the file! If thats the case, move the file to your desktop, right click it, go to "opens with" on the drop down menu and make it open with some obscure programme, that way it changes the properties of the file and it can no longer be used.
     
    10 Year Member at TPU
  21. erocker

    erocker Super Moderator Staff Member

    Joined:
    Jul 19, 2006
    Messages:
    41,998 (10.59/day)
    Thanks Received:
    17,807
    The better way to turn off remote assistance and remote registry is to right click on "My Computer" -> Manage -> Services -> and disable them.
     
    10 Year Member at TPU
  22. francis511

    francis511

    Joined:
    Oct 16, 2006
    Messages:
    2,560 (0.66/day)
    Thanks Received:
    273
    Location:
    N.Ireland
    Do you have any kind of vnc service running or any kind of unusual network setup. maybe wireless ? Very strange.Incidentally, are you going to use a third-party firewall from now on ?
     
    10 Year Member at TPU
  23. DRDNA

    DRDNA

    Joined:
    Feb 19, 2006
    Messages:
    5,244 (1.27/day)
    Thanks Received:
    860
    Location:
    New York
    I would try disconnecting the network cable when its starts doing this wierdness and see if continues while offline .....so go to a web page and when scrolling monster comes out disconnect and see if continues also test your videos while the network is disconnected and see if it stops the resizing.I have a feeling its NOT a hacker but still take preventive messures to cover that security hole as well.
     
    10 Year Member at TPU
  24. keakar

    keakar

    Joined:
    Mar 27, 2007
    Messages:
    2,746 (0.74/day)
    Thanks Received:
    377
    Location:
    just outside of new orleans
    everyone should do this to protect themselves.

    How to Disable Remote Assistance (Win XP)

    Remote Assistance is a Windows XP feature that allows remote access to your computer,
    commonly for troubleshooting purposes.

    To disable Remote Assistance and prevent others from taking control of your computer:

    Go to Start > Settings > Control Panel > System.

    On the System Properties window, select the Remote tab, then click Settings.

    Make sure Allow users to connect remotely to this computer is unselected.

    Click Apply, then OK.

    this is set up to be on as the default setting so microsoft can access your computer to help you fix problems.

    unfortunately it leaves you wide open to be hacked as long as it is activated.
     
    10 Year Member at TPU
  25. ex_reven New Member

    Joined:
    Sep 4, 2006
    Messages:
    5,217 (1.33/day)
    Thanks Received:
    171
    It was probably some trojan or something.

    I agree with d44ve, its probably your wireless keyboard getting interference or something.
     
    10 Year Member at TPU

Currently Active Users Viewing This Thread: 1 (0 members and 1 guest)