EVE Search - Am I being Hacked??

All Channels

Out of Pod Experience

Am I being Hacked??

» Click here to find additional results for this topic using Google

Monitor this thread via RSS [?]

Author	Thread Statistics \| Show CCP posts - 1 post(s)
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 09:29:00 - [1] Hi guys and gals, I need a bit of advice from someone with a bit more experience than myself. Various types of "files" keep appearing on my PC, of a nature that I would not download, which is causing my girlfriend a great deal of distress. I have already removed (or atleast thought I'd removed) a keylogger from this PC that was installed by her ex who was an IT technician with quite a lot of skill. Now we keep finding "videos" popping up in places on the PC which neither of us would ever download but which he used to watch on a regular basis it seems. I have been as thorough as I can, using my limited skills, in finding and deleting/removing various viruses and malicious software but these things keep popping up. Also, having run a netstat check, it seems as though someone is remotely logging into my PC. I really need to know what to do know as Im unsure if this guy might really still have some sort of remote access and is being an shithead (and yes he was known for being one). Any help would be greatly appreciated. Originally by: Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 10:12:00 - [2] Edited by: Cutter Isaacson on 07/09/2008 10:13:46 Ok, I've run a netstat check and here are the results: Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 86.1.199.98:1947 84.53.178.18:80 TIME_WAIT TCP 86.1.199.98:1948 84.53.178.18:80 TIME_WAIT TCP 86.1.199.98:1949 84.53.178.18:80 TIME_WAIT TCP 86.1.199.98:1950 84.53.178.18:80 TIME_WAIT TCP 86.1.199.98:1951 84.53.178.18:80 TIME_WAIT TCP 86.1.199.98:1980 87.237.39.199:80 ESTABLISHED TCP 86.1.199.98:1992 216.239.59.127:80 ESTABLISHED TCP 86.1.199.98:1993 87.237.39.200:80 ESTABLISHED TCP 127.0.0.1:1031 0.0.0.0:0 LISTENING TCP 127.0.0.1:1524 127.0.0.1:1525 ESTABLISHED TCP 127.0.0.1:1525 127.0.0.1:1524 ESTABLISHED TCP 127.0.0.1:1526 127.0.0.1:1527 ESTABLISHED TCP 127.0.0.1:1527 127.0.0.1:1526 ESTABLISHED TCP 127.0.0.1:33233 0.0.0.0:0 LISTENING UDP 0.0.0.0:445 : UDP 0.0.0.0:500 : UDP 0.0.0.0:4500 : UDP 86.1.199.98:123 : UDP 86.1.199.98:1900 : UDP 127.0.0.1:123 : UDP 127.0.0.1:1900 : I'm also currently running a trendmicro "housecall" check and I will be looking through those links for some anti-spyware. EDIT: sorry for the state of the above data, but for some reason i cant even get that to work right today, i hope you can make sense of it Originally by: Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 10:21:00 - [3] Originally by: Arvald well i only see one option left 3lb of c4 HUH?? Originally by: Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 10:28:00 - [4] So does it look to anyone like ive got a problem? Also, sadly I don't have the reinstall disc for this PC so formatting the HDD isn't really an option. Originally by: Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 11:45:00 - [5] Thanks for your help guys. Sadly it seems my girlfriend doesn't believe me when i say i had nothing to do with these "videos" and such that keep appearing on our machine and seeing as this is the 3rd time it's happened she has decided that she no longer wants to be with me. 6 months means very little these days it seems so i'll be signing off now, i've had a great time being back here and i'll miss you all. bye Originally by: Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 12:16:00 - [6] Thanks for all the replies people, i will pass along all the suggestions to my (now) ex-girlfriend and tell her she would be wise to follow your advice. Hopefully she won't have any further problems. peace out Originally by: Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.07 15:17:00 - [7] the videos were not illegal, just **ography. this is something my ex-girlfriend feels very strongly about and seeing as i had no particular attachment to the stuff i promised never to watch it. After all it was no hardship, she is a beautiful woman and i had no need for such things once i was with her. Now however, due to the fact that these things keep "popping up" all over the place, she assumes its me. The fact that it seems that someone has been using this pc remotely to do all kinds of dumb ass things (including downloading all sorts of spyware ridden crap) makes no difference to her, she doesn't understand that people can and do, do this kind of thing everyday across the world. My suspicion is that her ex, who had downloaded, installed and was using a keylogger and remote access software long after his departure from her life also seems to cause no concern for her. So I have given up hope of her seeing sense and Im leaving. Once again, thankyou for your assistance everyone and fly safe. Hopefully a mod will be along soon to lock and delete this thread. Originally by:** Haks'he Lirky Some people should just stick to Pac Man.
Cutter Isaacson Minmatar Hollow World Mining Corporation QUANT Hegemony	Posted - 2008.09.17 11:28:00 - [8] Seeing as you guys n gals were kind enough to take the time to reply to this thread of mine, i thought i'd update you. Im now running behind a router with a firewall and a decent anti-virus kit running. I managed to find the original OS disk and promtply reinstalled windows. And as a further bonus, the shit head that installed the remote access stuff has been arrested and is being charged with all manner of things that should see him spending atleast some time at her majestys pleasure. Also, im back with the missus and everything is runnning smoothly. So once again, thankyou for all your help, it means an awful lot to me. Originally by: Haks'he Lirky Some people should just stick to Pac Man.

COPYRIGHT NOTICE
EVE Online, the EVE logo, EVE and all associated logos and designs are the intellectual property of CCP hf. All artwork, screenshots, characters, vehicles, storylines, world facts or other recognizable features of the intellectual property relating to these trademarks are likewise the intellectual property of CCP hf. EVE Online and the EVE logo are the registered trademarks of CCP hf. All rights are reserved worldwide. All other trademarks are the property of their respective owners. CCP hf. has granted permission to EVE-Search.com to use EVE Online and all associated logos and designs for promotional and information purposes on its website but does not endorse, and is not in any way affiliated with, EVE-Search.com. CCP is in no way responsible for the content on or functioning of this website, nor can it be liable for any damage arising from the use of this website.