Help! Was I hacked??

[Stompa]

That's why the fuckin FBI's after you.

They'll never get my goodies.

I did a system restore back to August 2nd, and uninstalled a bunch of crap. I'll just see what happens now.

[Money]

system restore will not remove a virus

[Stompa]

system restore will not remove a virus

Nobody even knows if it's a virus. and if it is symantec isn't catching it. and if it isn't a reformat is inevitible. but in the mean time i'm doing all i can to avoid a reformat. kthx

[Money]

the first problem u have is that you're using one of the worst antivirus there is

download avg or avast its free and 10 times better than noroton or symantec, anyone on the internet will agree :P

[Remezetti]

Zach - Is that yourself?

If it is, why the hell do you use an administrator online anyways? You shouldn't be doing that if you don't want shit like this happening to you, one of the simplest things you can do is create a new user (Power Users or something like that, or even Normal or Restricted group) that doesn't have access to system files. No need to even firewall, of course you should if you have one. Just disable the access to system files and folders and install your stuff into a different partition, another words not your Local Disk with system files.

[Stompa]

Money i made this for you while i was at work hope you like it.



EDIT: i know i didn't use correct flowcharting logic or formatting

[Money]

Money i made this for you while i was at work hope you like it.



EDIT: i know i didn't use correct flowcharting logic or formatting

haha thats awesome $

[Stompa]

That's why the fuckin FBI's after you.

your words of terror amuse only yourself

[Money]

so what happened?

[Stompa]

I changed the login, among other things, and for some reason it's been fine. will fucking lick balls before i have to reformat, all im sayin

[Money]

i can lend u mine when u r ready :x

[Twerp]

money's ditching his child porn on you. don't fall for it

[Money]

:x

[Stompa]

I posted the problem to castlecops.com, and ran hijackthis so they can look at it. I also downloaded rootkit revealer and will run that tonight. A guy IMed me and said he had the exact same problem and came across this thread, so it's happened to more than one person.

[Ephemeral]

Run Hijack and store off the log file when your machine is not having issues. When an issue appears, run Hijack again and compare the log files.

Keeping your PC clean requires all three P's, Product (AV/Firewall), Procedures and People. Installing a Product and then ignoring the risks will cause grief. Having a good Product and following good Procedures will screw you if you trust the wrong People.

Always rename the Administrator account on your PC to something else. No sense giving someone half the answer, leaving them only the pw to figure out.

Never leave your PC on the internet when you are not in front of it, do not trust AV/firewall, turnoff the modem or router. (The only really secure PC is one that is powered down and locked in a vault.)

If you use wireless, lock it down tight. It's amazing how people secure everything except wireless access. Encryptions can be broken.

And lastly, protect your IP and Mac address. Stealing MP3's, porn, warez, etc via any form of file sharing is opening yourself to having people know your IP and Mac. If you are going to visit the seedy underbelly of the internet you are signing up for the risk and better do what it takes to keep this kind of crap off your PC. This would include changing your IP and Mac address often (not just spoofing them), Fdisking, etc. Also, be careful of anyone who publishes a web site address and suggests to visit it in real-time. For example, if I were to tell people in a TW chat to come look my web site, I would easily be able to grab their IP addresses. Changing your IP and Mac address properly can be arduous, but it is possible.