1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Help! Someone Keeps Hacking Into My Computer!

Discussion in 'Malware and Virus Removal Archive' started by IDLERACER, 2008/12/11.

  1. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    [Resolved] Help! Someone Keeps Hacking Into My Computer!

    First, a few specs on my operating system: I live alone and use one single computer. It is an E-Machine T4010, equipped with Windows XP. My ISP is Verizon and my modem is a Westell VersaLink model 327W. I am using Avast Anti-Virus Home Edition, as well as Spybot Search & Destroy.

    Something very disturbing has started happening recently. I'll be on-line, and apparently somebody else starts accessing my computer from a remote location. Suddenly I am unable to type anything into the URL window (it just drifts to the side), and the computer is for the most part, under the control of someone else. :eek:

    Whenever I notice this happening, I immediately shut off the modem. When I try to shut down the computer, a screen pops up that reads something to the effect of: "There are two parties currently logged into Windows. Do both of you wish to log off?" Needless to say, this is quite unsettling. Somebody could very well be using my computer to conduct illegal activity. No viruses turn up after a thorough avast scan.

    My Windows firewall is always on, and last evening at around midnight, it happened even while my security and privacy settings were both on HIGH. It almost always happens during the wee hours of the morning, while I'm listening to an internet radio program. If I happen to be looking at the screen, I can instantly tell when it starts, because the screen saver never pops up.

    Any help you can give me in preventing this from continuing would be much appreciated. I'm not even sure if it's something to do with Windows or the Verizon people. Is there some button I can push on this thing that will specifically forbid access from any location other than this one?

    Dan in Los Angeles.
     
  2. 2008/12/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Are you using a wired or wireless connection?
     

  3. to hide this advert.

  4. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    Wired
     
  5. 2008/12/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    The pdf manual I found isn't clear about the capabilities, but I would suggest you access the modem's control panel and disable wireless if possible. Do you know how to access the modem's control panel?
     
  6. 2008/12/11
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,038
    Likes Received:
    174
    Get a real firewall like Commodo. Windows firewall is very basic & gives very little information.
     
  7. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    I've never done that but I'll give it a try...Do you know how to get to it?
     
  8. 2008/12/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Type http://192.168.1.1 in the web browser’s address
    window and press Enter
    When prompted for the username and password, try;

    admin and password

    or

    admin and admin
     
  9. 2008/12/11
    sniper9228

    sniper9228 Well-Known Member

    Joined:
    2005/08/31
    Messages:
    615
    Likes Received:
    1
    or zonealarm free, I now use it on one of my computers.
     
  10. 2008/12/11
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,068
    Likes Received:
    396
    1. Go to Control Panel > Users > tell us all of the user accounts shown.

    2. Right click My Computer icon on Desktop > select Properties > click the Remote tab > uncheck "Allow remote assistance invitations to be sent from this computer ".

    It's quite possible that you had (or still have) a trojan (malicious remote access program) and someone has used it to create their own user account on your computer, and they access it remotely. Remove any undesired user accounts (AFTER AFTER AFTER you tell us the accounts that are there now)
     
  11. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    In other words, I'm changing any user name or password that I currently already have?
     
  12. 2008/12/11
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,068
    Likes Received:
    396
    FYI folks, even if the wifi is unsecured and enabled, one would only be able to access the shares on another computer. I suggest uninstalling File & print shatring if this is the only comp on the lan.
     
  13. 2008/12/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    If you've never accessed it, or unless the username and password were configured by whoever installed it, then they will be one of the 2 defaults I listed.

    Disabling wireless connections is a first step only. It sounds as though you have infections aboard and we'll gather some logs to check.
     
  14. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    Alright, first of all, the "Allow Remote Assistance" thing is already unchecked...trying out the "User Accounts" icon in the control panel...
     
  15. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    When I go into "User Accounts" it basically gives me five things to click on:

    Change An Account
    Create A New Account
    Change The Way Users Log On Or Off
    Owner
    Guest

    Which one should I click on? :confused:
     
  16. 2008/12/11
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,038
    Likes Received:
    174
    Click on Change an Account -> Guest & give it a password.

    That's for start.

    Change your logon password too.
     
  17. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    I've clicked on Change an Account > Guest, but it's not giving me the option of giving it a password. How do I do that?
     
  18. 2008/12/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Is the Guest account even enabled? No reason to create a password if you could, if it's disabled. ;)
     
  19. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    It's disabled. When I click on Owner, it gives me these five options:

    Change My Name
    Create A Password
    Change My Picture
    Change My Account Type
    Set Up My Account To Use .NET Passport

    Are any of these things relevant?
     
  20. 2008/12/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    No, they are nothing to be concerned with at this time.

    Have you checked the modem yet?
     
  21. 2008/12/11
    IDLERACER

    IDLERACER Inactive Thread Starter

    Joined:
    2005/06/24
    Messages:
    136
    Likes Received:
    0
    How do I get to it? :confused: I mean, I know it's sitting on top of my computer, but what am I doing on screen? There's nothing in the control panel that specifically says "modem. "
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.