Re: I'm beeing hacked?
From: HC (keydet89@yahoo.com)Date: 05/06/02
- Next message: Edoardo Costa: "Re: a third party PC is being used to scan my ports"
- Previous message: HC: "Re: how tripwire is deployed?"
- In reply to: Whisp: "I'm beeing hacked?"
- Next in thread: john.veldhuis@universal.nl: "Re: I'm beeing hacked?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: HC <keydet89@yahoo.com> Date: Mon, 06 May 2002 07:04:09 -0400
Even with all the tools that you've run, what have you really done?
Have you reviewed the running processes? Have you reviewed the process-
to-port mapping? If GRC.com says port 21 is open, have you run netstat
to confirm it?
My concern is that you're putting a lot of faith into single sources of
information that you really know nothing about. An external portscan,
such as was run by GRC.com, may say one thing, but it's important to
confirm that information with other sources, such as running netstat on
your system, looking at the running processes, etc.
Whisp wrote:
> Hi
>
> Here the short story
>
> According to Gibsson grc.com port 21 one my computer
> is open!
>
> This happened after I uninstalled Serv-U ftp program
>
> A friend og mine now complaining that I (my computer)
> repeatly traying to connect to his FTP server (Serv-U)
> which is not true as this happens mostly during nighttime.
>
> I started to sniff the packages and asked a second friend to try to
> connect to my no longer existing FTP server and noticed that the
> packages came in to my computer and went of to my first friend with
> the FTP server.
>
> I have NT4 sp6, installed the MS "Lockdown"-program. F-Secure
> antivirus. ZoneAlarm 2,6xx and finaly tested the computer for
> trojans with TrojansHunter 2,5. Everyting clean and in order!
>
> Sonehow I have some kind of a "pointer" on my computer. I have checked
> the hosts and lmhost files but kind find anything strange.
>
> Where is this pointer hiding?
>
> Tia
>
>
>
>
- Next message: Edoardo Costa: "Re: a third party PC is being used to scan my ports"
- Previous message: HC: "Re: how tripwire is deployed?"
- In reply to: Whisp: "I'm beeing hacked?"
- Next in thread: john.veldhuis@universal.nl: "Re: I'm beeing hacked?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
