Re: A cracker that i can not get out

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 05/19/03 

Date: Mon, 19 May 2003 10:01:49 -0400

Following the typical security recommendations, starting with firewall,
patches and the correct configuration should usually help here. It's really
a good idea to determine how the compromise was done [if it was even done at
all, I don't see any proof below of an actual compromise] before you format
and reinstall, because otherwise you'll have all the same security holes
after the reinstallation. Providing more detailed information about what
makes you think this is an intrusion might be helpful... I would really
consider getting some professional help from someone experienced at
security.

Having said all this, here is how you might secure your computer and tell if
you have really been compromised:

http://securityadmin.info/faq.htm#hacked
http://securityadmin.info/faq.htm#re-secure
http://securityadmin.info/faq.htm#harden

The popups saying that you are broadcasting your IP are just advertisements,
but they show you are probably not using a firewall, which is bad. There
are even free firewalls out there:

http://securityadmin.info/faq.htm#firewall

"james" <james_j_77502@yahoo.com> wrote in message
news:058301c31d58$1a478c50$a601280a@phx.gbl...
> I have for some time now been fighting a craker who at
> this moment is reading this message. Their is not a
> firewall vircus protection or Os system that this cracker
> can not break into. He even had the nerve to say i copy
> software and has turn me in for doing it. I have troulbe
> with dos and not a likly hacker. In four years i formated
> 11 computer over 300 times. I have short term memory lose
> so this is hard for me to do each time as well as to
> remember which software i have in each computer and i
> sometimes mixing them up. I had to rebuid 8 computers. He
> or she uninstalls the uninstall in Norton and McAffe he
> get into me by activex mirosoft down loads and though the
> borrower. He has set himself or herself up many times as
> my network adminster. I have a 56modem that even norton
> say the ip address stays the same. Need help please I
> tried of repulling software back into computer most of my
> days off are spending time undoing what he done.Oh and i
> get a message saying that i broadcasting over the net and
> that my 40 gig hard drive partition with partition magic
> prompts up saying it and 85gb hard drive.
>

Relevant Pages

  • Re: what www perl script is running?
    ... When you run a firewall on a host, you open the ports for the services you want ... that doesn't really add to security at all and may well make you less vigilant. ... Security isn't always about preventing a compromise. ... The part you missed is that the installed script needs to connect out to ...
    (freebsd-questions)
  • Re: Apple/Macs for the Army
    ... There are more gaping security holes in OS X than in Windows Vista. ... Can I assume you're using this as an excuse as to why you cannot compromise this Vista system? ... Currently there is a firewall up that I would have to do some work on. ...
    (comp.sys.mac.advocacy)
  • Re: Firewall and ISA
    ... A single PC or Server could cost thousands or hundreds of thousands ... I clearly said that you balance security based on the DATA you have, ... So, a single PC could hold enough data to make a $5,000 firewall worth ... A firewall appliance is the FIRST barrier to compromise, ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall and ISA
    ... A single PC or Server could cost thousands or hundreds of thousands ... I clearly said that you balance security based on the DATA you have, ... So, a single PC could hold enough data to make a $5,000 firewall worth ... A firewall appliance is the FIRST barrier to compromise, ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Center and Zonealarm
    ... > basically my firewall is not on, ... Is there any way to fix this short of telling security ... Security Center isn't saying that ZoneAlarm isn't ... MS-MVP Windows User/Shell ...
    (microsoft.public.windowsxp.general)
Loading