Re: Problems with an Outside Threat who is accessing my computer I
From: Matt Gibson (mattg_at_blueedgetech.ca)
Date: 02/20/05
- Next message: cs: "WinXP SP2 deployment without firewall turning on"
- Previous message: StevieMeg: "Re: Norton LiveUpdate"
- In reply to: Sidney: "Re: Problems with an Outside Threat who is accessing my computer I"
- Next in thread: Roger Abell: "Re: Problems with an Outside Threat who is accessing my computer I"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 19 Feb 2005 21:08:18 -0800
Is this computer connected direcly to the internet, or is there a router of
some sort in front of it.
I realize this seems contrary to what you're seeing, but a hacker cannot
survive a reformat (and wipe) of a hard disk. If there is someone on your
machine, he's getting on each time through the same method.
Say you install WinXP again from scratch. Download SP2 from another
computer, and burn it onto a CD. This way you can set up the XP firewall
without connecting to the internet. Use the computer for a day, without
connecting it to the internet. You should have no problems. THEN, ensuring
that the firewall is still on, connect it to the internet. Don't download
anything, and don't install any other programs (including anti-virus). See
if the computer still has a problem the next day.
Matt Gibson - GSEC
"Sidney" <Sidney@discussions.microsoft.com> wrote in message
news:80353DCD-18A9-44E6-AF0F-0F0A474BAF89@microsoft.com...
> Hello,
>
> When I came the desktop after formatting the hard drive, I installed
> entire
> mcafee security center, this mcafee security center was factory installed
> on
> this dell computer system( and also this mcafee security center is on a
> resource cd from dell) and I enabled the mcafee personal firewall plus
> services first, then the mcafee virus scan and then the mcafee privacy
> services.
>
> There is no wireless in the house.
>
> When I start the computer system up in the mornings, the mcafee personal
> firewall plus services is disabled, the mcafee virus scan program is
> disabled
> and when I restart the mcafee personal firewall plus services, in the
> services, I receive this error message:
> Firewall Background Services Stopped/ A user or other application has
> stopped the mcafee personal firewall plus services.
>
> I have uninstalled and reinstalled and have peformed a clean install of
> the
> entire mcafee security center and I am still faced with the same problems
> with the entire mcafee security center and the mcafee personal firewall
> plus
> services being disabled.
>
> I have uninstalled and reinstalled the mcafee virus scan program, numerous
> times and still the mcafee virus scan program is not listed in the
> services.
>
>
>
> "Matt Gibson" wrote:
>
>> So, when you finally connected the computer to the internet, did you have
>> a
>> firewall running?
>>
>> When you're installing software, is it all from retail media? There are
>> no
>> burned copies?
>>
>> Do you have wireless anywhere in the house?
>>
>> If this is indeed true, and not an elaborate troll, this is intresting.
>>
>> Matt Gibson - GSEC
>>
>> "Sidney" <Sidney@discussions.microsoft.com> wrote in message
>> news:6B11F39D-166E-4351-9E1F-8602619DA4E8@microsoft.com...
>> > Hello,
>> >
>> > I know that I sound like a broken record, singing the same old songs:
>> >
>> > I followed the advice and technical information that was given and a
>> > new
>> > hard drive was installed on 02/15/05 and I had to enable internet
>> > access
>> > in
>> > order to install the mcafee security center programs.
>> >
>> > Because of the many computer problems that I am facing, I formatted the
>> > hard
>> > drive and I am still faced with the same computer problems:
>> >
>> > I installed a KL-Detector and this program reports that I have a
>> > KEYLOGGER
>> > on my computer system:
>> >
>> > C:\Windows\system32\wbem\logs\webmess.log was modified
>> >
>> > C:\Windows\system32\wbem\logs was modified
>> >
>> > C:\PROGRA~1\SPYWAR~3\common.ini was modified
>> >
>> > C:\Windows\Prefetch was modified
>> >
>> > Formatting the hard drive, Reinstalling the Operating System, Clean
>> > Installs, System Restores, Changing my Passwords Frequently, Clearing
>> > the
>> > Start up Lists, Config StartUp Programs and various others
>> > troubleshooting
>> > steps are not removing and preventing this Outside Threat from
>> > Accessing
>> > this
>> > computer system.
>> >
>> > Thank You,
>> >
>> >
>> >
>> >
>> >
>> >
>> > "Phillip Windell" wrote:
>> >
>> >> "Sidney" <Sidney@discussions.microsoft.com> wrote in message
>> >> news:87EAA5BB-0A73-4E9B-A0F5-CAE6A328354E@microsoft.com...
>> >> > Do you know of a good tracking software to find the IP address of
>> >> > this
>> >> > outside threat?
>> >>
>> >> There is no such thing because it can not be done.
>> >>
>> >> > Because the firewall is not providing an accurate reading of
>> >> > his IP address,
>> >>
>> >> Firewall don't provide IP addresses, they just report what they are
>> >> told.
>> >>
>> >> > because he is using a different zip code for his IP address,
>> >> > so that he can remain uncatchable.
>> >>
>> >> IP address have nothing to do with Zip Codes.
>> >>
>> >> Perhaps if the Post Office used IP addresse I could stop my junk
>> >> postal
>> >> mail
>> >> with a firewall. But would the Mailman be "statefull"? Hmmm.....
>> >>
>> >> --
>> >>
>> >> Phillip Windell [MCP, MVP, CCNA]
>> >> www.wandtv.com
>> >>
>> >>
>> >>
>>
>>
>>
- Next message: cs: "WinXP SP2 deployment without firewall turning on"
- Previous message: StevieMeg: "Re: Norton LiveUpdate"
- In reply to: Sidney: "Re: Problems with an Outside Threat who is accessing my computer I"
- Next in thread: Roger Abell: "Re: Problems with an Outside Threat who is accessing my computer I"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
