Re: Intruder Detected

From: Peter (Ex-Brit)
Date: 11/08/04 

Date: Mon, 8 Nov 2004 06:50:46 -0500

Get yourself a good firewall and anti-virus, plus install Adaware SE/
CWShredder/Spybit Search & destroy and SpywareBlaster.
Boot from your OS CD with Internet disconnected and reinstall Windows using
the long format method. 

-- 
Peter.
Toronto, Canada.
XP Home SP2.
P4 Dual HT @ 3.0ghz, 160gb HD, 1.0gb DDR.
"Ann@anonymouslogon.com" <Ann@anonymouslogon.com@discussions.microsoft.com> 
wrote in message news:44A28767-6CB5-4F3D-981D-4912710FECCF@microsoft.com...
> Hello,
>
> Perhaps some may think I ask dumb questions, but I do not think any
> question is dumb.  I detected an intruder on my computer.  I contacted
> Microsoft Security and they confirmed that it appeared to be so, however I
> was merely told that someone very smart had gotten into my computer and 
> they
> offered no suggestions as to how to get this person out. I tried to the 
> best
> of my ability to rid this person from my system. However I am a 'home 
> user'
> and this was my first experience with a security breach. I use my computer
> for access to my college classes. I have had no formal training in this 
> area.
> I relied on information I found searching the net.  I do believe this 
> person
> introduced a virus into my computer to render it vunerable and then 
> dropped
> in a root kit, Christmas came early this year!
> Good thing for backup because
> I had to format my hard drive and write a new MBR.  I wiped my hard drive 
> by
> writing zeroes to it but, now that I have re-istalled my OS, something is
> just not right.  I cannot tell you exactly what, but common sense is 
> telling
> me further investigation is needed. ( I was utilizing Windows XP Home when
> this breach occurred, but I replaced this OS with Windows XP Professional) 
> I
> am getting "Failures" in my Security Audits, those weird hard to 
> understand
> Events.
> I want to know if my BIOS could have been tampered with, or could
> my memory contain remnants of this persons intrusion or even still could 
> this
> person have manipulated other hardware in my computer that would be
> unaffected by a format?
> If this is so, how can I remedy this to assure I have
> wiped this person totally out of my system?
> I may sound paranoid, but I think
> a little paranoia can be a good thing, over confidence sure seems 
> impractical
> where internet security is concerned.
>
> Thank You,
> Ann

Relevant Pages

  • Re: Please help, PC gone crazy!
    ... "How to partition and format a hard disk in Windows XP" ... "Security at home: Protect your PC" ...
    (microsoft.public.windowsxp.perform_maintain)
  • Exception: Infinite recursion!
    ... Spotted in MSDN web page DCOM Security Enhancements in Windows XP Service ... an ACL can exist in the format used ...
    (microsoft.public.win32.programmer.ole)
  • Re: IE6 Desktop Icon
    ... then do a format & clean install of Windows. ... Rogue Security Software - Microsoft Security: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Cannot Update Windows!!
    ... then do a format & clean install of Windows. ... Rogue Security Software - Microsoft Security: ...
    (microsoft.public.windowsupdate)
  • [NT] Cumulative Security Update for Internet Explorer (MS04-025)
    ... Get your security news from a reliable source. ... * Microsoft Windows NT Workstation 4.0 Service Pack 6a ... Navigation Method Cross-Domain Vulnerability ...
    (Securiteam)
Quantcast