RE: New connection appeared, how do I know if i've been hacked



Hi!
Have a doubt whether your infected with a malware!
this is a free scan from prevx
http://info.prevx.com/downloadcsi.asp

If your pc is infected with a malware it will inform you!
what antivirus do you use?
install NOD32 NOTE>>Uninstall your anti virus before installing NOD32!

"Sirtokalott" wrote:

I use Live Messenger and a file sent to me was blocked. I have a wireless
adapter and connect to my neighbours router (yes she gave me the access code)
and I ussualy have a wireless connection logo in the system tray. When I
started up the pc the other night I had an extra icon showing a cable
connection to another computer. I also now have a modem installed in device
manager. I think it is my neighbours computer which I am connecting to but
aint to sure as neither of us is experts. The pc is also running much slower
now. I'd love to know of anyway of identifying a deliberate attack from
someone. Here's what the modem log says.

04-06-2008 21:59:19.375 - File: C:\WINDOWS\system32\tapisrv.dll, Version
5.1.2600
04-06-2008 21:59:19.375 - File: C:\WINDOWS\system32\unimdm.tsp, Version
5.1.2600
04-06-2008 21:59:19.375 - File: C:\WINDOWS\system32\unimdmat.dll, Version
5.1.2600
04-06-2008 21:59:19.375 - File: C:\WINDOWS\system32\uniplat.dll, Version
5.1.2600
04-06-2008 21:59:19.421 - File: C:\WINDOWS\system32\drivers\modem.sys,
Version 5.1.2600
04-06-2008 21:59:19.421 - File: C:\WINDOWS\system32\modemui.dll, Version
5.1.2600
04-06-2008 21:59:19.421 - File: C:\WINDOWS\system32\mdminst.dll, Version
5.1.2600
04-06-2008 21:59:19.421 - Modem type: Communications cable between two
computers
04-06-2008 21:59:19.421 - Modem inf path: mdmhayes.inf
04-06-2008 21:59:19.421 - Modem inf section: M2700
04-06-2008 21:59:19.421 - Matching hardware ID: pnpc031
04-06-2008 21:59:19.453 - 19200,8,N,1, ctsfl=1, rtsctl=2
04-06-2008 21:59:19.453 - Initializing modem.
04-06-2008 21:59:19.453 - Waiting for a call.
04-06-2008 21:59:19.484 - 19200,8,N,1, ctsfl=1, rtsctl=2
04-06-2008 21:59:19.484 - Initializing modem.
04-06-2008 21:59:19.484 - Dialing.
04-06-2008 21:59:19.500 - Send: CLIENT
04-06-2008 21:59:21.500 - Timed out waiting for response from modem
04-06-2008 21:59:21.500 - Failed to send command because of WriteFile()
Failure, Error=000003e3.
04-06-2008 21:59:21.515 - Send: CLIENT
04-06-2008 21:59:23.515 - Timed out waiting for response from modem
04-06-2008 21:59:23.515 - Failed to send command because of WriteFile()
Failure, Error=000003e3.
04-06-2008 21:59:23.531 - Send: CLIENT
04-06-2008 21:59:25.531 - Timed out waiting for response from modem
04-06-2008 21:59:25.531 - Failed to send command because of WriteFile()
Failure, Error=000003e3.
04-06-2008 21:59:25.546 - Send: CLIENT
04-06-2008 21:59:27.546 - Timed out waiting for response from modem
04-06-2008 21:59:27.546 - Failed to send command because of WriteFile()
Failure, Error=000003e3.
04-06-2008 21:59:27.546 - Hanging up the modem.
04-06-2008 21:59:27.546 - Hardware hangup by lowering DTR.
04-06-2008 21:59:29.546 - A timeout has expired waiting to comm event to
occour.
04-06-2008 21:59:29.546 - 19200,8,N,1, ctsfl=1, rtsctl=2
04-06-2008 21:59:29.546 - Initializing modem.
04-06-2008 21:59:29.546 - Waiting for a call.
04-06-2008 21:59:29.546 - Session Statistics:
04-06-2008 21:59:29.546 - Reads : 0 bytes
04-06-2008 21:59:29.546 - Writes: 0 bytes

I certainly didn't set this up, please help
.



Relevant Pages

  • Re: Internet Connection Ceased
    ... Before you try to remove spyware using any of these ... download a copy of LSPFIX from any of the following sites: ... >> program, LSPFIX, will enable you to regain your connection. ... >> Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: My dial-up connection keeps on getting hijacked!
    ... > it back to the correct settings, make my connection and exit, but next ... Go through the following malware steps. ... If you are running Windows ME or XP, you should disable/enable System ... System Restore point from the More Options section of Disk Cleanup ...
    (microsoft.public.windowsxp.network_web)
  • Re: Configuring program access in Norton Internet Security 2007
    ... M$ slightly more than the malware goons;-) and to keep unnecessary ... If the machine has a direct connection to the modem, then harden the O/S ... s direct connection to the Internet. ...
    (comp.security.firewalls)
  • Re: Sunbelt-Kerio issues / Need new desktop firewall advise
    ... And if Svchost.exe is providing the means for a dubious remote IP connection by a program (it's the program that is making the connection malware or not), then he or she goes and find that program. ... Especially when this network is untrusted like the Internet. ... The FW will open the inbound ports to let the traffic back to the machine and to the program that is listening on the port. ...
    (comp.security.firewalls)
  • Re: Tips on blocking difficult services..
    ... address of intrusion attempts. ... AtGuard records all port connection attempts. ... blocking) see what connections the malware was trying to make, ...
    (comp.security.firewalls)

Quantcast