Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 8th, 2008, 6:08am
   Mischel Internet Security Forum
   Internet Security
   General
(Moderators: Helena, Gavin_Coe, Magnus)
   ANNOYED WITH HACKS
« Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: ANNOYED WITH HACKS  (Read 491 times)
neuromancer78
Newbie
*





   


Posts: 1
ANNOYED WITH HACKS
« on: Jan 4th, 2006, 2:20am »
Quote Quote  Modify Modify

I got WinXp Home SP2. I have been at war with a hacker (or a few of them) for the past two weeks. I have been logging everything, packet sniffing, got SNORT setup, Norton Personal Firewall.....
 
I got hacked, reinstalled windows. Then because of the cable modem not releasing the IP, despite MANY attempts, within an hour it was breached, and got some trojan inside. I managed to get at least one of them out. For the past week I've had Norton pop up alerts that I have an inbound UDP connection from my IP going to local host. Despite all the rules I set it kept on coming up with new ports... usually in the 1000-2000 range.
 
This is not my system. Personally I would use win2kPro SP3. ANYWAYS. The person it belongs to uses a Cisco VPN client to get onto her work system using Remote Desktop. Well today I had to basicly open the ports the VPN uses and then sometime while I was at work this got hacked, BAD. I could not open up Norton firewall General Settings to modify rules, which happened before I re-installed Windows (the sole reason WHY I re-installed)..... I get this an error saying nisplug.dll is unable to generate a script or something to that effect. Basicly Norton got messed with. Now I cannot add rules to it.
 
I managed to find all these strange exe's around, I shredded them with Spybot.
 
The other thing that happens each time this thing gets hacked is that the VPN client gets messed with. The sub-system fails, and thus cannot connect to any server. I managed to re-install it and now seems to work just fine.
 
The main problem I am having is that now matter what I cannot pervent people from accessing this system as an ANOYMONUOS (sic) USER. I check the event log and I see it several times.
 
My question is this. Should I re-install windows AGAINHuh? I am getting tired of this crap, I cannot seem to get a new IP from the cable network no matter how many times I release, turn off, uplug for 10 minutes, then re-plug and then renew....comes up with the SAME IP EVERY TIME! Norton seems to be a waste of money, and I am contemplating installing AtGuard I managed to keep around before Symantic decided to buy it out and then totally ruin a good firewall.
 
I am lost. I have bought books, researched, even thinking of setting up my dust collecting DEC AlphaServer as a Linux firewall but I still need to buy some hardware and quite frankly the thing is HUGE.
 
Am I wasting my time trying to secure WinXP Home?? I can't afford yet to buy PRO, and this is causing me headaches, the other person headaches, and we BOTH use this computer for work. I do 3D art, and haven't been able to touch it for 2 weeks because of this bastard hacker who gets off causing other people misery. I need help....BAD.
 
If you want to.... email me at ruby_net6@lycos.com or reply here.... either way this sucks ass and I can't seem to shake this off. All because of an IP that won't go away.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register