Ducati Sporting Club
Home Calendar Gallery Membership Online Shop DSC Blogs Extras
Go Back   Ducati Sporting Club > General > Technical - Help or Info - NON Motorcycle
Reload this Page Computer Hi-Jack
Forum Home Register FAQ Search Forum Recent Posts Mark Forums Read

Technical - Help or Info - NON Motorcycle PC's, Internet etc. Cars, or how to fix that leaky radiator - in here please!

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 07-Feb-2006, 10:14 AM
t5mission t5mission is offline
Registered Forum User
Mille
 
Posts: 298
Join Date: Jul 2005
Mood: Will my DD fit in a Fiat Scudo?
Computer Hi-Jack

Hi folks,

Just a warning Debs had her computer Hi-Jacked Sunday night/early hours. It doesn't look like they did nowt serious just looked at mail and some forum stuff anything to do with payment looks untouched but we will be getting statments.

It was probably just kids but I just wanted to post a reminder to keep you AV software and windows up to date and also make sure you are running a firewall and checking for spyware.

These links may be of help.

Antivirus software.
http://www.grisoft.com

Mircrosoft Anti Spyware.
http://www.microsoft.com/athome/secu...e/default.mspx

Microsoft Firewall HOWTO.
http://www.microsoft.com/windowsxp/u...nmore/icf.mspx

Windows Update HOWTO.
http://education.ucsb.edu/itg/help/f...owsupdate.html

Anyway be safe. Adam
Reply With Quote
  #2  
Old 07-Feb-2006, 10:24 AM
weeksy2 weeksy2 is offline
Big Twin
 
Posts: 1,610
Join Date: Nov 2005
Mood: R1's are better than Ducatis'
Adam,

for someone to have access in this way, i'm afraid one of you in the house will have needed to 'give' them access. This is either by opening a file or running an executabble that is then TSR (Terminate and stay resident).

There are lots of websites with information on this. Cult of the dead cow, Back Orifice etc etc....

Basically when you click it runs up an app which then gives the hacker an IP addy and can then access your sessions... Although it's not a 'live' envronment so they can't see what you can see, just have access to files/folders etc...
Reply With Quote
  #3  
Old 07-Feb-2006, 10:45 AM
t5mission t5mission is offline
Registered Forum User
Mille
 
Posts: 298
Join Date: Jul 2005
Mood: Will my DD fit in a Fiat Scudo?
Hi mate,

I do this for a living reading up it sounded like a subseven. Debs has two kids and there are always being sent stuff so It's not suprising this has happen. It could have been going on for ages but somone got careless and thats when we noticed. Im building her a new machine and turning her one into a Linux firewall/fileserver so we can secure all important stuff.

[Edited on 7-2-2006 by t5mission]
Reply With Quote
  #4  
Old 07-Feb-2006, 11:25 AM
weeksy2 weeksy2 is offline
Big Twin
 
Posts: 1,610
Join Date: Nov 2005
Mood: R1's are better than Ducatis'
ahhhh no worries then fella... thought you were an average numpty, not a techie
Reply With Quote
  #5  
Old 07-Feb-2006, 11:38 AM
Iconic944ss's Avatar
DSC Member Iconic944ss Iconic944ss is offline
DSC Webteam
Webteam
WSB Hero
Bikes: 1993 - 944ss / Aprilia Falco / ST4S
 
Posts: 7,737
Join Date: Oct 2002
Hi Guys,

I'm kinda curious in case this kind of thing happens to me/anyone....how could you tell someone had accessed the pc? Do you have some other software running and were alerted to the fact?

I have avg running and a router that has a hardware firewall but I still wonder about security at times.

Cheers - Frank
Reply With Quote
  #6  
Old 07-Feb-2006, 12:02 PM
t5mission t5mission is offline
Registered Forum User
Mille
 
Posts: 298
Join Date: Jul 2005
Mood: Will my DD fit in a Fiat Scudo?
Hi,

We noticed when some files from her phone were moved Phone is linked to computer by bluetooth, also some of her email were shown as read when she had not read them. As long as you are carefull and dont open files that you don't know what they are you should be ok.

As I said I'm building a new ahine for her but have told Debs and the kids not to leave it on when they are not using it untill I get up there and sort it out.

I will check this reg key as it looks like most backdoor app start from here. But I will keep you all posted over the weekend.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

[Edited on 7-2-2006 by t5mission]
Reply With Quote
Reply
  
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector
Switch to Vertical postbit Use Vertical Postbit

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Recent Posts - Contact Us - DSC Home - Archive - Top
Powered by vBulletin 3.5.4 - Copyright © 2000 - 2017, Jelsoft Enterprises Ltd. - © Ducati Sporting Club - All times are GMT +1. The time now is 04:26 PM.