Re: hacker help

I'm new to firewalls etc but saw a lot of people mention ZoneAlarm at www.zonelabs.com which may help stop people getting at her PC when online. The only problems I've had with it is (i) I'm now paranoid :-> (ii) GPL seems to lockup when it's loaded, requiring a reboot. Andrew McP

MMmmm. I see two possibilities. 1. If the web server is running on her computer then she is definitely being hacked from outside. Download ZoneAlarm, www.zonelabs.com This will detect any nasty programs running on her machine (Back Orifice etc) It also logs any intrusion attempts. 2. If her website is being hosted by Mindspring, AOL etc. then someone just has her password. Change it. Does she have a static IP? What kind of connection does she have??? Most importantly, check she has no shares on her hard drive. Believe it or not, if someone tests your IP and if you have ANY shares on your machine then ANYONE on the Internet can delete files off your drive. Regardless of what happens, someone clearly is attacking her personally. Changing the ICQ AND the webpage involves two completely seperate lines of attack. I would recommend visiting www.grc.com Steve is a serious Internet security expert and if your friend reads through his advice and runs his tests she should have a better idea of what is going on. ...Colin "Colin Harris" <[email hidden]> wrote in message news:9M4O4.4130$[email hidden]...

Quoted text (24 lines)

> I really don't know about these things, but I'm hoping that someone here > does, or can put me in touch with someone who does. > A friend of mine has what appears to be a hacker attacking her. She keeps > losing her icq password, her website has its pages removed, some obscene > stuff written in her bio on icq and other such stuff. What can she do, how > can she find out who it is, and what would you recommend her installing to > prevent this? > I ran a tracert on her IP, and so have a note of everywhere the signal > went... > Please, help me out, if you would! > > > > > -- > > Colin Harris > ColinHarris in N3/NL > Proud co-owner - CLONE N.Legends league > http://members.chello.se/clone/index.htm > ICQ 25485061 > > >

I really don't know about these things, but I'm hoping that someone here does, or can put me in touch with someone who does. A friend of mine has what appears to be a hacker attacking her. She keeps losing her icq password, her website has its pages removed, some obscene stuff written in her bio on icq and other such stuff. What can she do, how can she find out who it is, and what would you recommend her installing to prevent this? I ran a tracert on her IP, and so have a note of everywhere the signal went... Please, help me out, if you would! -- Colin Harris ColinHarris in N3/NL Proud co-owner - CLONE N.Legends league http://members.chello.se/clone/index.htm ICQ 25485061

boot up puter and go to start then run type command in dos window type cd\ then type netstat.exe it will detect any signals coming in and most of the time will give u ip hope this helps Bengal http://members.home.net/bengal2/karttec.html Colin Harris wrote:

Quoted text (19 lines)

> > I really don't know about these things, but I'm hoping that someone here > does, or can put me in touch with someone who does. > A friend of mine has what appears to be a hacker attacking her. She keeps > losing her icq password, her website has its pages removed, some obscene > stuff written in her bio on icq and other such stuff. What can she do, how > can she find out who it is, and what would you recommend her installing to > prevent this? > I ran a tracert on her IP, and so have a note of everywhere the signal > went... > Please, help me out, if you would! > > -- > > Colin Harris > ColinHarris in N3/NL > Proud co-owner - CLONE N.Legends league > http://members.chello.se/clone/index.htm > ICQ 25485061

go here http://www.lockdown2000.com/ * Sent from RemarQ http://www.remarq.com The Internet's Discussion Network * The fastest and easiest way to search and participate in Usenet - Free!

blackICE defender is pretty good too. A very non-complicated firewall. Keeps track of all the info going into and out of your computer and logs any suspicious behaviour along with the 'attackers' IP. scooter Bengal <[email hidden]> wrote in message news:[email hidden]...

Quoted text (16 lines)

> boot up puter and go to start then run > type command > in dos window type cd\ > then type netstat.exe > it will detect any signals coming in and most of the time will give u ip > hope this helps > Bengal > http://members.home.net/bengal2/karttec.html > > > > Colin Harris wrote: > > > > I really don't know about these things, but I'm hoping that someone here > > does, or can put me in touch with someone who does. > > A friend of mine has what appears to be a hacker attacking her. She

keeps > > losing her icq password, her website has its pages removed, some obscene > > stuff written in her bio on icq and other such stuff. What can she do,how > > can she find out who it is, and what would you recommend her installingto

Quoted text (12 lines)

> > prevent this? > > I ran a tracert on her IP, and so have a note of everywhere the signal > > went... > > Please, help me out, if you would! > > > > -- > > > > Colin Harris > > ColinHarris in N3/NL > > Proud co-owner - CLONE N.Legends league > > http://members.chello.se/clone/index.htm > > ICQ 25485061

You don't haved to remove the sharing of the drives, just the "file and printer sharing" binding to the TCP/IP protocol (remove all bindings if you just use TCP/IP for internet). Means you're stuck with NetBUI for your local file sharing, but that's not as bad as having your PC hacked into. I'm using AtGuard as a firewall, which is now part of Norton Security 2000. Once set up right (basically I gave it a list of "trusted" applications) it doesn't interfere with anything I do online. This person should also get a good virus scanner to check for and eliminate backdoor programs, if any, on her PC. Jan. =--- Colin <[email hidden]> wrote in message news:8eb2c5$l1v$[email hidden]... > MMmmm.<snip>

"EldredP" <[email hidden]> wrote in message news:[email hidden]... > In article <8eb2c5$l1v$[email hidden]>, "Colin" > <[email hidden]> writes: > > >Does she have a static IP? What kind of connection does she have??? > >Most importantly, check she has no shares on her hard drive. Believe itor > >not, if someone tests your IP and if you have ANY shares on your machine > >then ANYONE on the Internet can delete files off your drive. > > But if you have a password on your shares, wouldn't someone still need the > PASSWORD...? That's what I was thinking. Windows asks you if you want to disable file and printer sharing when you connect to the internet if you DON'T have a password on your shares. Franz

Quoted text (7 lines)

> > Eldred > -- > Tiger Stadium R.I.P. 1912-1999 > Own Grand Prix Legends? Goto http://gpl.gamestats.com/vroc > > Never argue with an idiot. He brings you down to his level, then beats

you > with experience... > Remove SPAM-OFF to reply.

In article <8eb2c5$l1v$[email hidden]>, "Colin" <[email hidden]> writes: >Does she have a static IP? What kind of connection does she have??? >Most importantly, check she has no shares on her hard drive. Believe it or >not, if someone tests your IP and if you have ANY shares on your machine >then ANYONE on the Internet can delete files off your drive. But if you have a password on your shares, wouldn't someone still need the PASSWORD...? Eldred -- Tiger Stadium R.I.P. 1912-1999 Own Grand Prix Legends? Goto http://gpl.gamestats.com/vroc Never argue with an idiot. He brings you down to his level, then beats you with experience... Remove SPAM-OFF to reply.