Posted on 01/12/2005 6:10:20 PM PST by maui_hawaii
How can I tell for sure if I am hacked? My computer I mean.
I run several anti-spyware programs on a regular basis...such as Adware SE, Spybot, the new Microsoft spyware program, and I have Spyware Blaster on my machine.
I also run Outpost firewall on block most mode.
I clean my computer's junk files regularly, and check for spyware often and up until now no real problems.
However, I am noticing that the icons on my desktop are moving around at random. I move them back, then they get shuffled again. If its not a hacker, then why?
I completely disconnected from the internet today, and shut the computer down entirely...but when I booted again after coming home from work my icons were again in the wrong order...
I am running XP Home...
Oh yeah, and I run that Leak Tester software and it came up as a tight ship...
Also while we are at it on my firewall, sometimes it lists IP addresses under the attack detection screen.
What exactly does that mean? And what does "Port Scanned" mean?
(On the last one lets start with "What is a port?")
Your desktop is probably set to 'Auto-Arrange' your icons. Right click on the desktop and change it...JFK
Nope. Not it.
(I'm sorry, but somebody had to do it.)
Perhaps a menehune has been playing with your computer.
No menehune in the house. Not unless they are sneaking in from the neighbors, and locking up when they leave :0)
What is that supposed to do?
Then when I booted again, it came up all shuffled up.
He would have to be a good hacker to get the info with no electricity or internet...
That being said though, I do get port scans and all that sometimes.
Netstat????
If you're getting port scans on ports 1025, 2745, 3140, 80 and 443, those are port scans from infected computers on the internet looking for open ports on your machine by which to further propgate the virus.
ping
But before we go there, whats a port? What do they do?
cmdthat will open up a DOS window. Once that is open, type:
netstatThat will show currently active ports on your machine. To close the window, type at the C: prompt:
exit
Ports allow your computer to communicate with other computers on the internet, there are 65,335 ports on your machine, not all of them are used at the same time. If your firewall has logs, you can look in the logs for all the activity going on in the background. I've never used Outpost, so I can't help you there.
Start -> Run
In the dialog box, enter "command
" (without quotes).
Once you get the DOS prompt, enter this command: netstat -an
Cut and paste the results you get either to this thread (or in freepmail to me) and we'll go from there.
As for whether you're infected with a virus, trojan, worm, or are the victim of an ankle-biter remains to be seen and depends on a wealth of variables. What I'm trying to determine up front is whether anyone's connected to your system.
Active Connections
Proto Local Address Foreign Address State
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.