Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Hacked?

Posted on 01/12/2005 6:10:20 PM PST by maui_hawaii

How can I tell for sure if I am hacked? My computer I mean.

I run several anti-spyware programs on a regular basis...such as Adware SE, Spybot, the new Microsoft spyware program, and I have Spyware Blaster on my machine.

I also run Outpost firewall on block most mode.

I clean my computer's junk files regularly, and check for spyware often and up until now no real problems.

However, I am noticing that the icons on my desktop are moving around at random. I move them back, then they get shuffled again. If its not a hacker, then why?

I completely disconnected from the internet today, and shut the computer down entirely...but when I booted again after coming home from work my icons were again in the wrong order...

I am running XP Home...

Oh yeah, and I run that Leak Tester software and it came up as a tight ship...

Also while we are at it on my firewall, sometimes it lists IP addresses under the attack detection screen.

What exactly does that mean? And what does "Port Scanned" mean?

(On the last one lets start with "What is a port?")


TOPICS: Computers/Internet
KEYWORDS: help
Navigation: use the links below to view more comments.
first 1-2021-4041-47 next last

1 posted on 01/12/2005 6:10:20 PM PST by maui_hawaii
[ Post Reply | Private Reply | View Replies]

To: maui_hawaii

Your desktop is probably set to 'Auto-Arrange' your icons. Right click on the desktop and change it...JFK


2 posted on 01/12/2005 6:14:13 PM PST by BADROTOFINGER (Life sucks. Get a helmet.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: BADROTOFINGER

Nope. Not it.


3 posted on 01/12/2005 6:15:47 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 2 | View Replies]

To: maui_hawaii
Are you logged in?

(I'm sorry, but somebody had to do it.)

4 posted on 01/12/2005 6:17:09 PM PST by shezza
[ Post Reply | Private Reply | To 1 | View Replies]

To: maui_hawaii
Rightclick desktop, select properties, then desktop then customize desktop. Desktop cleanup is at the bottom.
5 posted on 01/12/2005 6:17:31 PM PST by ironman
[ Post Reply | Private Reply | To 1 | View Replies]

To: maui_hawaii

Perhaps a menehune has been playing with your computer.


6 posted on 01/12/2005 6:18:18 PM PST by Redcloak (My New Year's resolution: To make up a new tag line.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: shezza

7 posted on 01/12/2005 6:20:20 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 4 | View Replies]

To: Redcloak

No menehune in the house. Not unless they are sneaking in from the neighbors, and locking up when they leave :0)


8 posted on 01/12/2005 6:21:34 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 6 | View Replies]

To: maui_hawaii
I also run Outpost firewall on block most mode.




This is probably your best bet. If you are hacked you may have logs of what IP addresses your computer is communicating with. You can copy these and go to www.samspade.org to see where they originate. If they originate from ApNic (Asia Pacific Network) you are possibly hacked. Also, you can do a netstat from the command line and see what connections are made to your computer through most protocols. Here again you can copy IP addresses and which protocols are being used in communicatios with your computer. Again go to sam spade and google to see if these IP's originate from a rought network such as ApNic or the protocols are uncommon. I.E. if someone is using a P2P type of protocol to connect to you. This may indicate that your computer has been hijacked and is being used unscrupulously.
9 posted on 01/12/2005 6:21:59 PM PST by phoenix0468 (One man with courage is a majority. (Thomas Jefferson))
[ Post Reply | Private Reply | To 1 | View Replies]

To: ironman

What is that supposed to do?


10 posted on 01/12/2005 6:22:04 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 5 | View Replies]

To: phoenix0468
What leaves me puzzled is that I completely disconnected from the net, and unplugged the machine today...all day.

Then when I booted again, it came up all shuffled up.

He would have to be a good hacker to get the info with no electricity or internet...

11 posted on 01/12/2005 6:24:27 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 9 | View Replies]

To: phoenix0468

That being said though, I do get port scans and all that sometimes.


12 posted on 01/12/2005 6:27:42 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 9 | View Replies]

To: phoenix0468
Also, you can do a netstat from the command line and see what connections are made to your computer through most protocols.

Netstat????

13 posted on 01/12/2005 6:30:47 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 9 | View Replies]

To: maui_hawaii
I do get port scans and all that sometimes.

If you're getting port scans on ports 1025, 2745, 3140, 80 and 443, those are port scans from infected computers on the internet looking for open ports on your machine by which to further propgate the virus.

14 posted on 01/12/2005 6:36:31 PM PST by BigSkyFreeper (PEST/Suicide Hotline 1-800-BUSH-WON)
[ Post Reply | Private Reply | To 12 | View Replies]

To: Prime Choice

ping


15 posted on 01/12/2005 6:38:27 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 13 | View Replies]

To: BigSkyFreeper
How can I tell what ports they scan?

But before we go there, whats a port? What do they do?

16 posted on 01/12/2005 6:39:26 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 14 | View Replies]

To: maui_hawaii
Click the Start button, click "run" and in the dialog box type:
cmd
that will open up a DOS window. Once that is open, type:
netstat
That will show currently active ports on your machine. To close the window, type at the C: prompt:
exit

17 posted on 01/12/2005 6:42:43 PM PST by BigSkyFreeper (PEST/Suicide Hotline 1-800-BUSH-WON)
[ Post Reply | Private Reply | To 13 | View Replies]

To: maui_hawaii

Ports allow your computer to communicate with other computers on the internet, there are 65,335 ports on your machine, not all of them are used at the same time. If your firewall has logs, you can look in the logs for all the activity going on in the background. I've never used Outpost, so I can't help you there.


18 posted on 01/12/2005 6:44:32 PM PST by BigSkyFreeper (PEST/Suicide Hotline 1-800-BUSH-WON)
[ Post Reply | Private Reply | To 16 | View Replies]

To: maui_hawaii
Please do this:

Start -> Run
In the dialog box, enter "command" (without quotes).
Once you get the DOS prompt, enter this command: netstat -an

Cut and paste the results you get either to this thread (or in freepmail to me) and we'll go from there.

As for whether you're infected with a virus, trojan, worm, or are the victim of an ankle-biter remains to be seen and depends on a wealth of variables. What I'm trying to determine up front is whether anyone's connected to your system.

19 posted on 01/12/2005 6:45:36 PM PST by Prime Choice (The DNC! Where boys and girls look the same! That's a little strange isn't it?)
[ Post Reply | Private Reply | To 13 | View Replies]

To: BigSkyFreeper
It says ....

Active Connections

Proto Local Address Foreign Address State

20 posted on 01/12/2005 6:45:52 PM PST by maui_hawaii
[ Post Reply | Private Reply | To 17 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-47 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson