Home › Forums › Archives › Instant Messaging › Yahoo! Messenger Support › Any explanation? How did they get our passwords?
- This topic has 9 replies, 5 voices, and was last updated 22 years ago by
CatGrl.
-
AuthorPosts
-
November 1, 2004 at 9:40 pm #14484
CatGrl
MemberHi guys, I got 2 questions: PLEASE KEEP READING lol
1) I checked someone’s yahoo profile, and now it doesn’t go away…. I do clear seach history thing from Internet options, delete temporary files, delete cookies, etc…everything on my seach list is clear except for that persons profile… I even opened some other yahoo profiles, they all go away as well, but this one person’s just stays there. It’s been a week now…lol
2) With my yahoo messenger and my sisters (2 different IDs) I talk to a couple of my close friends none of whom has my password and same with my sister… but sometimes when we’re signed on, it signs us off and says “you’ve been signed off as you’ve been signed on on another machine” or something like that! At first I thought oh well, it was a mistake, but it’s kinda weird now… specially since it happens to both of our yahoo IDs and we’re POSITIVE no one has our password.
So basically is it possible that someone hacked into my pc?? I don’t have firewalls…. maybe? any other explanations?
EDIT: Topic title edited to help generate more helpful posts. It’s best to be descriptive. 🙂
November 1, 2004 at 10:31 pm #103631Sathallrin
Member1. What search list are you talking about where it wont clear from? Somewhere on internet explorer?
2. It could be possible that it happened, you could try checking to see if your Yahoo ID is still online after it says “you’ve been signed off as you’ve been signed on on another machine.” Maybe by signing on another ID with that ID on its buddy list. If it is still online, then probably someone else managed to sign on it, if its not, then chances are its just a glitch in yahoo…
Either way, it couldn’t hurt to change your password just incase.November 2, 2004 at 2:23 am #103637CatGrl
Member1) the internet search list… the one you put the URL… where you type http://www.blahblahblah.com or other addresses. You can clear that search list from Internet options, clear search history. Now when I do that, everything else is gone except for this one person’s profile… Other yahoo profile that I visited, other sites, everything gone.. this one profile’s URL just stays there LOL
2) well the person can still be logged on with my name just invisible, so I can’t really make sure…
November 2, 2004 at 2:56 am #103632Sathallrin
Member1. Ahh the history… well you could try going to C:Documents and SettingsLocal SettingsHistory (Windows XP/2000) and seeing if it shows up in there, and deleting it manually if it does.
2. True they could just use the invisible feature, try changing your password and see if it happens again. Also try running a full virus scan to see if your computer is infected.
November 2, 2004 at 3:03 am #103634Oreo
Member2. It sounds like you have something like Magic-PS on your system. We have a LOT of topics on the site about that. You can use search and learn TONS about it here SEARCH Use “Magic PS” as the search words. I think that Spybot S&D gets rid of it (or it’s Ad-Aware, I’d suggest you load both of those onto your PC!) You may also want to check for trojans and viruses. You should be able to find LOTS of solutions about Magic PS and those anti-spy programs using search. Good Luck and let us know how things turned out. 🙂
EDIT: Oh yeah, I almost forgot, once you run the programs and get rid of all of those little beasties, change your passwords. If you change them while they are still in your system, the person who stole them in the first place will still find out what they are!
November 2, 2004 at 3:11 am #103636rafaelemt
MemberHello Cat Grl and welcome to BBB:
If for any reason you beleive that someone has hacked your Yahoo id I would recomend checking your computer for any posible spyware or troyan. I always recomend both AdAware and Spybot Search and Destroy do a full scan of your computer with both of them. You should also change your Yahoo pasword and your sister’s too. Related to cleaning that profile url from your computer you can use a program called Cleanup wich troughly cleans all this kind of info from your computer. Finally I sugest you get a good firewall.
Rafael
EDIT: oopps! Oreo beat me to it by a good 10 minutes :p Anyways always happy to asist.
November 2, 2004 at 3:32 am #103633Sathallrin
MemberI found this neat program if you are running Windows 95/98/ME… http://www.fsm.nl/ward/
What it does is clear your history settings and tempory internet files that internet explorer fails to clear… It will also give you a complete listing of all URLs that your computer remember, this should solve your first question if you happen to be running one of those OS’s.November 2, 2004 at 6:20 am #103630Jeff Hester
KeymasterFYI – for those that dont know PS-magic is in reality just another Password stealer, against popular belief it is detectable by a trogan scanner but dont get that confused with an antivirus scanner. I use trogan hunter and it detects this keylogger. PS magic looks for the registry entry of you password “Eoption” string entry located in your registry (XP) HKEY_CURRENT_USERSsoftwareMicrosoftWindowsYahooPager folder and looks similar to this ( although this has been changed for my own security) .
AKKYMVhDCCBdyTAQmt.SdOl7DxTqLdvCBAhBlWO6EuxuCL9gT.tyABHlU-
also you can see this in binary form but I wont paste that here.
As with most it allows the creater of the program the option to captures passwords as they are entered or transmitted. Some password capture trojans impersonate the login prompt, asking the user to provide their password -it has the ability to send victim id & pass to your id Work without any smtp and script.There are however some alias that it is known by – most common are :
Trojan.PSW.Sagic, Trojan.PSW.Sagic.11
ill let it know that some variants can be detected by pestpatrol too. I offer you this dont use the PS detectors that are on offer but get yourself a quality troganhunter.
It also is a startup pest located
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “svchost” HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun “svchost”
Hope this clarifies that little annoyance
November 2, 2004 at 6:37 am #103638CatGrl
MemberThank you guys so much for your replies… I just did a norton antivirus scan, no virus detected. I’m doing a spy sweeper scan and after than I’ll change my password. The thing was that I thought maybe this guy, my ex, whose profile I can’t delete from my search history, hacked into my pc since he’s really good at computers in general and since I made a new ID and deleted my old one to not talk to him anymore … But either way, I guess I’ll never know.
Thanks again, you guys are the best:)
November 2, 2004 at 3:36 pm #103635Oreo
MemberHe MAY have a keylogger on your PC…in which case I know that Spybot S&D takes care of a lot of those. You may want to run more than just one spyware remover (at separate times that is) to make sure that more possibilities are covered. Good Luck! 🙂
-
AuthorPosts
- You must be logged in to reply to this topic.