Home › Forums › Archives › Instant Messaging › Yahoo! Messenger Support › Please help- urgent- Someone controlling my PC
- This topic has 14 replies, 7 voices, and was last updated 21 years, 11 months ago by
blahblahbleh.
-
AuthorPosts
-
November 2, 2004 at 3:56 am #14495
blahblahbleh
Memberhi,
i was chatting tonight on yahoo messenger, the person I was chatting to send me a pic- once it was sent I opened it and it dissapeared. I feared it was a virus and asked them what was going on- they soon disapeared. About 30 mins later I got an error message on my screen -in this message it said hi and gave my name and asked me questions. This was not a bot or programme this was a real person and they had the ability to shut down my pc whenever they wanted. I am really freaked out as this person clearly knows who I am. WHat worries me is that they knew my real name and not the online name I use. I think the file they sent me was ssmypics.scr which is apparantly a screen saver.
I use xp pro and connect to the net via a router. What can I do???
Please help
EDIT:Topic name edited to increase helpful posts. It’s best to be descriptive. 🙂
November 2, 2004 at 4:03 am #103679Sathallrin
MemberIt sounds like you got a trojan from them.. scr files are screensaver files, but they often can contain code to install viruses and trojans. You should do a full virus scan on your system. If you don’t have a virus scan program I would recomend downloading AVG free version which you can get from here: http://free.grisoft.com/freeweb.php/doc/1/
After you download it, I would suggest you unplug your internet connection so they can nolonger do things to your computer while you run a full virus scan on it.November 2, 2004 at 4:11 am #103688blahblahbleh
Memberthanks I will do that now- how is it that they would know my real name etc? Can this virus allow them to obtain information off my pc?
I am really freaked out and am worried in case this person can obtain more personal information. Will the avg download allow me to remove the virus etc?thanks again
November 2, 2004 at 4:14 am #103680Sathallrin
MemberAVG free version is a fully enabled virus scan program, so yes.. If it finds the virus/trojan it can remove it for you.
It sounds like they are able to fully access your computer, from seeing your files to seeing your actual screen.. So its possible they could have gotten your name from anywhere on your computer.
November 2, 2004 at 5:48 am #103677Jeff Hester
Keymasterplug >> http://alleycat.netfirms.com/ has a heap of tools and places to find things
November 2, 2004 at 6:19 am #103686BuddhaSmile
MemberNice site Alley!
November 2, 2004 at 6:20 am #103683kron_19792000
MemberHey Alleycat
Have you tried Kaspersky. How did you like it, did you have any problems while using it?November 2, 2004 at 6:29 am #103687BuddhaSmile
Member.scr files are screen saver files, they can do everything a .exe file can do (meaning they can execute programs) and they can do those things when you are not around….
Beware! Be Safe! Do not accept files from strangers. If you do, scan them before you open them and NEVER accept an executable (.exe or .scr files)
November 2, 2004 at 6:32 am #103678Jeff Hester
KeymasterKron:
Yes I did along time ago found it usefull but not what I was looking for in the long run.
Buddha : Ty but still along way to go before it goes public – thats just the HTML form to get the groundwork down.
November 3, 2004 at 7:07 pm #103689blahblahbleh
MemberHi all
Many thanks for the replies, I reinstalled my pc after this hacker got in and I think everything is ok- but how can I be 100% sure? I am running norton internet security and firewall, peer guardian and avg-is this enough or what else should I install?
I am worried the hacker may still be able to monitor my pc- is this possible even though I have reinstalled? As I connect to the net via a router I am on a static i.p-can my i.p be used to manipulate my pc still?
Another thing that has been bothering me is-i think this guy had acess to my pc for 1 hour- would he have been able to look at anything he wanted? I have personal information that I would not want to be seen-could he have seen this? WHat could he have uploaded from me?
As I said in original post, the messages came by the way of error messages with txt in the box- what kind of hack is this that can do this and reboot my pc. I would be relieved if I knew this type of hack could only netsend me and reboot my pc- I am just worries that my security is compromised and this can happen again
November 3, 2004 at 11:41 pm #103681neo_ny_23
MemberThe key is tht u shuldnt receive any file, be it picture file, be it a software, whatever, from any strangers, not even from friends ( who knows some one else might have hacked their ids and using their id to send u the trojan). If u want to accept any file, double check the file( its extension name). Some people say, hey, u wanna see my pic? and then they either send u a file which looks like this “mypic.jpg.exe” or “mypic.jpg.scr” or simply “mypic.exe” or “mypic.scr”. So be sure to check the extensions. .pif is another type of extension which u shuldnt download from any one.
Second step is to scan it with an UPDATED antivirus. I said “updated” in caps because, almost every one has some kind of antivirus, but in 90% cases, they are NOT updated. As a result those trojans dont get detected. So its always nice to hv an updated anti virus.
Third thing if possible, get a nice firewall, like ZoneAlarm. It prompts u if your computer is trying to send log report if its hacked and even during installation also.
Fourthly, I have this software, Webroot Spysweeper which I have been using for last 5 months and it has been awesome. I havent seen any trojan getting past through it yet. Yes, Norton Antivirus 2004 (updated )fails to detect tons of viruses and trojans, but not Webroot Spysweeper.
You can either download the Webroot Spysweeper from its website or from my website, here.There is another trick to know if your computer is still infected or not. I dont know if its 100% foolproof or not, but atleast it has worked for me many times.
Right click on taskbar, and go to “Task Manager” and then “Processes”. There would be like around 50 processes. Sometimes what I do, is I go to google.com and type in all the “Image Names” one by one to know what they are and whether they are some kind of virus tools or not. If u find out that something suspicious is running, right click on it and click “End Process” (but be sure that its a virus not any kind of helpful program). Sometimes what happen is that some, virus files relaunch everytime u try to “end process” them. So what u can do is go to C:WINDOWSsystem32 folder and look for that process. In many computers ( perhaps all ) windows/ system 32 folder is write protected. So u cant delete any file from there. All u can do is to rename that file. For example, if the file name is, trojan.exe, just rename it to trojan1.exe and click ok. I m sure that wuld stop it from being executed againn again.
If any one else has any other ideas, let us know.November 4, 2004 at 1:14 am #103690blahblahbleh
MemberThanks for the reply, I should point out that although I am very careful normally- on this occasion I was not.
I am aware of checking each individual process on the task manager and have done that after reinstall and all looks good. My main worry is what has already been obtained and viewed. From what I have described -what do u think this hacker had access to?
I have downloaded that software you suggested and all is well
November 4, 2004 at 1:58 am #103684kron_19792000
MemberI would suggest a hijack this check also atleast once in a week. I dont trust nortan. But then you have to remember it is a anti virus not a trojan hunter.
Personally I use spy catcher and I like it a LOT.
Lastly it is IMPOSSIBLE to be a 100% safe software will always have bugs and there will always be people who can use these bugs. It is just good to get the maximum security that you can getNovember 4, 2004 at 2:04 am #103685kron_19792000
MemberQuote:quote:Originally posted by kron_19792000I would suggest a hijack this check also atleast once in a week. I dont trust nortan. But then you have to remember it is a anti virus not a trojan hunter.
Personally I use spy catcher and I like it a LOT.
Lastly it is IMPOSSIBLE to be a 100% safe software will always have bugs and there will always be people who can use these bugs. It is just good to get the maximum security that you can getIt depends on what kind of access the hacker got if he/she had complete control of your computer then they could have viewed any thing the liked
If on the other hand if it was a key logger then the amount of information that they could have obtained is limited unless you typed in some thing that he should have not seen
Sorry about the double postNovember 4, 2004 at 5:09 am #103682SS_AntiHacker
Member=) Uhm, everything seems covered here, hihi, no more to add except to Blahblah is whether your Norton Firewall asked you about letting some unknown program access the Internet? If not, or you prevented that, probably your important data is safe and the hacker DO NOT have access to your files. Next time be more careful and put your important data in another partition and encrypt it.
-
AuthorPosts
- You must be logged in to reply to this topic.