Solved Hacked

[Wiredsoul]

Okay, so I recently suspected my network of being hacked, then I got messages in the form of a .txt file and, well now I am sure its hacked. I tried tracing the txt file to see were it is coming from, but i keep getting my little brother's computer, and i know its not him because well, his 5. Any help?

 

[johnebadbak]

check the firewall settings in control panel

 

[Wiredsoul]

its being managed by Norton firewall. What exactly would I be looking for?

to update, whoever is doing this has sent me personal pictures of myself that i had deleted, and keeps sending me messages in .txt files that usually read

XD You suck ass!

Can I track these .txt file further, because they just point to my brothers computer, is it possible that he is using my brothers computer as a proxy? if so can I do anything, my little bros computer has no AV...

Also we are on a home network with 2 other computers, both of which I have access to. Also they have sent messages to all four of the computers, and gone as far as stealing personal pictures of my sister, and threaten to post them on her facebook. She took her laptop to bestbuy, to see if the qeek squad could track the invader... and they charged her $200, I have a feeling the ripped her off, but im interested in finding them myself.

 

[profdlp]

Open Task Manager, make sure "Show processes from all users" is checked (it's near the bottom) and post a screenshot here. If it won't all fit on one window post two of them so we can see it all.

You might also do Start>>type in msconfig in the Search box, go to the Startup tab and post a shot of that, too.

 

[Wiredsoul]

okay i attach the screen shot, I should also point out that I just recently changed the security key on my network and the attacks have stopped, but should I still be worried?

 

[profdlp]

I don't see anything on that screen which sets off an alarm. If changing your security key brought the problem to a halt it was probably someone who got into your system because there was a "door" open for them, not because they broke in.

I'd run a couple security scans like Malwarebytes, etc. I'd also recommend you visit this site: https://www.grc.com/x/ne.dll?bh0bkyd2

Click "Proceed" and then run the "Common Ports" scan. With your router set properly you should see "Stealth" for everything unless you know that you are the one who opened that port and you know you did it for a good reason.

 

[profdlp]

PS:

This is what mine looks like when I did the "All Service Ports" scan. It means that as far as the rest of the world is concerned I am not even here.

Come to think of it, that's kind of like the way it is with me and girls, too...

 

[Wiredsoul]

Lol, I know all to well, about the girls lol

Well, I did everything that was asked, and everything came up good, so i was wondering what exactly, did my sister pay $200 dollars from. Where are they going to trace the .txt files? dam will they be able to give us a name?

 

[profdlp]

Where were the text files showing up on your computer, as in, what file location?

 

[Wiredsoul]

Literally, on my desktop, I would log in, and right in my face next to my fallout 3 icon

 

[profdlp]

Have a look at this, especially the last post:

Folders and files appearing on Desktop

If someone got in there just long enough to drop a document it would reappear every time you logged on.

 

[Wiredsoul]

Okay, well, I went through it, and got nothing, it keeps telling me that the file came from my little bro comp, and I swear, I was at my little bros comp, when one of the files appeared on my desktop... how is that even possible?

Also it didn't look like they only did it on start up, at times it felt like my system was being controlled, games would start without me starting them, and folders would open.. does someone have to be near you network to gain access to it?
and if they are on my network, how do I distinguish where the messages are coming from, because, as far as I can tell, usually the only two computer running are mine and my lil bro..

 

[Wiredsoul]

Here is an update I went to best buy today, to get my sisters netbook, and they said that the files she was getting were coming from me, or at least thats what some network monitoring program was telling them... how is that possible. I never sent her anything, and now there saying that I was the one responsible for the whole mess, and just making it all up... Not that I care, but the only thing I can think of is I often let exceptions on my firewall, for false positives I usually get from keygens or well things of that nature, and yesterday I found something called ProRat, but it wasn't picked up by my AV. I only turn of my firewall and AV when I use the keygens though..:huh:

 

[johnebadbak]

I only turn of my firewall when!!! bad move keep the fire wall running always set the fire wall to allow only the content you want through it and block all others

 

[chalky]

You have a virus its simple

Backdoor.Prorat | Symantec

 

[profdlp]

...but the only thing I can think of is I often let exceptions on my firewall, for false positives I usually get from keygens or well things of that nature, and yesterday I found something called ProRat, but it wasn't picked up by my AV. I only turn of my firewall and AV when I use the keygens though..:huh:

Why would you assume they are "false" positives?

When downloading keygens from people who are in the business of taking things from others, why would you assume that they wouldn't take something from you? :sarc:

 

[Wiredsoul]

The only reason i thought it was a false positive is because, well, because i just got use to keygens being false positives, its not that im pirating games, I just don't like open the physical copies of my game, which, yes, I buy only physical copies, with the box and everything.

Yea I just realized that putting the firewall down was completely stupid... So with ProRat being a back door program, does that mean that they would have had to have access to my network? if so why did they never show up on my network map?

 

[profdlp]

Your network map is watching the front door, not the back door.

 

[Wiredsoul]

Your network map is watching the front door, not the back door.

lol, well that makes sense, I suppose that just about sums up my problem, marking it pretty much solved. thanks to all, for the help.

 

[Britton30]

Come to think of it, that's kind of like the way it is with me and girls, too...

Thay only seems bad now...