Sub7
Results 1 to 9 of 9

Thread: Sub7

  1. #1
    Banned
    Join Date
    Apr 2002
    Posts
    6

    Sub7

    Can anyone help. someone hacked into my pc with sub7 , i have refomated my pc and done search and found the following files
    rg3d03d892.cad rg3d035f1c.cab rg3d03525d.cad rg3d042634.cab rg3d05225f.cab which are user dat files for sub 7 does this mean the person still has access to my pc? and how can i stop them?

  2. #2
    Senior Member
    Join Date
    Sep 2001
    Posts
    800
    if you reformatted your harddrive then there should be no more files.
    do you have a firewall running? Antivirus?
    [gloworange]\"A hacker is someone who has a passion for technology, someone who is possessed by a desire to figure out how things work.\" [/gloworange]

  3. #3
    Senior Member
    Join Date
    Apr 2002
    Posts
    250
    Hmmm...try moosoft's( http://moosoft.com/ ) trojan cleaner, just to make sure. Get http://www.blackcode.com 's security scane, the trojan scan is on phase 2.
    [gloworange]Die, or surrender, either way won\'t work.[/gloworange]
    [shadow]HuntX7[/shadow]

  4. #4
    Member
    Join Date
    May 2002
    Posts
    65
    Try the cleaner by Moosoft

    [glowpurple]http://www.moosoft.com/thecleaner/download.php[/glowpurple]

    Greg

  5. #5
    Member
    Join Date
    May 2002
    Posts
    65
    doh, hunt types faster than me

  6. #6
    if you reformatted your harddrive then there should be no more files.
    Indeed. Did you reinstall a program that has the infection? That is the only way I can think to have reformatted and got a reinfection. DAT files and CABs alone cannot let the intruder back in, it's the server that lets them in. However, I can understand after being hit with something like that one becomes a bit awry about things.

    As with all compromises like this, take deep breaths and do not panic. Sacn with the Cleaner as these good folks have said and run netstat -a to see if the server is still listening. I doubt it is, but it's better safe than sorry.

    Good Luck

  7. #7
    Banned
    Join Date
    Apr 2002
    Posts
    6
    Many thanks..

  8. #8
    Junior Member
    Join Date
    Jun 2002
    Posts
    6

    Lightbulb



    I tend to find the Symantec online utilities offer many boot programs for trojan/worm removal that do work.

    Try: http://securityresponse.symantec.com...ools.list.html

    They also offer tutorials for manually removing nasties.

    A reformat does not necessarily remove every file on the drive, especially binaries.

    Hope this might offer some help...

    \"The universal aptitude for ineptitude makes any human accomplishment and incredible miracle...\"

  9. #9
    Senior Member
    Join Date
    Jan 2002
    Posts
    883
    Did you do delete the primary DOS partition, then do an FDISK /MBR? After that create a new primary DOS partition and then reformat?
    The COOKIE TUX lives!!!!
    Windows NT crashed,I am the Blue Screen of Death.
    No one hears your screams.


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •