i've been hacked

Quote:

---

Originally posted here by u2petre
he also mentioned that a firewall always let some ports stay open.... so i think he's using one of them..?

---

Sounds to me like bullshit, because that definately isn't true. However if you want to check your ports you can either download fport from www.foundstone.com or use netstat -aon and then view PID under task manager and compare the PID between the two to see what ports are open and what applications are opening them. Although just because they are open doesn't mean they can be see by people on the otherside of your firewall. The results of the portscan will be useful..

Peace
HT

A firewall works the other way around... by default, all ports are (should be) closed, and YOU choose which ones to open...

Sounds to me like a KaZaA-problem :)

A decent firewall won't let any ports stay open apart from ones which you've set to be open. I think that's unlikely. I would think that if it's your kazaa list he seems to know about it's probably a kazaa thing. Maybe he knows a lot about how the kazaa network works and can get past the fact that you don't share any files/has a prog to do it for him.

ac

[edit] you have to remember that the morpheus code was available for download off their site for a while before morpheus changed. And since morpheus used the same network as kazaa for quite a while, it makes sense that ppl would have found some vulns... [/edit]

sygate has found all ports (1 to 1024) closed....?

Try port 1214...

I probably shouldn't share this, but a Google search would have turned up the same info for anybody that was interested......

http://cert.uni-stuttgart.de/archive.../msg00416.html


EDIT: granted, this is an older post.... but there are other similar posts that are more recent.

I don't believe that works anymore, groovicus. I've just tried it on myself while running kazaalite, and I get a connection refused error which leads me to believe that the "bug" has been fixed.

ac

I removed your post, u2petre, since you posted the "hacker's" IP. I can't edit your post, so here it is without the IP:

Quote:

---

but i think these backups from my pc will show up at school tomorrow...to bad.

btw the ftp adres from that hacker is ***.***.***.***

can i do anything to stop him er get back at him?

---

Getting back at him would be illegal, btw :)

i know, (but what he is doing is also illigal...)
if i uninstal kazaa, those ports are closed again?

Quote:

---

Originally posted here by u2petre
i know, (but what he is doing is also illigal...)

---

Two wrong don't make a right. If you have his IP Address, then report him to his ISP, but don't resort to illegal methods, they'll only get you in trouble.

HT

how do i see which isp he has?