secure But still being Hacked

I have just purchased a new hard drive and installed windows XP pro on it. I have downloaded all the updates and installed them all. I also have 3 firewalls and i am running Norton 2003. But was wondering if there is a way to check if there is someone connected to my PC. I think there is people in it daily because with 3 mins. of me being on the net my CPU usage is at 90% and above for ever. It is running like there is others connected.

So i was wondering if there is just a way to see who is connected to me and kick them off or disconnect them...?

Ty

What 3 firewalls ? I know in Norton PW you can see every connection(IP and port number) and terminated it !

start with netstat -a and see the connections to and from your computer. Do this when you have no apps open, and start from there.

Did you check for spyware/adware/trojans/viruses/worms and whatnot? I don't think having 3 firewalls is neccessary ;).

A router and Norton Personal Firewall has been working pretty well for me, and NAV 2k3.

3 Firewalls running at once? Are they all on this same box? That's not only a resource hog, but it is not a good practice to run multiple firewalls, simply because they will all want to deal with the same packets at once.

Try running fport from foundstone.com or tcpview from sysinternals. But my guess is that the firewalls are wasting your resources.

If you are running 3 software firewalls, I am surprised that your system runs at all, not that it uses 90% of CPU.

You should only be running one, the same with interactive AV applications.

If you did not have a firewall running when you connected to the net, then you could well have been infected in the first 10 minutes or so.

Check your running processes, that should tell you what is using the CPU.

Cheers

Also check out Advanced Administrative Tools from http://www.glocksoft.com . The tool has a network monitor which will show you something similiar to netstat but in a GUI and something you can play around with.


[offtopic]
Look at the bottom of the page and see how many people have "Am I being Hacked" as the tittle of their thread :D...Just an observation.
[/offtopic]

the 3 firewalls are

XP firewall enabled.
Internet connection firewall.
and Outpost.

[edit] Jro5linux is my brother...this is how i know all his firewalls[/edit]

Other than the fact you are running 90%+ CPU what evidence do you have that implies you are being hacked....... If you have none then you are almost certainly chasing your tail.

Ok Follow the advice given: (I add a clarification)

1/ turn off the M$ Firewalls.. XP firewall and ICS firewall (aren't these the same?)
2/ run TCP View this is to see what has handles on your tcp and udp ports.
3/ My recommendation is to run process explorer (sysinternals) to see what is running on your box..this is a more detailed view over Taskman.. This may give you an idea on the what is useing the CPU..
4/ If nothing suspicious above.. do a remote scan of your hdd ( that is either by sticking your hdd in another machine and doing a "report"scan or by using the AV scann with BartPE Boot CD (you have to make this yourself)

more questions:

What browser are you useing?
What Virus scans have you done?
HAve you scanned for Adware/Spyware parasites?
HAve you checked the Firewall Logs?..I am sure outpost creates logs


Cheers

BTW: could your problem be similar to what I have asked about here:
http://www.antionline.com/showthread...hreadid=261475

you may need to do a bit of testing.. I certainly am not finished checking the causes of my firefox problem....

And basicly my post was a long winded way of asking the question from TS..

Quote:

---

the 3 firewalls are

XP firewall enabled.
Internet connection firewall.
and Outpost.

---

According to Agnitum, the current version of Outpost isn't compatible with Windows XP SP2. While I run Outpost Pro without any problem, I would highly recommend turning of the Windows firewall because there may be a conflict there.

As for the CPU, it sounds like it's either spyware (which others have suggested), though I'm leaning towards a legitimate process that's causing the problem. Do you have a pop-up blocker of any kind? I know I had a version of AdSubtract which used up to 90-95%. I uninstalled it, re-installed it and it worked great. Since you know that the CPU is going up to 90% usage, you should know what's causing it. Go to Task Manager (CTRL+ALT+DEL) and check the Processes tab to see exactly which process is using all of your resources. Then figure out if it's a legitimate or illegitimate resource and go from there.

AJ

Lets see pretty much agreed 3 firewalls are not a good idea but to check what process is using 90% of your resurces just do a ctrl+alt+delete and go to the task manager button then to the running process tab and look for the running process. If you are running Symantex Norton AV if memory serves me their product gets wacked out running live scans now and then and will peg a CPU which usually required a re-install of their product.

First off get rid off one third party firewall, then it sounds like you need to get control of your running processes, first turn off anything that auto-updates.....these updates can be done manually, also tweak your services with the aid of below link:

http://www.blackviper.com/WinXP/servicecfg.htm

First I would like to apologize for 1 being new and not totally informed about this site and 2nd.. if this is not the right place to post this..
There is a website called games.com which is owned by Atari. when u go to the site.. at the bottom of the 1st col, if u click more games it take you to a page with all the games listed. The last being Yahtzee. if you go into the yahtzee site there are 2 rooms specifically the room called the cove. This room is being hacked consistantly. if u want to set a table for a game the max is 4 people.. the hacker can set the table for 16 players. Hacker is also able to hack into players actively playing, manipulate them, boot them out, not only boot them out of the game, room, website.. but to the extent where they can't even get their computers back up and running for a day or 2. To add insult to injury, these hackers take on a screen name, give themselves mega points and sit in the lobby chat room and boast about what they can do to people and dare them to try and stop them. Atari is aware of this as numerous people have called them about it including myself, I had also spoken with their legal department because the foul language was unbelieveable and kids play that site also. As far as I can tell Atari has taken no action regarding this matter because it continues. This has been going on for a good 6 months.

The last incident was yesterday to a person who already downloaded windows xp service pack 2. Any information you can provide would be greatly appreciated as to how these people are able to do this and how the players can protect themselves.. thank you

If I have posted this in wrong place and need to post it somewhere else.. please let me know that too. "confused"