Hacker using p2p on my computer?

Hi, I was hoping someone could help me out....would it possible that I have a program on my computer (without my knowledge) that is allowing someone (hacker or whatever) to gain access and download files/programs through p2p networks? The reason I ask this, is: my AOL account got suspended in June, because AOL said I was exchanging copywrite material on a file sharing program....now at the time, I did have Kazaa- but I rarely download anything (only a few songs, once every few months)...so we got AOL put back on, and I got rid of kazaa...I then downloaded Limewire, and use it rarely as well...but a few weeks ago, AOL completely shut down my account- and the only info they could give me, was that on August 27, 2004 - I "apparently" downloaded material without permission, at 2:30a.m....now this is the weird part - yes, my computer was connected to the Internet, and limewire was running as well (but I did not download anything, the only reason why it was running is because it is on my "startup programs").....maybe, in June, I did download something- but I really don't know for sure, because when I found out- 2 weeks had past, so I couldn't remember....but I know 100% that I did not download ANYTHING on the latest date, Aug 27th...now I have lost my AOL account for good- the only way to get it back is by writing a letter and appealing the decision- but how can I do that? They can't supply me with anymore information (like if they could tell me the fileshare program that downloaded the material...or the "name" of the file....and what do they mean "I downloaded from someone else without permission?<--is someone downloading material through my I.P. or getting in my system & using a different p2p program?)

Basically, I'm just wondering, if people can download stuff and u not know it, through your Internet connection, or your PC? If so, does anyone know the names of these programs that I can look for, on my PC, to prove to AOL that someone else is doing the file downloads?

Also, I had a free trial of "Norton Firewall" for a few days, and while I had it, I had a few "prompts" a couple times, saying another I.P. was trying to connect to my computer...I could not get any more information on the IP trying to connect, other than the IP address- in which I did not write down, big mistake!

Any thoughts on what's going on???
How do I begin searching for an "invisible" culprit?
Thanks :rolleyes:

if it was on all night, someone could have downloaded something from you, in other words you could have uploaded a copyrighted item which is a bigger no no than downloading in legal point of view. so you might not of even downloaded anything but someone downloaded one of the songs you had previously downloaded, or 5 people may have downloaded part of that song from you, and that set off some flags at AOL. thats just a possibility though. i guess it is possible for a hacker to use your computer for a proxy, but thats rare, they'd rather use it for a ware server or put it in a network for DOSing something, not downloading things from kazaa.

I agree with DefTones; someone or some people could have connected and downloaded some copyrighted material from you since it seems that you leave your computer on and connected. All of these "file sharing" programs seem to leave a lot of open doors for anyone that has "marginal" scupules to do whatever they want. My advice, dump all the file sharing programs and when you are not using your computer, I would at least log off and possibly turn off your machine. This way you can track your time on the computer.

I am sure some of the more senior members could direct you to see if someone has actually installed a back door to your machine and find that "invisible" culprit

thanks for the replies...this still just confuses me...
I had maybe 10 music files (in my shared folder)...I asked AOL, how do they find out about this in the first place...they said that if someone downloads from me, and the person sees that the file is copywrited, they then call aol & make a complaint (and that's the only time AOL notices anything, then they track down the person responsible through IP- or something to that effect)...but the second time it happened, they said that I did the downloading without permission at 2:32 a.m....but I didn't do any downloading (who knows, maybe they meant someone uploaded from me- but the conversation didn't go far because I couldn't get someone that wasn't foriegn on the phone<--- not trying to be rude, but I could tell this call center was overseas and the ppl didn't have any idea what i was talking about when it came to technical questions)...anyhow, I just find It strange that this happened twice in a matter of 2 months-- other ppl I know have hundreds of music/video/software files on their PC's- and AOL has never cut them off....Why would someone go to the trouble of calling AOL if they download a music file from me? Do they expect the file not to have some kind of copywrites to it?....it just makes me wonder....if there's other file sharing going on that I don't know about, or if someone is just targeting me to shut down my account.....well I better go delete my 10 music files, since they are that big of a deal- ugh, I hate AOL now...

What, if any, anti mal-ware are you using ?

swat-it = http://swatit.org/

Quote:

---

Swat It is a Completely FREE program that scans your computer for Trojans, Worms, Bots and other Hacker programs. Swat It can detect and remove over 4000 different Trojan programs plus variants

---

AdAware = http://www.lavasoftusa.com/software/adaware/

Quote:

---

Ad-Aware is designed to provide advanced protection from known Data-mining, aggressive advertising, Parasites, Scumware, selected traditional Trojans, Dialers, Malware, Browser hijackers, and tracking components. With the release of Ad-Aware SE Personal edition, Lavasoft takes the fight against Spyware to the next level.

---

SpyBot S+D = http://www.safer-networking.org/en/index.html

Quote:

---

Welcome...
... to www.spybot.info, the home of Spybot-S&D, the best (according to PC World, PC Mag, ...) privacy software available!

---

If you don't run anything, try these.
They should find and neutralize almost everything out there.

If you DO run protection, it might help if you post your routine:
What do you use ?
How often do you update / use them ?
How many 'baddies' have you removed recently ?

Also details of your OS and PC set up can help, as your profile gives us nada.

My 2c:
You were 'used', not owned. As stated by deftones12, the 'bad lads' do more than compromise a P2P connection.

Although as you are connected 24/7 [by implication of your post]

Quote:

---

I "apparently" downloaded material without permission, at 2:30a.m....now this is the weird part - yes, my computer was connected to the Internet, and limewire was running as well (but I did not download anything, the only reason why it was running is because it is on my "startup programs").....

---

you COULD be a tempting target.

Solution:
Disconnect from the net when not using.
Unless it's vital. TURN OFF the PC when you retire for the night.
Start to pay attention to your system, learn what the security is for.

Quote:

---

I had a free trial of "Norton Firewall" for a few days

---

Doesn't bode well for the first question above ............

Get a firewall on PERMANENTLY.
Get Anti-Virus running, update it regular.
keep the above FREE tools on the system, USE THEM. Weekly at least. Update them weekly as well.

If at first you find you have a 'clean' set up. Go to 'safe mode' [F8 on boot] and run them AGAIN from there.

Post back when you have something to clarify, or just to say thank you .................

yes, thank you for the links...I already have AdAware & Spybot....I usually run them once a month....shortly before this whole thing happened, I had just downloaded Adaware (because Spybot usually detects about 40 files everytime-and after I ran it, I was still getting non-stop popups)...so I ran the Adaware & I remember it saying that it detected 867 files! I would love to have Norton Firewall perminently, but right now I cannot afford it (I'm not working right now because I'm taking 18 credit hours at school)....btw, I do run my computer for long periods of time- but it's usually never un-attended....that time @ 2:32a.m. I was actually at the computer & looking up info online....so the times that "these ppl" are possibley using my connection or I.P., I was un-aware, but more than likley @ the computer. I just wish there was a way to prove this, because I don't think AOL will take my word for it....but rest assured, once I can afford to make some purchases, I'll pick up Norton- I already planned on it, after I started useing it and seeing how well it works.

Sorry, I forgot to add:

Computer: Dell Dimension 8200
OS: Windows XP

http://www.antionline.com/showthread...hreadid=262022

A FREE firewall. There are others, Zone alarm, Sygate for example.

Get ONE and use it NOW.

Quote:

---

because Spybot usually detects about 40 files everytime-and after I ran it, I was still getting non-stop popups

---

Quote:

---

so I ran the Adaware & I remember it saying that it detected 867 files!

---

Dump ALL of your P2P S/W, and NEVER use them again...........
My Aunt had an unprotected W98 box running over a YEAR, and I thought it was amazing that I got 384 baddies from AdAware, plus a dozen from SpyBot.

You might have to SERIOUSLY consider re-installing your OS, that's a clean install, reset your partitions EVERYTHING. Jeez, 867 in a MONTH..............

Oh and one more thing:
Dont send me EMails EVER :D


[pong][gloworange]867
867
867[/gloworange] [/pong]
need a :drink:

[edit]
zone alarm:
http://www.zonelabs.com/store/conten...eeDownload.jsp

sygate:
http://soho.sygate.com/default.htm

LOL....are u sure?.....I'm prob. sending out 867 trojans daily! Thanks for the free firewall link, I'll definetly be downloading that....I don't have any links for you, but if u ever need a good virus or some popups, u know where to look!

Quote:

---

but if u ever need a good virus or some popups, u know where to look!

---

Spoken by the Master ..................

Hopefully others will post their thoughts on this, and whether it is advisable to re-install.

Remember:
If it is advised to re-install, it is not compulsory, but it would be a DAMN good idea.

[pong][gloworange]867[/gloworange] [/pong]

Let's see - you're an AOL user - that kinda clues me in that you're pretty new-ish, yes? So we start at the beginning. Everything is suspect. Don't open the email, even with aol's virii scan, unless you know FOR SURE who it's from, and even in those cases suspect it, and scan it yourself too. You can pickup trojans on aol just from clicking links in their chatrooms - that's an uber nono too. don't ever do it, nor links in IM's.

Yes, get the virus scanner, yes get the firewall. Fox is leading you down the right path telling you to repartition/reinstall the os too at this point. Jeez. 867? OUCH.

Luck to you man.

Not really new....I've had AOL for about 6 years...I never open e-mail, if I do not know who sent it (otherwise it gets trashed- never opened)...yeah, I don't ever use chat rooms, I just use message boards/forums, and I always right click once on "links" to identify the properties & web address.....wish I could find the person reasponsible & send them my gift wrapped 867 files:)

yes the spyware and 867 files is bad but i dont think thats what got you in trouble, simply uploading that stuff is enough to tick aol off and terminate your account. when i was stupid and 10 years old, i did a simple port scan and i couldnt log on the next day so i called aol and they said they had terminated my account indefinitely, so i had to make up some excuse for my mom 'n dad as to why we should switch to verizon or some other internet provider. so yeah aol is pretty anal about things you do. p2p works where people only download a segment from you and they get the other parts from other people, but thats when other people have the same file as you, so like 5 or even 10 people could of downloaded a 128k file from ya. but now im just repeatin myself from my first post. get a firewall like all those other smart guys said.

I'm with foxy on the clean install - goodness knows what else you ahve picked up along with the spyware! I once cleaned 189 pieces of spyware of a computer at my old work and getting all of them took me the guts of a day to be sure where gone so would be quicker as well as safer for you to format machine - lol

As for the free firewall am sorry but i wouldn't touch zone-alarm.....I use outpost [Link] have done for quite some time without problems - but I have had problems with Zonealarm and outpost is free as well ;) - but hey we could have a whole thread discussing which is better - heh

What I recommend you do is Format machine...wipe it clean OS everything!
and then before you connect to the internet at all - install Firewall (like outpost - free) install an AntiVirus (like AVG - also free) install Spybot S&D & Adaware and then start adding your programs in once you have them installed do a full scan of system with Adaware/Spybot to check nothing else came free with your progs ;) and your ready to go

If you normally leave machine on I would schedule your AVP to download updates while you sleep and also do a full system scan after just to be sure.

You might wanna get a good system monitor as well and just have it running in the background all the time checking on what programs are trying to install where.

hope that helps

v_Ln

thanks for all the help/links/info & everything :) .....you know, I thought about cleaning out windows & re-installing a while ago cuz this computer has accumulated so much junk- it's amazing. I think I will save that project for the weekend, because it's going to take me a while to save my programs & files onto a few cd's, and I want to make sure I don't forget anything important on my comp...I'll get the firewall & install it onto a disk, that way when I set up my internet again- it will already be there....as far as the aol is concerned, yeah it sucks and I can relate to you "Deftones12" - the AOL account belongs to my parents and brother as well, so I managed to screw them over in this mess. Maybe I can convince AOL to just delete my screen name, and have my parents talk with them & say I will no longer be useing the account- maybe they'll honor it? My friend made a SC name for me to use for free, as long as I want to....so for me, connecting to the internet is no problem, but it just sux that everyone else has to pay the price for it...But hey, someone hacked my brother's screen name 3 times this year- maybe I could just say that we think that's what happened....because I don't know if it was because of something someone downloaded, or if someone used my connection- I'm just gonna have to deny everything, cuz as anal as AOL is being about this, they have their minds made up & I am some copywrite pirate....oh well (btw, sorry about all my long posts, sometimes I don't know when to quit!)
Anyhow, thanks again- everyone- for all the reasponses...even though I haven't solved the "p2p & aol" problem, you guys have been very helpful with everything you have offered & all of your suggestions. Hopefully, by the end of the weekend, my system will be running smooth & free of garbage....
Valhallen- (or anyone that knows) that system monitor you were talking about, that runs in the background...are there free downloads of that anywhere? I have found that numerouse programs over the last few years have "magically" installed themselves on my comp-without my permission, or even any kind of notification...I think I really need something like that.
Thanks All! :)

I use TCmonitor to keep an eye on my registry - it comes free with The Cleaner
there are moe advanced ones which monitor different areas but thats all I have found I have ever needed - plus if something was popping up every 2 mins to tell me this file had been moved or that file had been created i think it would be disbled most of the time and would do me no good anyways ;)

just google for 'the cleaner' its a trojan scanner but comes bundled with TCmonitor

I use it, Outpost, AVG and good computing practice - and when i do weekly scans with Adaware & Spybot the only thing they pick up on is cookies (which i have to have enabled for forums etc) so is doing an alright job ;)

v_Ln

The Advice from Valhallen and foxyloxley is sound and I would make the same recommendations. Especially given the number of files AdAware detected!

867 - man that's quite a few, don't think I've ever seen, heard, or even been told rumours of people with that much crap on their system! lol

It may be wise to setup several accounts on your XP system and only use the admin account when you want to install. Do not, I repeat, do not use an administrator or equivalent account to surf or for general work. Have a look at Pooh sun tzu's tutorial ....
http://www.antionline.com/showthread...hreadid=255353

Other than that, I would recommend the line you are taking, i.e. downloading the Firewall, Anti-Virus, registry monitor, adaware / spyware removers of your choice and their updates and storing them for after a clean install.

Note: It would be wise to install at least the firewall and Anti-Virus right now! Like foxeyloxley, I can not stress this enough. Get protected! This should be your highest priority. Save a clean install for when you have time and don't rush it!

Spend some time reading relevant tutorials on AntiOnline. Here's a couple of links to start you off...

Security Tutorials:
http://www.antionline.com/forumdispl...?s=&forumid=59

Basic Internet Security:
http://www.antionline.com/showthread...hreadid=260373

Hope these help to point you in the right direction. Here's to your weekend activity.

Oh! As for AOL - may be they should be educating their customers with regard to safe computing and good security practices.

Dump them and get a better ISP! I never have and never would recommend them, not even as a last resort! ;o)

This post illustrates the fact that more people need to be intune with computer security. I know a lot of people that don't even know what AV they are using and whether or not it has the current definitions.

Summer-You seem to have a lot of crap on your machine, maybe take some of the advice here and teach the rest of the users that are using the computer. There are a lot of responses about reformatting the HD, might want to talk that over with the rest of the users and make sure that anything they have saved is either burned to a physical medium or they will lose it. I think that reloading the OS is excessive, but that is my opinion. Clean the machine and learn from these experiences. There are certainly enough tools around to clean things up.

Quote:

---

This post illustrates the fact that more people need to be intune with computer security. I know a lot of people that don't even know what AV they are using and whether or not it has the current definitions.

---

I couldn't agree more. It would be great if other people, with little security knowledge were made to read this!

Quote:

---

There are a lot of responses about reformatting the HD, might want to talk that over with the rest of the users and make sure that anything they have saved is either burned to a physical medium or they will lose it.

---

An excellent observation! I missed that one. Must have been the shock of 867 files found by AdAware! lol

Quote:

---

I think that reloading the OS is excessive, but that is my opinion. Clean the machine and learn from these experiences. There are certainly enough tools around to clean things up.

---

I can see your point of view. Yes it is possible to clean it up. A re-install, however, affords the opportunity to configure the security settings and make changes, like a partition for the Operatiing System and a partition for the installation programs, etc.

Certainly, I hope more people than just summerbreeze learn from this.

Yeah, no worries on the computer "Users"...the computer is my own, so right now I can beat it into shape any way I please! I promise to update after the weekend, to let u guys know how it went;)....my comp's less than 2 years old, but it runs so horrible...very slow at times...I have managed to stop some programs at startup to keep it running smoother - but at this point, I really think "re-installing" the OS is a must....ad-aware has found 2 trojans in the last month (in addition to the now famouse "867 spyware files") I also had all my search engines hi-jacked about 2 months ago as well, took me 2 weeks to finally get rid of it....it's just getting really ridiculouse if u ask me.....who knows what other kind of junk is hidden on this computer, and I don't want to take my chances with it....for me, it's worth the trouble to clean this all out, that way *hopefully* I'll never have to deal with this again....thanks again, I'll keep u updated!

before you reformat get a firewall 'n virus scanner burnt on a cd to install before you get online so you dont get caught with a worm that scans for IP, i've had to deal with that before...tryin to get online and download a firewall or the windows patch for my brother and the blaster or one of those variants would hit before he could suck down the download...after 6 or 7 reboots we got it...so you might wanna do that. you might not have to if you have cable or something but its a good idea. i dont know how knowledgable you are with computers but make sure when you reinstall you format and reinstall...not just reinstall over the top.