Results 1 to 3 of 3

Thread: Have i been Hacked

  1. #1

    Have i been Hacked

    I got on Tonight and the computer is running at 100% and i checked my Security logs and it shows a bunch of high Threats so of them reads the following

    The file/folder/drive INDEX.MAP has been changed!

    Filename: INDEX.MAP
    Location: C:\WINDOWS\system32\wbem\Repository\FS

    Last known properties:
    Size: 556 bytes
    Owner: BUILTIN\Administrators
    Date Created: 11/29/01
    Time Created: 18:28:02

    Date last modified: 02/24/04
    Time last modified: 05:32:57

    Date last accessed: 02/24/04
    Time last accessed: 05:32:57

    Current properties:
    Size: 556 bytes
    Owner: BUILTIN\Administrators
    Date Created: 11/29/01

    The file/folder/drive FS has been changed!

    Filename: FS
    Location: C:\WINDOWS\system32\wbem\Repository

    Last known properties:
    Size: 0 bytes
    Owner: BUILTIN\Administrators
    Date Created: 11/29/01
    Time Created: 18:27:46

    Date last modified: 02/24/04
    Time last modified: 05:32:58

    Date last accessed: 02/24/04
    Time last accessed: 05:32:58

    Current properties:
    Size: 0 bytes
    Owner: BUILTIN\Administrators
    Date Created: 11/29/01
    Time Created: 18:27:46

    Date last modified: 02/25/04
    Time last modified: 15:27:54

    Date last accessed: 02/25/04
    Time last accessed: 15:27:54
    and
    The file/folder/drive edb.chk has been changed!

    Filename: edb.chk
    Location: C:\WINDOWS\system32\CatRoot2

    Last known properties:
    Size: 8192 bytes
    Owner: BUILTIN\Administrators
    Date Created: 11/29/01
    Time Created: 10:21:31

    Date last modified: 02/22/04
    Time last modified: 18:35:36

    Date last accessed: 02/23/04
    Time last accessed: 17:23:41

    Current properties:
    Size: 8192 bytes
    Owner: BUILTIN\Administrators
    Date Created: 11/29/01
    Time Created: 10:21:31

    Date last modified: 02/24/04
    Time last modified: 18:17:22

    Date last accessed: 02/24/04
    Time last accessed: 18:17:22

    More Information:
    Size Difference: 0 bytes
    LANguard S.I.M. Incident ID:2307
    '

    what could this be. thanks

  2. #2
    Banned
    Join Date
    Apr 2003
    Posts
    3,839
    Im not sure and too tired to reaserch it, but windows logs these kind of changes. I dont think you have been hacked. But for secuirty measures, you still should do this:

    Download a firewall.

    http://www.free-firewall.org/
    http://www.iopus.com/guides/free-firewall.htm
    http://www.homenethelp.com/web/howto/free-firewall.asp

    then download a AntiVirus.

    http://www.grisoft.com/us/us_dwnl_free.php
    http://www.thefreesite.com/Free_Soft...irus_freeware/

    then download a trojan cleaner.

    http://www.moosoft.com/products/cleaner/download/

    then download Anti Spyware and Adware.

    http://spybot.eon.net.au/index.php?l...&page=download
    http://www.tucows.com/preview/236049.html

    and download this:

    http://www.softpedia.com/public/cat/...10-17-69.shtml

    then read some tutorials in the Secuirty Tutorials Section of Anti Online.

    http://www.antionline.com/forumdispl...?s=&forumid=59

  3. #3
    OK thanks i think the problem was my sister decided to print like hell and it over loaded the cache, this morning the computer was back to normal and started printing stuff. thanks. Jason

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •