Page 3 of 3 FirstFirst 123
Results 21 to 23 of 23

Thread: I would like to know how i can.

  1. #21
    I think it would definitely be a trojan if they have hijacked your mouse and keyboard. One such of these iss Back Orifice 2000. With this they can send commands to your box, hijack control, or even reroute their data through your comp to another even without yuo knowing of it. You can get rid of these sorts usually with a goog Virus scanner which has been regularly updated, and if that still doen not work I seriously suggest to have a look in your registry under the "run" or "runservices" key which can be found on most comps in "hkey_local_machine/software/microsoft/windows/currentversion/ *run* or *runservices*.

    Invest in an Intrusion Detextion System like BlackICE from Network ICE. this will detect and block port scans, intrusion and other such unwanted activity. www.networkice.com

    And if you still cant do anything maybe stop using aim or get a different browser or just DONT USE WINDOWS if you are. Also you might try dropping to dos while you are connected and type in "netstat -a" i think it is. this will get you the ip addresses statuses and ports of incoming and outgoing data. Here you can see if someone is connected that shouldnt be. Or ithink another one is "arp" to do this.

    Hope i was some help. Keep trying.
    THEprophetMOSES

  2. #22
    I think it would definitely be a trojan if they have hijacked your mouse and keyboard. One such of these iss Back Orifice 2000. With this they can send commands to your box, hijack control, or even reroute their data through your comp to another even without yuo knowing of it. You can get rid of these sorts usually with a goog Virus scanner which has been regularly updated, and if that still doen not work I seriously suggest to have a look in your registry under the "run" or "runservices" key which can be found on most comps in "hkey_local_machine/software/microsoft/windows/currentversion/ *run* or *runservices*.

    Invest in an Intrusion Detextion System like BlackICE from Network ICE. this will detect and block port scans, intrusion and other such unwanted activity. www.networkice.com

    And if you still cant do anything maybe stop using aim or get a different browser or just DONT USE WINDOWS if you are. Also you might try dropping to dos while you are connected and type in "netstat -a" i think it is. this will get you the ip addresses statuses and ports of incoming and outgoing data. Here you can see if someone is connected that shouldnt be. Or ithink another one is "arp" to do this.

    Hope i was some help. Keep trying.
    THEprophetMOSES

  3. #23
    Antionline's Security Dude instronics's Avatar
    Join Date
    Dec 2002
    Posts
    901
    Yeah...it also sounds like a trojan to me too, or some sort of remote admin tool.
    Check out what ports you have in state LISTEN. If you dont intend to run any services at all, then configure the firewall to not accept ANY connections. If the trojan (if its is one) wants to go out, then the firewall should be set to not allow any outgoing connections on the port its listening on. Also try to get a trojan cleaner. www.webattack.com has a few nice tools for free download.

    Good luck

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •