[wjaberle]

I was told today that my computer is being used as a host by someone. Can somebody tell me what this means and is there a way to track this? I've only had this computer a couple of months and bought it used. I was also just told that the windows xp pro i am running is a illegal copy. Can i buy a real copy? Thank you for any help and info.

[Byteman]

Hi, If there is a backdoor trojan or some serious other malware, then combined with the non-Genuine copy of XP Pro, I would say this information in a thread I worked recently, should help you get a legitimate copy of Windows...especially check Post#12 in this thread:

http://forums.techguy.org/windows-nt...occurence.html

There is information on how to tell if the copy is not genuine, or is...

how to get a legal copy through Microsoft, or just buy one

If you do get the Genuine Advantage Kit, you would be best off to reinstall the entire system fresh.

We have a great deal of help available through sites that can show you a tutorial on reinstalling, what to do before and after, things like that.

I am not sure exactly what anyone told you about the computer being a "host", are you having problems with spam bouncing back to your Inbox, that you did not send?

Your computer could be infected, and some of these infections turn the computer into a spam-sending robot.... or an infection agent, sending copies of viruses or other malware through email, Instant Messenger programs, etc.

We are in a tight spot to try and help you---- rules exist to just provide information on getting a Genuine copy of Windows, rather than to clean up an invalid copy.

Formatting the hard drive and reinstalling should eradicate any hosting going on, as far as someone who had hacked into your computer. But, you need help with keeping them out.

And>> the most vulnerable point is just after a complete reinstall, without proper guidance and knowing what to do, you will no doubt quickly be reinfected.

[wjaberle]

I have ordered the genuine windows xp pro and do not wish to clean up the infected version. Unfortunatly i didn't buy my computer at a store. It was private sale thru an ad in the paper. I'm just worried that the info i have had on the computer may be comprimised. The computer tech i took it to, showed me hidden files that i didn't know about on there. He told me if i didn't know about them, someone may have been using my computer as a host computer. Is there a way i can track this back to whomever. The computer tech said he might be able to but it won't be cheap. I can't really afford to spend hundreds to find this out. Please let me know if there is a program i can buy or download.

[royalprince]

Hey Wjabele,

The new files which were shown to you may be leftovers of any software or anything...
Once we are not acquainted with files we can't be sure what are they.

However here is a problem to your solution.......
When connected to internet
go to start > run > cmd (type in the cmd)
a new window should pop up
enter this command
netstat -a

this will show all the incoming and outgoing connections from you pc.

right click and select mark and highlight all information and press enter to copy

then you can paste it here so that we can tell you if you are being used as a host or not.

the solution will be to use a firewall. it will block all incoming connections from unknown users and will only allow trusted connections.
you dont have to spend anyting for this....

Regards,
Royal Prince

[Byteman]

I doubt that you will be able to track anyone down- most hackers cover their tracks very well, using spoofed IP addresses, and other devious ways of hiding their identity.

You are welcome to try.

What I would do is change every password you use that is related to online financial activity- any credit cards account, bank account, every site that you have an account with like Hotmail, PayPal, eBay....anything that would pass information that can be used to do anything with money.

Changing the computer passwords should also be done. Be sure that you keep track of what you are changing them to-

Use a different, clean computer to do anything financial, and do not sign into your accounts from anyplace until you have changed the passwords. Also, check your accounts for fraudulent activity, missing money, etc.


By the way, Windows normally runs with system files, set to hidden, that is, you have manually adjust the settings to "unhide" these, but in most cases, these are quite normal. It's not possible for me to say they all are, in your case.... and if you are not going to scan for malware, we won't be able to tell if any of the hidden files are the normal type, or a rootkit, which hides itself deeply. Rootkits can be found and removed. I understand that you want to try and see if you can find if someone is hacking into your computer and I can only wish you luck.

If anyone is found, just by an IP address, and is using an ISP, most of them will refuse to give you any information. You can trace an IP address to a city or country, but that's about it.

If you found any theft, and reported it to the police, perhaps they could help you find the person responsible, but often they are in foreign countries and untouchable.