[narl]

Hi there

Last night I was using my pc without any problems although I knew there was something up as the pc was quite slow and it wasnt a responsive as it was previous.

I use Zonealrm pro firewall and it has been working great, but last night I locked my PC and I watched the monitor for a minute and a password was typed into the password box but it was the wrong one, but the thing I find weird is that Zonealarm hasnt thrown up anything unusual.

So last night I cut the power to the modem and got the pc turned off right away, upon doing this it said "There are other users logged into this PC" etc.

Do you think that my computer has been compromised?

Then again having said that Zonealarm has blocked over 2000 attempts since it was installed about 8 weeks ago.

Also the other day the pc was shutting down alot, could possibly be linked.

[narl]

If anyone has a solution or an idea that would be great, using a laptop here at the moment and I feel degraded lol.

[macro_scoop!]

actually i recommend that u use a good antivirus to scan ur laptop ... AVG / Notron / Nod-32 / ...
maybe u got some backdoor or worm in ur hard drive ...

also , try not to open suspected* websites ... check ur running programs , run only the programs u need ... check if there is any useless toolbar and remove it ..

good thing u done when u removed the modem cable once u suspected a hacking attempt ... thats the best way to be safe from hacking ...

anyways , Microsoft is having bad days with current worms affecting windows OS ...

anyway i hope u remove any spyware in ur machine asap

Andy

[narl]

It's a desktop PC, I am using my mothers laptop at the moment.

For Antivirus I use AVG, just done a complete scan, done a spyware scan with spybot, adaware, malware and all have came back with the usual cookies etc. Now I just realised that Zonealarm wasnt logging the attempts. I think possibly this has been going on for about two weeks, possibly more..

I think what I am going to do is buy a hardware firewall and link the modem to it and leave it that way, also have Zonealarm on the pc doing what it is supposed to do.. Then again Zonealarm is meant to stop these type of attacks, the only thing I can think off is, it was happening before I installed it, then again the windows firewall was on all the time, so I am not to sure what it going on to be honest.

[1002richards]

Hi,
Would one of these free progs possiibly be of help?

http://www.techsupportalert.com/best...load-meter.htm

Richard

[mrss]

Originally Posted by narl

.

Do you think that my computer has been compromised?

Yes. Where there's smoke, there's fire, and you have flaming cinders popping out on the rug. LOL. The guy is trying to login as you watch.

You probably have a root kit or well entrenched Trojan that's allowing a remote user. As far this forum goes, you can post a hijack this log in the malware removal forum and wait in line for help.

Otherwise, if you have a recovery CD/partition for your PC and backups for all your apps and programs, reload the sucker, update windows to the latest security updates, and reinstall ZA

[perfume]

Dear narl,
Who's eavesdropping on your desktop? I put before you a very interesting article, since you've been targeted 2000 times in eight weeks! http://news.cnet.com/Whos-your-PC-ta..._3-281064.html

Dear 1002richards,
Thank you for the excellent and free software to monitor traffic! I've already installed NetMeter and BTW what are the Yellow spikes?

[perfume]

Dear mrss,
You've pressed the right button! How to prevent a similar attack happening in the future? AVG does not have rootkit detecting capability. MBAM (Bought), SAS(pro), Threatfire (Free or Pro), Panda's rootkit detecting software( very good at it's job) and THE HOBSON'S CHOICE--which firewall? Other Ideas on A-V?

OR LEAVE IT TO HIJACKTHIS?

[1002richards]

Originally Posted by perfume

Dear 1002richards,
installed NetMeter and BTW what are the Yellow spikes?

Sorry I don't know, some sort of temp peak perhaps?

[lunarlander]

Go to Panda ActiveScan and do a online scan. It has found some hacking tools that some hacker left on my PC before.