I have a hacker and can't get rid of him!

Someone has hacked into every computer I have and stolen files and taken up house-keeping to the degree that sometimes I can't get into my dial-up, because he is in there and my ISP does not let that many users on at once. In one computer, I opened at e-mail with no attachment and in about 5 minutes, my computer crashed. I have hundreds of IP numbers but they are very misleading and I can't get anyone to listen to me. How do I prove that the person I suspect is actually the person who is doing this? I'll take all the help I can get.

perhaps if you told us in more detail what your problem is...

You are mirroring my experience - hacker activity reported to FBI, Secret Service and local authorities withoun result to date. I have logged over *8800 incursions in about a month (many on dial-up to slow the idiot down. i have been *****ing this clown for 6 months and have archived about a dozen hard drives with record of his activity for law enfocement use, if anyone is interested. The current Mcafee firewall (V6 ) does a good job of detecting and archiving hacker activity, but the Ip-ban mechanism is readily defeated by this hacker (he "un-bans" banned Ip's at will)
Your description of Denial of Service occured here with MSN - dsame scenario. Hacker was posting *000+ KB files on the MSN screen name I lost access to, in what appeared to be a webpage complete with image regions, but no text was discernible to WinXp (some odd form of HTML ?? requiring an attachemnt reader type of program to decode. HAcker files occupied perhaps 50 % of a 50 Mb email region until deleted.
Hacker is sending virii (over a dozen types identified to date including MyDoom and Netsky in several variants & close to the date of public knowledge of the particular infection, so he is close to the authors of the virii) using my email addresses, but the email is not visible as having been sent from my machine and email legitimately sent by me does NOT contain any virus code (curious eh).
Hacker seems to sense any attempt to read email on AOL and to a lesser extent MSN and has used Microsoft computers in Vancouver, Wa to probe my machine on weekends (Microsoft is awa re and hunting).

Routers, Antivirus / Firewalls, XPupdates pose little impediment, as he will do an end-run around any protection in less than * hours.
This guy is potentially quite destructive and dangerous (no kid and with potential stealth comm abilities) and in need of law enforcement action to aprehend and prosecute asap.
These events occur 24/7 and appear to have a "human element" behind the key***rd - as evidenced by delays and hesitations typical of someone in thought. At log-in, there is a variable delay - usually about 40 seconds, but can go to 2-* minutes, indicative of an alarm and response scenario (?). Just an observation
Anybody with a similar plight - the apparent place to report is the Secret Service, as they have a 7 page form that can be dowloaded, filled in and faxed to them as a report mechanism
I strongly s***est all affected do so in rapid fashion.

[email]tjbruckner@aol.com[/email] and [email]tjbruckner@msn.com[/email]

Available to law enforcement 24/7

Hey my name is Nick.I have same problem as you man!My PC was under hackers attack too much times - especially by viruses.ALL MY IMPORTANT DOCUMENTS WAS STOLEN - I MEAN COPY OF ALL MY IMPORTANT DOCUMENTS WAS STOLEN.AND TODAY SOMEONE WRITE FROM MY CHATNAME IN GERMAN CHAT STRANGE THINGS - SUCH AS "I HATE JEWS" AND SOMETHING LIKE THIS.I AM JEW - AND I WAS REALLY SUPRISED HOW IT CAN POSSIBLE TO WRITE FROM MY NICKNAME STUPID THINGS - I EVEN DIDN'T SAW HOW WAS THE TEXT TYPED IN TEXT FORM!THERE WAS NOTHING - ONLY JUST WORDS FROM MY NAME!THE ADRESS OF THIS CHAT IS [url]http://www.anarchie.de[/url]
I JUST WAS AT THIS CHAT SOMETIMES - SOMETIMES THERE ARE REALLY NORMAL PEOPLES WITH WHICH YOU CAN TALK ABOUT ANYTHING.BUT TODAY WAS SOMETHING STUPID - MAYBE IT WAS SECURITY SERVICE OS UKRAINE [url]http://www.ssu.gov.ua[/url] or MAYBE THAT WAS HACKERS FROM ISP FARLEP
[url]http://www.dn.farlep.net[/url] OR MAYBE IT WAS HACKERS FROM USA,EUROPE,JAPAN - EVEN MAYBE THAT WAS GUYS FROM FBI [url]http://www.fbi.gov[/url] or from PENTAGON [url]http://www.pentagon.mil[/url]
I DON'T KNOW WHO WAS TYPING FROM MY NAME IN THE CHAT ROOM OF THE [url]http://www.anarchie.de[/url] website - BUT ONE THING I KNOW EXACTLY SUCH INCIDENTS MUST BE STOPED,DISCRIMINATION MUST BE STOPED!AND ADMINISTRATORS OF THIS WEBSITE SHOULD CARE MUCH ABOUT HACKERS AND FREEDOM OF WORD - THEY MUST HAVE RULES OF CHAT SYSTEM AND KICK WHO BRAKE THIS RULES!PLEASE I TALK TO ANYONE WHO CAN HELP ME - LETS STOP THIS FUCKING DISCRIMINATIVE SHIT CHAT!
THE ADRESSES OF ADMINISTRATORS OF ANARCHIE.DE WEBSITE ARE:
inetnum: 62.245.*68.64 - 62.245.*68.*5
netname: EDVBERATUNG-NET
descr: EDV Beratung Huber
country: DE
admin-c: BH***-RIPE
tech-c: BH***-RIPE
status: ASSIGNED PA
mnt-by: MNET-MNT
changed: [email]markart@m-net.de[/email] 20020*07
source: RIPE

route: 62.245.*28.0/*7
descr: M"net Telekommunikations GmbH
descr: Germany
origin: AS8767
mnt-by: MNET-MNT
changed: [email]vierke@m-net.de[/email] 20020828
source: RIPE

person: Benedikt Huber
address: EDV Beratung Huber
address: Franz-Josef-Str. *0
address: 8080* Muenchen
address: Germany
phone: +4* 8* **0 7*6 7*
fax-no: +4* 8* *40 *8* 0*4
e-mail: [email]bhuber@bhuber.de[/email]
nic-hdl: BH***-RIPE
mnt-by: MNET-MNT
changed: [email]markart@m-net.de[/email] 20020*07
source: RIPE

inetnum: 62.245.*68.64 - 62.245.*68.*5
netname: EDVBERATUNG-NET
descr: EDV Beratung Huber
country: DE
admin-c: BH***-RIPE
tech-c: BH***-RIPE
status: ASSIGNED PA
mnt-by: MNET-MNT
changed: 20020*07
source: RIPE

route: 62.245.*28.0/*7
descr: M"net Telekommunikations GmbH
descr: Germany
origin: AS8767
mnt-by: MNET-MNT
changed: 20020828
source: RIPE

person: Benedikt Huber
address: EDV Beratung Huber
address: Franz-Josef-Str. *0
address: 8080* Muenchen
address: Germany
phone: +4* 8* **0 7*6 7*
fax-no: +4* 8* *40 *8* 0*4
e-mail:
nic-hdl: BH***-RIPE
mnt-by: MNET-MNT
changed: 20020*07
source: RIPE




answer section
name type result
68.*68.245.62.IN-ADDR.ARPA.
PTR
host-62-245-*68-68.********.m-online.net.


authority section
name type result
*68.245.62.IN-ADDR.ARPA.
NS
ns*.m-online.net.

*68.245.62.IN-ADDR.ARPA.
NS
ns2.m-online.net.


additional section
name type result
ns2.m-online.net.
A
8.*.*8.2*2.IN-ADDR.ARP

Simple rules,

if you suspect a hacker or other intrusion, disconnect your PC from the network.
Then scan for any trojans/viruses.
Next totally harden the firewall, i.e. delete all the exisiting rules and get the thing to prompt you for any inbound/outbound activity.

Then find another isp who offers more protection.

u silly people lol

ok everyone lissen, i need help with this thing, i have a hacker on aim and he stole 5 of my screen names, he slowed my computer up big time of what he is doing to my aim, i want him off my sn and fast, can someone who has aim IM me on my screen name HellJumper*05 . thanks

LOL

MY HACKER STEELS MY FILES PUTS THEM IN THE RECYCLE BIN THEN DELETES THEM FOR GOOD. HE SLOWS MY COMUTER DOWN AND STOPS MY INTERNET CONNECTION SOMETIMES.

to keep a hacker out is to go to windowsupdate.com and get every update possible for ur comp, then download a port scanner. go to a site like whatismyip.com or ipmonkey.com and get ur ip adress. use the port scanner on ur ip to see what ports are open. if a port is open and you dont absolutely need it, go into ur firewall settings and close that port. to find out what runs on a certain port, just go to google and type in "port " then the port number and search. hope this clears things up.

[url]http://www.iana.org/assignments/port-numbers[/url]

That is a pretty nice listing of port numbers and their use.

Lol.. Guys There is no such thing as an easy removal of a virus or trojan, it is not possible for anybody to remove an infection from your computer remotely or giving you all exact directions.
My advice, give up WinXP, Win2000, or Win200* or the mf LongHorn, as it is siply an open door to your computer, due to the RPC stuff, nobody still know how many of potential exploits still exist. Change for ME it still works for me just fine, Plus it allows to have two antiviruses on one pc.
To remove the virus from your system with *00% reliability, FORMAT the system drive, thats the only way to be sure (please note that all the data on your computer is going to be lost, so make a back up on to a CD, and you would also have to install Windows again). The new versions of viruses, kloggers and trojans are developed by the hour, so the format c: is the only way to be sure.
Install the clean version of WinME OS, download ALL of the current updates from Windowsupdate at microsoft.
Install Norton AntiVir 2004 with all updates, or better still Norton Internet Security
Install McAfee virusscan 8.0 or later, take the updates from [url]www.mcafee.ru/downloads.[/url]
If you still on XP Buy! and Install PrivacyKey***rd - cool stuff (only for winXP) its anti-keylogger, I have tested it on *00+ keyloggers and other spyware, none of the things I typed were logged, so now I am not worrying about some of my passwords anymore. [url]www.bezpeka.biz[/url] - they also have other anti-spyware products.
Install and configure with highest level of security any Firewall, Norton personal Firewall, or Zone Alarm are one of the simplest to configure
Stop using Outlook, either go to the Bat, or use web interface such as Hotmail they have been patched up to the neck.
Stop saving passwords and try to remember them by heart, change them monthly!!
Stop saving anything from Internet, this is the easyest thing to get infection.
Stop opening any unknown attachment to you, including pictures.
Backup all your important files on a weekly basis.
If you do all this you have 80% chance to survive the next 2-* months with no infections.

When somebody has you once again format c: and et cetera et cetera...
Once you have done it in full by yourself, it is going to be easier and easier next time... Good Luck

Last week all my document 2GB disaperared from my hard drive, i suspect it may have been a hacker.

For those who lost their very important documents, get a program from internet to recoverdeleted files, i have one with crack if someone need it. with that program, i got back most of my documents, it works thou some of them were very damaged.

If you are using a dial-up connection, disconnect.
Download a firewall at some friends place, and burn it out on a CD.
I recommend zone alarm ([url]www.zonelabs.com[/url])
Install the firewall, and connect again.
If you have broadband, simply TURN OFF your router and get a firewall.
If "your" hacker still bothers you, strike back!
Get a new isp, so that he(/she) does not get your ip.

Turn off your computer and go for a walk.

I have this same IP trying to get into ports *028 thru *044. As soon as I start up and about every 2 to * hour intervals. IP# 66.***.**2.204. Contacted my DSL technician, says not from them. I am running Mcafee AV ver8 and Firewall Plus, also running my connection through a Netgear Router to the Westell DSL modem. (WIN2000). He can't get in, but it's really driving me nuts trying to find out who this idiot is. It's the only IP that's been able to get through to my Firewall in past * weeks, so he's persistant. I have him blocked on the Banned IP list. I've run an Arins WhoIs search, and done a trace route through windows and a commercial program, and the only info I can get, is it is originating from Austin, Texas. I have and can send a complete updated trace route list if someone would care to check this out for me. I have been looking for two weeks on an answer to this. No reply form Gov. offical sites where I have reported this, but not sure if it's a threat for them to be concerned about.
Any info from anyone, let me know. eme @ [email]letsgetanewname@bellsouth.net[/email]
Thanks
Bungiman

hey i might sound stupid, but what do u do with a stolen ip exactly? is there a special program hackers use to get in the comP?

Hi, people!

In all your situations hackers, as I understand, use your logins and password. All this happens because:
*. you open unknown attached to email documents with spies;
2. don`t use anti-keylogger software;
*. don`t use firewall...

You see, if some spy (keylogger) installed on your computer, may be hacker can receive all your keystrokes. That`s why you need anti-keylogger and firewall. Anti-keylogger blocks key***rd interception (logins, passwords etc.) and firewall blocks sending of other important information.
I use Anti-keylogger 5.0 (from [url]www.anti-keyloggers.com[/url]) and ZoneAlarm 4.0 (from [url]www.zonelabs.com[/url]) and still have no problem with hackers.

cya!

Lets be serious, in regards to the original question the individual more than likely has a mem resident virus that spits out on reboot, then executes various commands like the good old blaster reboot.

No hacker’s would bother targeting a home user with, pardon the expression, retrieval of useless data. Arriving in on an ip stream is reserved for probably a hand full of people on the planet, if someone thinks they can do it id be interested to learn :) Its more than likely some friend who dropped a BO on you, either way it’s a simple fix.

Solution; disconnect from the net | Disable System Restore (WinXP) | reboot in safe mode (F8)| run virus scan in safe mode.

Reboot | Download critical updates for Windows XP / *X at the winupdate site [url]http://v4.windowsupdate.microsoft.com/en/default.asp[/url] | install only critical updates and patches | Reboot.

Chances are all your cold symptoms will have ceased.

Oh yeah, don’t forget to re-enable system restore ;)

Couldn't have said it better myself!

It dont matter what you do if they wont you they will get you. they can just run ((A))program and go thu your firewall like it wasnt even there and you wont know a thing, and kick you off the net and turn off your computer and at the same time give you a bad virus that you need to repartition all of your drives.. trust me. thats all i need to say about that......L@@K if you like to get back at the a hole well here is the name of that program (primedius.exe) play it cool rem . dont piss this this person off he mite know more than you....he he

Yesterday, i left my coffy as i walked into an other room. When I came back IT WAS GONE!!!


i suspect a hacker...

hackers dont hack to mess up files and delete your shit, in fact they just do it for fun, why would they want to deleate ur files? the only time hackers hack is when there is a reason to, i.e store somthing on your computer that they dont want on theirs, and anyone who is on dial up with hacker problems STFU hackers dont want 56k shit, hackers go for more *0MB --> *00MB servers not shitty 56k PC's so turn ur comp on, update ur trojan, virus shit and stop fuking crying plz and if all else fails unplug ur comps and never plug them in agin

you lousy noobs. make sure you always have a firewall and the right ports open so nobody can come into you computer. And 2 most important thing is get a scanner program like spybot, or adaware to scan for virues. Also a great popup blocker and something that watches for hackers at all time is historykill 2004. But most importanly download the windows updates.
Oh and all the programs i told you about you can download them from download.com
and if you want to im me my account name is robyou02

test

Ok first of all Firewalls and AV and sweepers are good to keep kids out.
For a hack I take control of your operating system, and fake key files.
So when you check if i'm there every and I mean EVERYthiong says I'm not.

I make win task manager not see my hidden files.
i can hide file in your free space or on your hard drive I just mark sectots as bad and put my stuff in there.

The trick is, your firewalls and AV and sweepers aere no working for ME.

I own your operating system.
Now if you use some thng from a floppy or CD I have not taken that over yet and It won't lie to you,

using something from the net or storage has a chance to catch me.

So up daiting your Xp and adding fire wall after I am already there is a joke.

If you follow all the rules, amd have a fire wall and av and sweepers,
I can still walk right in.

If you have a router and a fire wall it just takes me longer.
If your using a good proxie then I have some real problems.

But I can search the web for your little posts looking for your email adr and then pull you Ip from logs...

So unless you use it ALL the time i will find you.
And tere are some BAD prozies that leak.

Teh kid that was arrested in Germany for the worm, was only *6, yes they do stupid things. like mess with your head.

Don't store passwords on your system and run periodic checks.
You can't keep me out but you can spot me.

bob

DID THIS GUY JUST HAVE A **** LEARN HOW TO SPELL YOW ****...

[B]Edited by Data:Post some thing useful, let alone swear. [/B]

The final solution for keeping hackers out:
Turn OFF the computer, and keep it off.

Get a macintosh running linux and without a modem... chances of being hacked are close to 0.0000000000000000000000000*%

[url]http://dday.tx-shells.net/Flash/plan-*.loves.Spyroaway.swf[/url]

Go here, easy tutorial how to get rid of hackers.

hehe, nice link dude..... a bit too gay for me tho...

at [url]www.snapfiles.com[/url] in the freeware section there are some files you can find to help example adaware, spybot, trojan removers, firewalls, and more,,,, check it out :)

Why don't you just turn off your internet then run all the programs like Adaware & Spybot S&D, trojan remover, AV software, install a GOOD firewall a anti-keylogger making sure that they are all updated with the very latest updates. Then turn off your cable modem (If your on dial-up then you get a new IP every time you connect and hacker don't want shitty 56k anyway they want no less then a T* connection 56k is useless to a hacker unless it's just someone YOU pissed off just trying to get back at you) and by that I mean turn it off at the wall so when you turn it back on you get a new IP addy hacker promlem fixed and if that don't work trace he's IP and report the sucker to his ISP (his IP addy will be logged in your firewall)

lol noobs, just disconnect your pc from the internet and put a firewall on your pc

Yea everybody can go on about noobs but everyone starts off as one. Anyhow, jokes aside. Lotsa good and bad (IMHO) s***estions here. There was a guy s***esting to reformat your HD (to get ridd of virii) and to back up your data beforehand. Now common sence tells me that would be silly. If someone has a virii reformatting and then putting back stuff you had on an infected PC poses a direct threat to your new "shiny" system. Turning the system restore back on is a bad practice too. Untill Microsoft fixes this I'd s***est keeping it off at all times. As for hackers and "easy" removal of them. That's a bit of a joke. You will NEVER block everyone out. Script kiddiez and unexperienced noobs you might be able to block but if someone REALLY wants to get into your PC (for whatever reason) s/he will. On the side note, I remember reading someone say that nobody would target ya home PC 24/7. WRONG, since most of the big corporations have hardened up systems where intrusion is more challenging in times of need one WILL resort to targeting home PC's. Use of tools such as iroffer and Serv-U paired with Radmin (or DameWare) and firedaemon is all one needs (besides a specially configured scanner). All theese tools are LEGALLY avaliable. And none will make your AV scream VIRII and ALOT of roots will kill well known processes (behind the scene) effectively rendering your AV useless (the taskbar icons will remain there most of the time untill you move your pointer over them). Once a "hacker" is in s/he can easilly make theese tools let him/her know when you're on. Of course s/he can do anything s/he desires once the PC is "rooted". You go into one of the better warez channels (irc.rizon.net for example is FULL of theese) and take a look around. *00's of bots sering all kinds of illegal (pirated) stuff without their users knowing. Now if that's not targeting home PC's 24/7 I don't know what is. Theese can be esilly changed and un-rooted and a different package installed alltogeather, and example would be the "mighty" agbot aka phatbot which forms the core of ALOT of the botnets around. This would be a major step up of course since this thing can do anything from serving to DOSing unsuspecting users and all with a simple indirect command such as !start ddos <ip> <duration> On the last note, hackers will not hack into your PC to destroy data or steal pointless stuff such as your adult movies or e-mails (although ****** card details adresses and DOB's with names might be a juicy target) but nowadays there's more and more hackers that feast on easy way to spoof...

I know there'll be ones who will have different opinnions but take causion executing s***estions into actions as some might harm you more than help (including my s***estions).

[QUOTE][i]Originally posted by PJ Reed [/i]
[B]Someone has hacked into every computer I have and stolen files and taken up house-keeping to the degree that sometimes I can't get into my dial-up, because he is in there and my ISP does not let that many users on at once. In one computer, I opened at e-mail with no attachment and in about 5 minutes, my computer crashed. I have hundreds of IP numbers but they are very misleading and I can't get anyone to listen to me. How do I prove that the person I suspect is actually the person who is doing this? I'll take all the help I can get. [/B][/QUOTE]

Easy....
*) reformat your hard drive
2) reinstall your windows operating system
*) reinstall any other software you want
4) install firewall
5) install antivirus software

your nightmare is over.

Easy....
*) reformat your hard drive
2) reinstall your windows operating system
*) reinstall any other software you want
4) install firewall
5) install antivirus software

your nightmare is over.



That sounds like a nightmare to me..:)

or just: STOP TAKING PEOPLE SERIOUSLY

for all the one who are in troubles here ...
I think the problem comes from the seat-key***rd interface.
Try to find such an interface that knows a minimum about computers, and it should solve your troubles.

can ne body tell me how to get rid of a hacker usuing my screenname on AIM?