targeted by hacker

partybot · 10-07-2007, 05:50 AM

Hi i am am certain that for the last 7 months that i am being targeted by a hacker, long story. I first noticed just after my browser crashed that i had over 100 connections to a local server to yahoo messanger. Then pc crashed and had to format to get internet connectivity. Then durning windows update that the same server ip 203.59.140.13 was updating windows and the same ip was updating antivirus also most of my web browsing traffic routing through same ip. If i block that ip through peer gardian then no pages open that route through that ip. After the second format i installed windows defender and at random just after an antivirus update that my pc would show error popups that i am certain are windows defender protecting my operating system. I even put in a brand new hdd installed windows then during update first minute updates through windows site then after a minute updates through 203.59.140.xxx and that was with nothing on my pc other than antivirus(bitdefender) and xp. I now have a new isp bought a new modem did a format and same problem. Often my video game steam engine gets connectivity attacks that i fix by retraining my firewall. Like i said long story but its driving me nuts i am certain that the problem is some sort of automated attack any help would be much apprecaited thanks.

chauffeur2 · 10-07-2007, 07:45 PM

Greetings partybot, Welcome to TSF!

I recommend that you read this article, "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

Good Luck with it.

Kind Regards,

partybot · 10-11-2007, 11:47 AM

thanks dave i followed the steps and posted the results but i havnt had a reply after 72 hours so i bumped it, here is the link to my post of deckards scan and thaks for your help

http://www.techsupportforum.com/secu...ml#post1118655

chauffeur2 · 10-11-2007, 09:17 PM

Hi partybot,

As mentioned previously, please be patient, as the HJT Help Forum and the Security Analysts are generally very busy, due to the number of requests that they receive.

Bumping the thread will not help, as the analysts will presume that you have been attended too...just be patient, is all that I can add.

Kind Regards,

partybot · 10-30-2007, 10:46 AM

hi there hasnt been a reply to my hijack this post for a little over 3 weeks i think i must have fell off the list after i added a bump and a comment to my post do u think i should redo the scans and do a new post?

chauffeur2 · 10-30-2007, 09:56 PM

Quote:

Originally Posted by partybot

hi there hasnt been a reply to my hijack this post for a little over 3 weeks i think i must have fell off the list after i added a bump and a comment to my post do u think i should redo the scans and do a new post?

If it is 3 weeks since your last HJT scan/report, YES definitely do another scan and submit it in your current thread in the HJT Help Forum.

10-07-2007, 05:50 AM	#1 (permalink)
partybot Registered User Join Date: Oct 2007 Posts: 17 OS: vista ultimate 32 sp1	targeted by hacker Hi i am am certain that for the last 7 months that i am being targeted by a hacker, long story. I first noticed just after my browser crashed that i had over 100 connections to a local server to yahoo messanger. Then pc crashed and had to format to get internet connectivity. Then durning windows update that the same server ip 203.59.140.13 was updating windows and the same ip was updating antivirus also most of my web browsing traffic routing through same ip. If i block that ip through peer gardian then no pages open that route through that ip. After the second format i installed windows defender and at random just after an antivirus update that my pc would show error popups that i am certain are windows defender protecting my operating system. I even put in a brand new hdd installed windows then during update first minute updates through windows site then after a minute updates through 203.59.140.xxx and that was with nothing on my pc other than antivirus(bitdefender) and xp. I now have a new isp bought a new modem did a format and same problem. Often my video game steam engine gets connectivity attacks that i fix by retraining my firewall. Like i said long story but its driving me nuts i am certain that the problem is some sort of automated attack any help would be much apprecaited thanks.

10-07-2007, 07:45 PM	#2 (permalink)
chauffeur2 Manager Emeritus Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,180 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: targeted by hacker Greetings partybot, Welcome to TSF! I recommend that you read this article, "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum. (Simply, click on the coloured links to be re-directed.) *Please ensure that you create a new thread in the HiJackThis Log Help Forum; not* back here in this one. When carrying out The 5 Steps*, if you cannot* complete any of them for whatever reason, just continue on with the next one until they are all completed. However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds. Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can. Good Luck with it. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!

10-11-2007, 11:47 AM	#3 (permalink)
partybot Registered User Join Date: Oct 2007 Posts: 17 OS: vista ultimate 32 sp1	Re: targeted by hacker thanks dave i followed the steps and posted the results but i havnt had a reply after 72 hours so i bumped it, here is the link to my post of deckards scan and thaks for your help http://www.techsupportforum.com/secu...ml#post1118655

10-11-2007, 09:17 PM	#4 (permalink)
chauffeur2 Manager Emeritus Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,180 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: targeted by hacker Hi partybot, As mentioned previously, please be patient, as the HJT Help Forum and the Security Analysts are generally very busy, due to the number of requests that they receive. Bumping the thread will not help, as the analysts will presume that you have been attended too...just be patient, is all that I can add. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!

10-30-2007, 10:46 AM	#5 (permalink)
partybot Registered User Join Date: Oct 2007 Posts: 17 OS: vista ultimate 32 sp1	Re: targeted by hacker hi there hasnt been a reply to my hijack this post for a little over 3 weeks i think i must have fell off the list after i added a bump and a comment to my post do u think i should redo the scans and do a new post?