Please Help! Am I being hacked?

2DaysAway · 06-20-2008, 05:16 PM

I just recently noticed after having downloaded a couple software applications a few days apart from one another - I'm on Windows XP, home PC, broadband connection - that when the apps registration form pops up, an alternate email address "autofills" in that cell of the form.

Although I had never seen the email address before, I recognized the name as it was the first and middle initial and last name of a co-worker and the email suffix was this co-worker's online dot.edu address. The second application I downloaded (tonight) fully "auto-filled" in this co-workers name AND email address into the registration form.

I work on my computer almost every evening and every weekend and have downloaded NUMEROUS applications and have seen NUMEROUS registration forms that autofill my name and/or email address but never anyone else's information until last week.

I ran a full scan for all or any parts of this person's name and email address on my system and nothing was found. To ensure that this person had not used his school email at work I scanned my work email, archived and all, and nothing was found.

This person has been in my home before albeit over a year ago and for no substantial length of time. I don't recall his ever having been on my computer for any reason.

Am I being hacked and, if so, how can I PROVE it? This is someone in a management position who is not a big fan of mine. Would there be something on my system or in my registry that would show up? I can find no other situation online that sounds remotely similar.

I can secure my system fine - but right now I'm more concerned with catching a bad guy.

PLEASE HELP ME IF YOU CAN!

FYI - so far netstat has not been beneficial but I don't know many commands - am currently using netstat -o -a -n 30

Thank you in advance.

chauffeur2 · 06-21-2008, 12:33 AM

Greetings 2DaysAway, Welcome to TSF!

If you believe that your computer has been hijacked, I suggest that you please read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

Good Luck with it.

Kind Regards,

06-20-2008, 05:16 PM	#1 (permalink)
2DaysAway Registered User Join Date: Jun 2008 Posts: 1 OS: Windows XP	Please Help! Am I being hacked? I just recently noticed after having downloaded a couple software applications a few days apart from one another - I'm on Windows XP, home PC, broadband connection - that when the apps registration form pops up, an alternate email address "autofills" in that cell of the form. Although I had never seen the email address before, I recognized the name as it was the first and middle initial and last name of a co-worker and the email suffix was this co-worker's online dot.edu address. The second application I downloaded (tonight) fully "auto-filled" in this co-workers name AND email address into the registration form. I work on my computer almost every evening and every weekend and have downloaded NUMEROUS applications and have seen NUMEROUS registration forms that autofill my name and/or email address but never anyone else's information until last week. I ran a full scan for all or any parts of this person's name and email address on my system and nothing was found. To ensure that this person had not used his school email at work I scanned my work email, archived and all, and nothing was found. This person has been in my home before albeit over a year ago and for no substantial length of time. I don't recall his ever having been on my computer for any reason. Am I being hacked and, if so, how can I PROVE it? This is someone in a management position who is not a big fan of mine. Would there be something on my system or in my registry that would show up? I can find no other situation online that sounds remotely similar. I can secure my system fine - but right now I'm more concerned with catching a bad guy. PLEASE HELP ME IF YOU CAN! FYI - so far netstat has not been beneficial but I don't know many commands - am currently using netstat -o -a -n 30 Thank you in advance.

06-21-2008, 12:33 AM	#2 (permalink)
chauffeur2 Manager, TSF Articles Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,059 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: Please Help! Am I being hacked? Greetings 2DaysAway, Welcome to TSF! If you believe that your computer has been hijacked, I suggest that you please read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum. (Simply, click on the coloured links to be re-directed.) *Please ensure that you create a new thread in the HiJackThis Log Help Forum; not* back here in this one. When carrying out The 5 Steps*, if you cannot* complete any of them for whatever reason, just continue on with the next one until they are all completed. However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds. Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can. Good Luck with it. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!