Guest computerhell Posted May 29, 2008 Posted May 29, 2008 Any help is greatly appreciated here!My laptop has been accessed by one of two people I once trusted... Now my entire system & Event Viewer logs show my User Account & my Admin have been redirected. A similar user name was created to replace mine along with the Registry to delete these changes.I have hundreds of records indicating the changes but no clue where to go from here!The DOS window closes when i try "netstat" or any other attempt to view system. I do have screen shots showing the remote servers, etc I would like to not only clean up this mess but also to reveal the coward! My ex-web designer or ex-bfriend... either way a mess I must correctIf anyone wants to help a girl out feel free! -- computerhell Posted via http://www.vistaheads.com Quote
Guest Richard G. Harper Posted May 29, 2008 Posted May 29, 2008 Back up essential documents and settings, wipe the PC, reinstall Windows from scratch, then restore your documents and settings. If the computer has truly been compromised to the extent you believe it has been, this will be the only way to be certain you have removed anything that anyone may have put there. -- Richard G. Harper [MVP Shell/User] rgharper@gmail.com NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/ PLEASE post all messages and replies in the newsgroups The Website - http://rgharper.mvps.org/ "computerhell" <computerhell.3a5tse@no-mx.forums.vistaheads.com> wrote in message news:computerhell.3a5tse@no-mx.forums.vistaheads.com...<span style="color:blue"> > > Any help is greatly appreciated here!My laptop has been accessed by one > of two people I once trusted... Now my entire system & Event Viewer logs > show my User Account & my Admin have been redirected. A similar user > name was created to replace mine along with the Registry to delete these > changes.I have hundreds of records indicating the changes but no clue > where to go from here!The DOS window closes when i try "netstat" or any > other attempt to view system. I do have screen shots showing the remote > servers, etc I would like to not only clean up this mess but also to > reveal the coward! My ex-web designer or ex-bfriend... either way a mess > I must correctIf anyone wants to help a girl out feel free! > > > -- > computerhell > Posted via http://www.vistaheads.com > </span> Quote
Guest Mick Murphy Posted May 29, 2008 Posted May 29, 2008 Once you have formatted and reinstalled, use the Programs below to help protect. http://www.avast.com/eng/download-avast-home.html Avast Anti-Virus is Vista compatible (32bit and 64bit Versions), FREE, auto-updating, and a low resources user of your computer. And, only have 1(one) Anti-Virus installed / running on your computer at any one time.. Conflicts may occur if you have more than 1(one). http://www.spybot.info/en/index.html Spybot Search & Destroy 1.5.2 is a very good, FREE Anti-Spyware Program. Download, install, update, and immunize your System with it. Then SCAN with it. Update once a fortnight. http://www.javacoolsoftware.com/spywareblaster.html SpywareBlaster 4.0 is a non-intrusive, FREE Anti-Spyware Program that runs in the background. Update it once a fortnight, and let it do its work in the background! If you happen to find a problem that you can’t uninstall / delete, reboot the computer, and go into Safe Mode. To get into Safe mode, tap F8 right at Power On/ Startup, and use UP and DOWN arrow keys to get to Safe Mode, then hit ENTER. RESCAN your computer with Avast and Spybot S & D while in Safe Mode. -- Mick Murphy - Qld - Australia "computerhell" wrote: <span style="color:blue"> > > Any help is greatly appreciated here!My laptop has been accessed by one > of two people I once trusted... Now my entire system & Event Viewer logs > show my User Account & my Admin have been redirected. A similar user > name was created to replace mine along with the Registry to delete these > changes.I have hundreds of records indicating the changes but no clue > where to go from here!The DOS window closes when i try "netstat" or any > other attempt to view system. I do have screen shots showing the remote > servers, etc I would like to not only clean up this mess but also to > reveal the coward! My ex-web designer or ex-bfriend... either way a mess > I must correctIf anyone wants to help a girl out feel free! > > > -- > computerhell > Posted via http://www.vistaheads.com > > </span> Quote
Guest computerhell Posted May 29, 2008 Posted May 29, 2008 THANK You both for your advice. The odd thing here.. or not so odd... is that I have all the adaware,spybot,etc on my system. The way the user Ids were configured appears to the system as a typical user... I will do the reinstall and steps you recommended as well Any thoughts on tracking down the jerk with all this data I have compiled? computerhell~ -- computerhell Posted via http://www.vistaheads.com Quote
Guest FromTheRafters Posted May 30, 2008 Posted May 30, 2008 You would have to do as the others have suggested, but on a new harddrive - saving the old one for forensics. Even so, it will probably be difficult and expensive to track down anyone. "computerhell" <computerhell.3a6zgf@no-mx.forums.vistaheads.com> wrote in message news:computerhell.3a6zgf@no-mx.forums.vistaheads.com...<span style="color:blue"> > > THANK You both for your advice. > The odd thing here.. or not so odd... is that I have all the > adaware,spybot,etc on my system. The way the user Ids were configured > appears to the system as a typical user... > I will do the reinstall and steps you recommended as well > > Any thoughts on tracking down the jerk with all this data I have > compiled? > computerhell~ > > > -- > computerhell > Posted via http://www.vistaheads.com > </span> Quote
Guest Leythos Posted June 10, 2008 Posted June 10, 2008 In article <computerhell.3a5tse@no-mx.forums.vistaheads.com>, computerhell.3a5tse@no-mx.forums.vistaheads.com says...<span style="color:blue"> > > Any help is greatly appreciated here!My laptop has been accessed by one > of two people I once trusted... Now my entire system & Event Viewer logs > show my User Account & my Admin have been redirected. A similar user > name was created to replace mine along with the Registry to delete these > changes.I have hundreds of records indicating the changes but no clue > where to go from here!The DOS window closes when i try "netstat" or any > other attempt to view system. I do have screen shots showing the remote > servers, etc I would like to not only clean up this mess but also to > reveal the coward! My ex-web designer or ex-bfriend... either way a mess > I must correctIf anyone wants to help a girl out feel free!</span> If you had a router/firewall in front of your PC they would not have been able to get into your laptop without direct physical access to it - having to install a remote control program or other. -- - Igitur qui desiderat pacem, praeparet bellum. - Calling an illegal alien an "undocumented worker" is like calling a drug dealer an "unlicensed pharmacist" spam999free@rrohio.com (remove 999 for proper email address) Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.