Security Breach

[iamchel]

So I think this is my first post on these forums but Ive just been lurking around for a month or two. Basicaly I have a problem and I dont know where to start.

Ive had my hotmail account for quite some time now and of course being young when I made it I filled it all in with silly information and fake addresses etc. I also had about 3 other hotmail accounts used just for registering to forums etc. All the account (4 of them) had the same password. Today as I come online it seems as though someone has gained access to my accounts and change the passwords. Only one of the accounts is still working and to top it all off my steam account isn't working either. Friends have tried on their computers and they still get the same results. Also my cousin went on steam today and it showed me as online at about 8:30 in the morning - which I wasn't.

Any ideas of what could have happened? Im pretty much at a loss of what I can do to get my stuff back since I cant possibly find out my security info for my hotmail accounts and the steam account is attached to one of them lol.

Thanks for any help. Also what should I do to protect myself besides not using hotmail and a poor password? Has someone gotten access to my computer somehow? Please help asp thanks!

Also I forgot to mention that I'm not sure if this is the right place to put this but please feel free to move it.

 

[blackangst1]

Could be alot of things. Hotmail anymore is tough to brute force hack into, so I would suspect someone who has access to your PC. Others in the home? Have you scanned for keyloggers? I would start there.

 

[iamchel]

nobody in my house would even know how to do that but that is why Im thinking it could be something like a keylogger because who knows what kinds of stuff they download. I forgot to mention I have avg free and windows defender while the windows firewall is disabled. Scanned with both and no problems found.

 

[blackangst1]

So you dont have a firewall in place? tsk tsk hehehehe. I honestly would do something like scan for rootkits specifically, and put a 3rd party firewall in place (assuming youre using XP? If using Vista the build in firewall can do it just fine). I would set the firewall very tightly so that nothing and I mean nothing can enter or exit (mostly exit) your PC without first notifying you. It's a PITA but you'll get a good idea of what kind of chatter you've got going on.

I would also suggest running a program called hijack this. There are other forums (dont think I can mention them although Im not sure the policy) where you can post your hijack this log and peeps will interprate it for you. I would start there.

 

[mechBgon]

It's definitely OK to mention other Forums, nothing wrong with that. :thumbsup: One that is well-known for expert HijackThis analysis is the CastleCops forum. Start here and read the Announcement threads, follow the instructions methodically and precisely, and do exactly what the expert helpers tell you to do (nothing more, nothing less).

 

[iamchel]

ok thanks for the help gentlemen.

 

[blackangst1]

Originally posted by: mechBgon
It's definitely OK to mention other Forums, nothing wrong with that. :thumbsup: One that is well-known for expert HijackThis analysis is the CastleCops forum. Start here and read the Announcement threads, follow the instructions methodically and precisely, and do exactly what the expert helpers tell you to do (nothing more, nothing less).

OK thanks mech...didnt know I like http://www.dslreports.com/forum/cleanup. The security guys are pretty sharp. I believe there is another mandatory checklist before you post a log...cant remember. But take a gander As mech mentioned castlecops is great also.