!URGENT! I think i'm being hacked!

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

tm37

Lifer
Jan 24, 2001
12,436
1
0
Do you have multiple users in your setup and If you do when switching between acounts do you log off or just switch?
 

db

Lifer
Dec 6, 1999
10,575
292
126
3-finger | task manager | applications. (or processes).
See wha't cookin'..
 

Keego

Diamond Member
Aug 15, 2000
6,223
2
81


<< I wonder if he's still online??
rolleye.gif
>>



oh he is, I can still see all his files! :D ;)
rolleye.gif
 

db

Lifer
Dec 6, 1999
10,575
292
126
go to one of the files they're supposedly in, right-click and disable file sharing--see what happens
 

MrCodeDude

Lifer
Jun 23, 2001
13,674
1
76
Take out your NIC card.. Start backing up important files.. Virus Scan.. Uninstall anything you've recently installed... Don't reboot until you really need to..
-- mrcodedude
 

LocutusX

Diamond Member
Oct 9, 1999
3,061
0
0
You know what? I don't think you are being hacked. Those "blue-colored" folders are probably compressed folders (apparently in Windows NT compressed folders are a different color - can't confirm because I'm on FAT32 right now and when I was NTFS I never tried compression).

I'm also guessing that when you go to security properties and it lists the various "rights" all of your local users have for that particular file, you think it's listing users who are currently using that file?

Trust me, if NET FILE and NET SHARE don't show up anything, something else is the problem. Also, you did not indicate whether this behaviour persisted after you unplugged the NIC cable/modem line (get on another computer).
 

OutHouse

Lifer
Jun 5, 2000
36,410
616
126
Pull the plug on your internet connection, stupid.

Bwhahahah viper you crack me up!
 

Nemesis77

Diamond Member
Jun 21, 2001
7,329
0
0
Use Linux ;). Sorry, couldn't resist...

Like others said, install firewall, disconnect from the network, run antivirus, see if you find any trojans. And you only use the admin-user? Create a user for everyday use, and use that. Give the admin more complex password.

In UNIX/Linux, you never EVER use root (administrator in Windows) for everyday use! And that's a good rule to live by, even in Windows.
 

aphex

Moderator<br>All Things Apple
Moderator
Jul 19, 2001
38,572
2
91
I have a feeling it wasnt hackers....
 

Derango

Diamond Member
Jan 1, 2002
3,113
1
0
Even if you only have one user in win2k, there are GROUPS of users that exist automaticly called Administrators, Power Users, Users, etc. I doubt you're being hacked.

Yes, I just checked, all of those are the default file permissions for files in win2k. THIS IS NORMAL!! YOU ARE NOT BEING HACKED! Zone alarm isn't detecting anything because there's nothing to detect.

Your windows directory permissions are set so that certain groups (IE Administrator, Power Users, SYSTEM and users) have certain rights. That SYSTEM group is for the operating system's use, so that it can get in and get the files it needs from its own directory. Don't delete these groups or permissions! You could cause a heck of a lot of trouble!
 

SuperSix

Elite Member
Oct 9, 1999
9,872
2
0


<< Pull the plug on your internet connection, stupid.

Viper GTS
>>



Harsh.. Did you have to aff the "stupid" part on there?
Having a bad day?
 

BooneRebel

Platinum Member
Mar 22, 2001
2,229
0
0


<< You know what? I don't think you are being hacked. Those "blue-colored" folders are probably compressed folders (apparently in Windows NT compressed folders are a different color - can't confirm because I'm on FAT32 right now and when I was NTFS I never tried compression).

I'm also guessing that when you go to security properties and it lists the various "rights" all of your local users have for that particular file, you think it's listing users who are currently using that file?

Trust me, if NET FILE and NET SHARE don't show up anything, something else is the problem. Also, you did not indicate whether this behaviour persisted after you unplugged the NIC cable/modem line (get on another computer).
>>



Agreed. NT & W2K both offer the option to display compressed files in an alternate color, the default color is blue. Now, if you have one of MS's wonderful scheduled tasks to 'optimize' your computer, you may have a task running on your box that is compressing files that haven't been used in x number of days. That would especially make sense that it's just image & text files that you don't ever touch.
 

iamwiz82

Lifer
Jan 10, 2001
30,772
13
81


<<

<< You know what? I don't think you are being hacked. Those "blue-colored" folders are probably compressed folders (apparently in Windows NT compressed folders are a different color - can't confirm because I'm on FAT32 right now and when I was NTFS I never tried compression).

I'm also guessing that when you go to security properties and it lists the various "rights" all of your local users have for that particular file, you think it's listing users who are currently using that file?

Trust me, if NET FILE and NET SHARE don't show up anything, something else is the problem. Also, you did not indicate whether this behaviour persisted after you unplugged the NIC cable/modem line (get on another computer).
>>



Agreed. NT & W2K both offer the option to display compressed files in an alternate color, the default color is blue. Now, if you have one of MS's wonderful scheduled tasks to 'optimize' your computer, you may have a task running on your box that is compressing files that haven't been used in x number of days. That would especially make sense that it's just image & text files that you don't ever touch.
>>



Those are compressed files. If you did any disk cleaning, and selected compress files, it will do that. I have 6 blue(compressed) files in C:\.
 

Descartes

Lifer
Oct 10, 1999
13,968
2
0
Yet another manifestation of assimilated media propaganda.

The media speaks of anthrax, suddenly every powdered substance is anthrax, even the white chalk on a chalkboard.

"Hacking" has had quite a bit of media attention over the past year, suddenly every single thing that happens to an end-user results in, "I think I'm being hax0red!!" There have been countless threads of users saying "I've been hax0red!!", when in fact if they used even the slightest bit of common sense, they'd realize that weren't the case.

If you're being hacked, the changing the colors of the icons next to your files would be the last goal on an attacker's mind.
 

LocutusX

Diamond Member
Oct 9, 1999
3,061
0
0
It's funny how all these n00B's switch from Win98 to WinXP and never bother learning the first thing about all of the "differences" between the two operating systems. Or perhaps it's MS's fault for not encouraging people to learn.