Windows Legacy OS forum

General discussion

I have an unknown person who takes control of my computer

by crossfirefilms / November 20, 2007 3:52 AM PST

I am running Windows XP on a Gateway GM5084 Media Center, and for over eight months, I've been having to deal with what I believe are hackers. I have reinstalled my system, both destructive and Partial, a number of times and still haven't got rid of them. Yesterday (11/19/07), after my last reload, my username and Administrator access rights were suddenly changed from the Owner/Administrator to just someone who has limited access. I don't know what my user name is because there isn't a Welcome screen.
I haven't been able to find them under "Users" in the Control Panal. Unfortunately, the Control Panal itself disappeared as of last night. The closest I've come to Identify them is when I ran a quick scan as soon as I knew something was wrong, whereby the name BUILDIN/ADMINISTRATORS appeared.

If anyone has experience with this or has a new suggestion, I'd be all ears.

Thanks

Discussion is locked
You are posting a reply to: I have an unknown person who takes control of my computer
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: I have an unknown person who takes control of my computer
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
First thing to ask
by Jimmy Greystone / November 20, 2007 4:02 AM PST

First thing to ask is do you have any sort of firewall running? If you don't have at least the XP firewall running when you install XP, it can be compromised within minutes of being connected. Much faster than you could ever hope to download and install all the necessary security updates.

Another question that has to be asked, is there ANYTHING about what you're doing that might bring this about? Using any pirated software, including the operating system itself, visiting any questionable sites (porn, hacker, warez), anything like that? How about file sharing programs such as Kazaa, LimeWire, DC/DC++? You can lie, but then it's all the harder for us to help you.

Finally, do you have any kind of virus protection installed? If yes, is it up to date?

Collapse -
Re: First thing to Ask
by crossfirefilms / November 20, 2007 5:03 AM PST
In reply to: First thing to ask

Thank you for asking but I am running McAfee Security Suite and Have mostly unable to visit any websites that I want to. It seems that the I dig into what thing is doing, it literally stops ir and will close pages and put me on the Gateway homepage, which I hate.

I'm sure that there were minutes when the firewall was but it seems like something has been planted in my registy that protects itself and alerts the rest as to location.

Collapse -
unknown person who takes control of my computer/
by billzhills / November 20, 2007 5:49 AM PST

Did you use a back-up application or just burn your files to a Disk?

Does the issue repeat itself if these Back-ups are not used?

You state.....

over eight months, I've been having to deal with what I believe are hackers

Who has access to this system ?

Eight months of attacks sound like an inside job.
(unless it is your back-up disks)

Ever consider over this time period to password the Administrative account (known only to you). Using this account only for install of applications and a User account for Internet access?

Bill

Luck

Collapse -
I would do the following.....
by tallin / November 20, 2007 6:57 AM PST

I would run a HJT SCAN and post it to the following to be analysed.
http://forums.whatthetech.com/Welcome_New_Members_t34502.html

Then I would run a PCPitstop scan and follow the prompts to learn how to keep your computer fast and clean.

Please Run the PCPitstop Full Tests, here:
http://www.pcpitstop.com
Note: Vista users with UAC must first Right-click IE - Select "Run as Administrator"
Register and create a password
Accept the ActiveX component to allow your machine to run the Full Tests
Registering and accepting the ActiveX are both SAFE and FREE.
Full Tests is the first item in the left hand column of that page.

The Full Tests take less than 5 minutes for most machines.
Post the entire URL link information back here http://forums.pcpitstop.com/index.php?s=7e72f6c827cdcd9702c379fb73446a7c&showforum=19 into this Forum thread.
TechExpress is the last item on the list in the yellow box in upper right area of any Results page.

Note: Vista users, please close your instance of IE "Rrunning as Administrator" after you are finished reviewing your Results.

Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

Does BMW or Volvo do it best?

Pint-size luxury and funky style

Shopping for a new car this weekend? See how the BMW X2 stacks up against the Volvo XC40 in our side-by-side comparison.