My Entire Computer Accessed Remotely w/o Permission... HELP

  • Thread starter Thread starter computerhell
  • Start date Start date
C

computerhell

Any help is greatly appreciated here!My laptop has been accessed by one
of two people I once trusted... Now my entire system & Event Viewer logs
show my User Account & my Admin have been redirected. A similar user
name was created to replace mine along with the Registry to delete these
changes.I have hundreds of records indicating the changes but no clue
where to go from here!The DOS window closes when i try "netstat" or any
other attempt to view system. I do have screen shots showing the remote
servers, etc I would like to not only clean up this mess but also to
reveal the coward! My ex-web designer or ex-bfriend... either way a mess
I must correctIf anyone wants to help a girl out feel free!


--
computerhell
Posted via http://www.vistaheads.com
 
Back up essential documents and settings, wipe the PC, reinstall Windows
from scratch, then restore your documents and settings. If the computer has
truly been compromised to the extent you believe it has been, this will be
the only way to be certain you have removed anything that anyone may have
put there.

--
Richard G. Harper [MVP Shell/User] rgharper@gmail.com
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/


"computerhell" wrote in
message news:computerhell.3a5tse@no-mx.forums.vistaheads.com...
>
> Any help is greatly appreciated here!My laptop has been accessed by one
> of two people I once trusted... Now my entire system & Event Viewer logs
> show my User Account & my Admin have been redirected. A similar user
> name was created to replace mine along with the Registry to delete these
> changes.I have hundreds of records indicating the changes but no clue
> where to go from here!The DOS window closes when i try "netstat" or any
> other attempt to view system. I do have screen shots showing the remote
> servers, etc I would like to not only clean up this mess but also to
> reveal the coward! My ex-web designer or ex-bfriend... either way a mess
> I must correctIf anyone wants to help a girl out feel free!
>
>
> --
> computerhell
> Posted via http://www.vistaheads.com
>
 
Once you have formatted and reinstalled, use the Programs below to help
protect.

http://www.avast.com/eng/download-avast-home.html

Avast Anti-Virus is Vista compatible (32bit and 64bit Versions), FREE,
auto-updating, and a low resources user of your computer.
And, only have 1(one) Anti-Virus installed / running on your computer at any
one time..
Conflicts may occur if you have more than 1(one).

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.5.2 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update once a fortnight.

http://www.javacoolsoftware.com/spywareblaster.html

SpywareBlaster 4.0 is a non-intrusive, FREE Anti-Spyware Program that runs
in the background.
Update it once a fortnight, and let it do its work in the background!

If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On/ Startup, and use UP and
DOWN arrow keys to get to Safe Mode, then hit ENTER.
RESCAN your computer with Avast and Spybot S & D while in Safe Mode.

--
Mick Murphy - Qld - Australia


"computerhell" wrote:

>
> Any help is greatly appreciated here!My laptop has been accessed by one
> of two people I once trusted... Now my entire system & Event Viewer logs
> show my User Account & my Admin have been redirected. A similar user
> name was created to replace mine along with the Registry to delete these
> changes.I have hundreds of records indicating the changes but no clue
> where to go from here!The DOS window closes when i try "netstat" or any
> other attempt to view system. I do have screen shots showing the remote
> servers, etc I would like to not only clean up this mess but also to
> reveal the coward! My ex-web designer or ex-bfriend... either way a mess
> I must correctIf anyone wants to help a girl out feel free!
>
>
> --
> computerhell
> Posted via http://www.vistaheads.com
>
>
 
THANK You both for your advice.
The odd thing here.. or not so odd... is that I have all the
adaware,spybot,etc on my system. The way the user Ids were configured
appears to the system as a typical user...
I will do the reinstall and steps you recommended as well

Any thoughts on tracking down the jerk with all this data I have
compiled?
computerhell~


--
computerhell
Posted via http://www.vistaheads.com
 
You would have to do as the others have suggested,
but on a new harddrive - saving the old one for
forensics.

Even so, it will probably be difficult and expensive to
track down anyone.

"computerhell" wrote in
message news:computerhell.3a6zgf@no-mx.forums.vistaheads.com...
>
> THANK You both for your advice.
> The odd thing here.. or not so odd... is that I have all the
> adaware,spybot,etc on my system. The way the user Ids were configured
> appears to the system as a typical user...
> I will do the reinstall and steps you recommended as well
>
> Any thoughts on tracking down the jerk with all this data I have
> compiled?
> computerhell~
>
>
> --
> computerhell
> Posted via http://www.vistaheads.com
>
 
In article ,
computerhell.3a5tse@no-mx.forums.vistaheads.com says...
>
> Any help is greatly appreciated here!My laptop has been accessed by one
> of two people I once trusted... Now my entire system & Event Viewer logs
> show my User Account & my Admin have been redirected. A similar user
> name was created to replace mine along with the Registry to delete these
> changes.I have hundreds of records indicating the changes but no clue
> where to go from here!The DOS window closes when i try "netstat" or any
> other attempt to view system. I do have screen shots showing the remote
> servers, etc I would like to not only clean up this mess but also to
> reveal the coward! My ex-web designer or ex-bfriend... either way a mess
> I must correctIf anyone wants to help a girl out feel free!

If you had a router/firewall in front of your PC they would not have
been able to get into your laptop without direct physical access to it -
having to install a remote control program or other.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
 
Back
Top