Overclock.net › Forums › Software, Programming and Coding › Networking & Security › I just got hacked!!! Help
New Posts  All Forums:Forum Nav:

I just got hacked!!! Help

post #1 of 33
Thread Starter 
Will try to explain... I was watching 1977 Star wars on my TV and my wife said:" Look someone using your computer!!!". I ran to table and saw mouse movements on firefox security page, than clicked saved passwords.. This moment I pressed power button.. moment later i restarted in safe mode without network. Don't know what to do now.
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
post #2 of 33
Now you uninstall all the crazy stuff you have installed by clicking yes countless times.. then you run your trusty AV and Malware etc etc programs to clean it up.

If it was me, I'd dump it and do clean OS install but that's me cause I know I don't have crazy crap here and for that to happen....

Change your passwords on computer and router/modem.
Just a 'puter
(18 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 6700K ASUS Maximus VIII Hero iGPU thanks to Nvidia 970 3.5GB Corsair Vengeance LPX CMK8GX4M2B3200C16 
Hard DriveHard DriveCoolingCooling
Samsung 950 PRO 512GB Crucial M4 256GB RX360 V3 Koolance CPU-380I 
CoolingCoolingOSMonitor
Koolance RP-452X2 Reservoir Koolance PMP-450 12V Variable Speed Pump Windows 10 Pro x64 benq XL2411Z 
KeyboardPowerCaseMouse
logitech G510 Seasonic X-760 Corsair 800D Mionix Castor 
AudioAudio
Creative Sound Blaster X-Fi Titanium HD DT 990 Premium 250Ohm 
  hide details  
Reply
Just a 'puter
(18 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 6700K ASUS Maximus VIII Hero iGPU thanks to Nvidia 970 3.5GB Corsair Vengeance LPX CMK8GX4M2B3200C16 
Hard DriveHard DriveCoolingCooling
Samsung 950 PRO 512GB Crucial M4 256GB RX360 V3 Koolance CPU-380I 
CoolingCoolingOSMonitor
Koolance RP-452X2 Reservoir Koolance PMP-450 12V Variable Speed Pump Windows 10 Pro x64 benq XL2411Z 
KeyboardPowerCaseMouse
logitech G510 Seasonic X-760 Corsair 800D Mionix Castor 
AudioAudio
Creative Sound Blaster X-Fi Titanium HD DT 990 Premium 250Ohm 
  hide details  
Reply
post #3 of 33
turn off compter and do reasearch..
probably change password on non infected network.
find out security hole hacker was using, THAN:

Here is how to backup non infected data with unetbootin prepared Lubuntu
format hard drive.
post #4 of 33
Offhand, I'd say you should 'nuke and pave" that system. Since you could observe your PC being remotely controlled, it sounds like something like TeamViewer or VNC was being used. Seriously, you have no idea what info they got. Reload that thing, beef up your firewall and be more careful "out there".
 
Kids-PC
(12 items)
 
White Heat
(20 items)
 
CPUMotherboardGraphicsRAM
Intel Core i5-2400 - BX80623I52400 ASUS P8P67 GIGABYTE GeForce GTX 550 Ti - GV-N550D5-1GI G.SKILL Ripjaws X + Turbulence II 
Hard DriveHard DriveOptical DriveCooling
80 GB Hitachi SATA II 500 GB Seagate SATA II LITE-ON 24X DVD Writer - iHAS224-06 CORSAIR CAFA50 
OSMonitorPowerCase
Microsoft Windows 7 Ultimate Edition 64-bit Acer G205HVbd Rosewill HIVE Series HIVE-650 NZXT Source 210 S210-001 
CPUMotherboardGraphicsRAM
Intel Core i7-4790K ASUS Maximus VII Impact EVGA GeForce GTX 980 Ti Classified G.SKILL Trident X Series F3-1600C7D-16GTX 
Hard DriveHard DriveCoolingOS
Samsung 840 EVO (OS Drive) Samsung XP941 (Storage Drive) Corsair Hydro Series Extreme Performance H100i Microsoft Windows 10 Professional 
MonitorMonitorKeyboardPower
ASUS ROG Swift PG278Q ASUS PB278Q Corsair Vengeance K70 RGB (non-trampstamp) Corsair AX860 
CaseMouseOtherOther
Corsair Graphite 380T Logitech G400 Corsair - Individually Sleeved AX 860/760 ATX 2... Individually Sleeved AX 860/760 ATX 24pin Cable... 
OtherOtherOtherOther
Xbox 360 Wireless Gaming Receiver BitFenix Spectre Pro 200mm Fan - White LED (BFF... Corsair SP120 PWM High Performance Fans Corsair AF120 Quite Edition Fan 
  hide details  
Reply
 
Kids-PC
(12 items)
 
White Heat
(20 items)
 
CPUMotherboardGraphicsRAM
Intel Core i5-2400 - BX80623I52400 ASUS P8P67 GIGABYTE GeForce GTX 550 Ti - GV-N550D5-1GI G.SKILL Ripjaws X + Turbulence II 
Hard DriveHard DriveOptical DriveCooling
80 GB Hitachi SATA II 500 GB Seagate SATA II LITE-ON 24X DVD Writer - iHAS224-06 CORSAIR CAFA50 
OSMonitorPowerCase
Microsoft Windows 7 Ultimate Edition 64-bit Acer G205HVbd Rosewill HIVE Series HIVE-650 NZXT Source 210 S210-001 
CPUMotherboardGraphicsRAM
Intel Core i7-4790K ASUS Maximus VII Impact EVGA GeForce GTX 980 Ti Classified G.SKILL Trident X Series F3-1600C7D-16GTX 
Hard DriveHard DriveCoolingOS
Samsung 840 EVO (OS Drive) Samsung XP941 (Storage Drive) Corsair Hydro Series Extreme Performance H100i Microsoft Windows 10 Professional 
MonitorMonitorKeyboardPower
ASUS ROG Swift PG278Q ASUS PB278Q Corsair Vengeance K70 RGB (non-trampstamp) Corsair AX860 
CaseMouseOtherOther
Corsair Graphite 380T Logitech G400 Corsair - Individually Sleeved AX 860/760 ATX 2... Individually Sleeved AX 860/760 ATX 24pin Cable... 
OtherOtherOtherOther
Xbox 360 Wireless Gaming Receiver BitFenix Spectre Pro 200mm Fan - White LED (BFF... Corsair SP120 PWM High Performance Fans Corsair AF120 Quite Edition Fan 
  hide details  
Reply
post #5 of 33
funny story when it was his friend screwing with him and it makes him freak out and format his pc.

check to see if windows remote desktop thing is active. (I doubt its that)

there should be an obvious piece of software installed that allowed this to happen, look thru your installed programs and start erasing things you dont use.
     
CPUMotherboardGraphicsRAM
Intel Core i7-7700K ASUS ROG STRIX Z270I w/TPM EVGA GeForce GTX 1080 Ti Black Edition CORSAIR Dominator Platinum 16GB (2 x 8GB) DDR4 ... 
Hard DriveHard DriveOptical DriveCooling
SAMSUNG 960 PRO M.2 512GB NVMe  SAMSUNG 960 EVO M.2 1TB NVMe ASUS External 12X Blu-Ray Writer Corsair H100i GTX 
OSMonitorKeyboardPower
Windows 10 Professional Samsung - S34E790C - 34" 21:9 Curved Screen CODE 87 - Cherry MX Green CORSAIR SF600 - 600W 
CaseMouseMouse PadAudio
Caselabs - Bullet BH2 RAZER DeathAdder Chroma Glorious PC Gaming Race 3XL Mouse Mat - 48X24" Steelseries - Arctis 7 
AudioOther
Bose Companion 2 Series III  CyberPower UPS - PR1500LCDRTXL2U - 1500w 
  hide details  
Reply
     
CPUMotherboardGraphicsRAM
Intel Core i7-7700K ASUS ROG STRIX Z270I w/TPM EVGA GeForce GTX 1080 Ti Black Edition CORSAIR Dominator Platinum 16GB (2 x 8GB) DDR4 ... 
Hard DriveHard DriveOptical DriveCooling
SAMSUNG 960 PRO M.2 512GB NVMe  SAMSUNG 960 EVO M.2 1TB NVMe ASUS External 12X Blu-Ray Writer Corsair H100i GTX 
OSMonitorKeyboardPower
Windows 10 Professional Samsung - S34E790C - 34" 21:9 Curved Screen CODE 87 - Cherry MX Green CORSAIR SF600 - 600W 
CaseMouseMouse PadAudio
Caselabs - Bullet BH2 RAZER DeathAdder Chroma Glorious PC Gaming Race 3XL Mouse Mat - 48X24" Steelseries - Arctis 7 
AudioOther
Bose Companion 2 Series III  CyberPower UPS - PR1500LCDRTXL2U - 1500w 
  hide details  
Reply
post #6 of 33
Quote:
Originally Posted by NKrader View Post

funny story when it was his friend screwing with him and it makes him freak out and format his pc.

check to see if windows remote desktop thing is active. (I doubt its that)

there should be an obvious piece of software installed that allowed this to happen, look thru your installed programs and start erasing things you dont use.


The console session of RDP is locked out and you can't view what the remote session is doing. So, RDP is out. Definitely stop that service if you don't use it, but that not the culprit here.
 
Kids-PC
(12 items)
 
White Heat
(20 items)
 
CPUMotherboardGraphicsRAM
Intel Core i5-2400 - BX80623I52400 ASUS P8P67 GIGABYTE GeForce GTX 550 Ti - GV-N550D5-1GI G.SKILL Ripjaws X + Turbulence II 
Hard DriveHard DriveOptical DriveCooling
80 GB Hitachi SATA II 500 GB Seagate SATA II LITE-ON 24X DVD Writer - iHAS224-06 CORSAIR CAFA50 
OSMonitorPowerCase
Microsoft Windows 7 Ultimate Edition 64-bit Acer G205HVbd Rosewill HIVE Series HIVE-650 NZXT Source 210 S210-001 
CPUMotherboardGraphicsRAM
Intel Core i7-4790K ASUS Maximus VII Impact EVGA GeForce GTX 980 Ti Classified G.SKILL Trident X Series F3-1600C7D-16GTX 
Hard DriveHard DriveCoolingOS
Samsung 840 EVO (OS Drive) Samsung XP941 (Storage Drive) Corsair Hydro Series Extreme Performance H100i Microsoft Windows 10 Professional 
MonitorMonitorKeyboardPower
ASUS ROG Swift PG278Q ASUS PB278Q Corsair Vengeance K70 RGB (non-trampstamp) Corsair AX860 
CaseMouseOtherOther
Corsair Graphite 380T Logitech G400 Corsair - Individually Sleeved AX 860/760 ATX 2... Individually Sleeved AX 860/760 ATX 24pin Cable... 
OtherOtherOtherOther
Xbox 360 Wireless Gaming Receiver BitFenix Spectre Pro 200mm Fan - White LED (BFF... Corsair SP120 PWM High Performance Fans Corsair AF120 Quite Edition Fan 
  hide details  
Reply
 
Kids-PC
(12 items)
 
White Heat
(20 items)
 
CPUMotherboardGraphicsRAM
Intel Core i5-2400 - BX80623I52400 ASUS P8P67 GIGABYTE GeForce GTX 550 Ti - GV-N550D5-1GI G.SKILL Ripjaws X + Turbulence II 
Hard DriveHard DriveOptical DriveCooling
80 GB Hitachi SATA II 500 GB Seagate SATA II LITE-ON 24X DVD Writer - iHAS224-06 CORSAIR CAFA50 
OSMonitorPowerCase
Microsoft Windows 7 Ultimate Edition 64-bit Acer G205HVbd Rosewill HIVE Series HIVE-650 NZXT Source 210 S210-001 
CPUMotherboardGraphicsRAM
Intel Core i7-4790K ASUS Maximus VII Impact EVGA GeForce GTX 980 Ti Classified G.SKILL Trident X Series F3-1600C7D-16GTX 
Hard DriveHard DriveCoolingOS
Samsung 840 EVO (OS Drive) Samsung XP941 (Storage Drive) Corsair Hydro Series Extreme Performance H100i Microsoft Windows 10 Professional 
MonitorMonitorKeyboardPower
ASUS ROG Swift PG278Q ASUS PB278Q Corsair Vengeance K70 RGB (non-trampstamp) Corsair AX860 
CaseMouseOtherOther
Corsair Graphite 380T Logitech G400 Corsair - Individually Sleeved AX 860/760 ATX 2... Individually Sleeved AX 860/760 ATX 24pin Cable... 
OtherOtherOtherOther
Xbox 360 Wireless Gaming Receiver BitFenix Spectre Pro 200mm Fan - White LED (BFF... Corsair SP120 PWM High Performance Fans Corsair AF120 Quite Edition Fan 
  hide details  
Reply
post #7 of 33
Thread Starter 
I have asus rt-ac56u as router my pc and media center through wifi. not sure what password to change. wifi, i have no password on windows login
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
post #8 of 33
Thread Starter 
just checked windows remote assist, it is Allowed. remote decktop - not
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
post #9 of 33
Quote:
Originally Posted by ASSSETS View Post

i have no password on windows login

You should probably change that. Just saiyan.
 
Kids-PC
(12 items)
 
White Heat
(20 items)
 
CPUMotherboardGraphicsRAM
Intel Core i5-2400 - BX80623I52400 ASUS P8P67 GIGABYTE GeForce GTX 550 Ti - GV-N550D5-1GI G.SKILL Ripjaws X + Turbulence II 
Hard DriveHard DriveOptical DriveCooling
80 GB Hitachi SATA II 500 GB Seagate SATA II LITE-ON 24X DVD Writer - iHAS224-06 CORSAIR CAFA50 
OSMonitorPowerCase
Microsoft Windows 7 Ultimate Edition 64-bit Acer G205HVbd Rosewill HIVE Series HIVE-650 NZXT Source 210 S210-001 
CPUMotherboardGraphicsRAM
Intel Core i7-4790K ASUS Maximus VII Impact EVGA GeForce GTX 980 Ti Classified G.SKILL Trident X Series F3-1600C7D-16GTX 
Hard DriveHard DriveCoolingOS
Samsung 840 EVO (OS Drive) Samsung XP941 (Storage Drive) Corsair Hydro Series Extreme Performance H100i Microsoft Windows 10 Professional 
MonitorMonitorKeyboardPower
ASUS ROG Swift PG278Q ASUS PB278Q Corsair Vengeance K70 RGB (non-trampstamp) Corsair AX860 
CaseMouseOtherOther
Corsair Graphite 380T Logitech G400 Corsair - Individually Sleeved AX 860/760 ATX 2... Individually Sleeved AX 860/760 ATX 24pin Cable... 
OtherOtherOtherOther
Xbox 360 Wireless Gaming Receiver BitFenix Spectre Pro 200mm Fan - White LED (BFF... Corsair SP120 PWM High Performance Fans Corsair AF120 Quite Edition Fan 
  hide details  
Reply
 
Kids-PC
(12 items)
 
White Heat
(20 items)
 
CPUMotherboardGraphicsRAM
Intel Core i5-2400 - BX80623I52400 ASUS P8P67 GIGABYTE GeForce GTX 550 Ti - GV-N550D5-1GI G.SKILL Ripjaws X + Turbulence II 
Hard DriveHard DriveOptical DriveCooling
80 GB Hitachi SATA II 500 GB Seagate SATA II LITE-ON 24X DVD Writer - iHAS224-06 CORSAIR CAFA50 
OSMonitorPowerCase
Microsoft Windows 7 Ultimate Edition 64-bit Acer G205HVbd Rosewill HIVE Series HIVE-650 NZXT Source 210 S210-001 
CPUMotherboardGraphicsRAM
Intel Core i7-4790K ASUS Maximus VII Impact EVGA GeForce GTX 980 Ti Classified G.SKILL Trident X Series F3-1600C7D-16GTX 
Hard DriveHard DriveCoolingOS
Samsung 840 EVO (OS Drive) Samsung XP941 (Storage Drive) Corsair Hydro Series Extreme Performance H100i Microsoft Windows 10 Professional 
MonitorMonitorKeyboardPower
ASUS ROG Swift PG278Q ASUS PB278Q Corsair Vengeance K70 RGB (non-trampstamp) Corsair AX860 
CaseMouseOtherOther
Corsair Graphite 380T Logitech G400 Corsair - Individually Sleeved AX 860/760 ATX 2... Individually Sleeved AX 860/760 ATX 24pin Cable... 
OtherOtherOtherOther
Xbox 360 Wireless Gaming Receiver BitFenix Spectre Pro 200mm Fan - White LED (BFF... Corsair SP120 PWM High Performance Fans Corsair AF120 Quite Edition Fan 
  hide details  
Reply
post #10 of 33
Thread Starter 
I dont install any programs and click adds about viruses. I use roboform for passwords and vpn
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
 
HTPC / SERVER
(12 items)
 
 
CPUMotherboardGraphicsRAM
intel 4670k Gigabyte Z87X-UD3H MSI 750 Ti G.SKILL Ripjaws X Series 8GB 2133 
Hard DriveHard DriveCoolingOS
Samsung EVO 120Gb Seagate Barracuda 7200.12 500 Corsair h70 Windows 7 Pro 
MonitorKeyboardPowerCase
Asus VW266H 1920x1200 Logitech G-15 CORSAIR HX750 Antec 900 
Mouse
Logitech Performance MX 
CPUMotherboardGraphicsRAM
amd a10-7850k asus a88mx-a APU corsair vengeance 
Hard DriveCoolingOSMonitor
Corsair C300 stock Windows 7 Sharp 60" LCD 
KeyboardPowerCaseOther
Logitech K400r Corsair CX430M old temp Asus USB-AC53 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › I just got hacked!!! Help