Hackers? Who needs em?
Author
Discussion

mondeoman

Original Poster:

11,430 posts

289 months

Wednesday 9th October 2002
quotequote all
You IT guys out there will probably laugh at me for this, but..........

using Yahoo last night, we had a hacker get into our PC. He (a 14 yo kid FFS!) was using the webcam request pop up box to pass messages to us and generally mess us around. He has (apparently) been doing this to other people in the same chat room. I don't think he dropped a virus into the PC (at least I hope not)

So, my question is - is there an easy way to stop him doing it again. I know bugger all about PC's in terms of coding etc. I've heard about Firewalls - but are they easy to get hold of/install and would one stop him (or anyone else) doing it again?

Thanks in advance

Dave then, but now)

plotloss

67,280 posts

293 months

Wednesday 9th October 2002
quotequote all
Yep get a firewall.

Two really easy to set up jobs are:

Norton Personal Firewall

Black Ice Defender (I think!)

The latter is free I think, or if you use Kazaa both are available for £0.00p.

Matt.

Podie

46,647 posts

298 months

Wednesday 9th October 2002
quotequote all
Don't McAfee do a firewall jobbie as well?

backman

87 posts

283 months

Wednesday 9th October 2002
quotequote all
Zone alarm is a free (for personal use) firewall - downloadable from www.zonelabs.com

This lets you know if anyone is trying to access your PC. (and stops them unless you give them specific authority)

neil_cardiff

17,113 posts

287 months

Wednesday 9th October 2002
quotequote all
If you really want to poo em off, get a hardware firewall and hide behind that. Cost a little bit more though.

CarZee

13,382 posts

290 months

Wednesday 9th October 2002
quotequote all
Black Ice a software chocolate teapot..

A good anti-virus package and a good personal firewall are the answer.

Norton Internet Security 2002 is unbeatable as a package which comprises both.. if you're poor, you might want to consult KaZaa, but it's ereally not expensive to buy.

Otherwise, ZoneAlarm is your best bet.

It does sound like you've got a trojan loaded on your PC though.. there's something they include on the PCW magazine coverdisk in their 'essentials' section which specifically scans for trojans - can't think of the name of it now.. it's called something like 'scrubber'.. that's it "The Cleaner". IIRC.

If you wanted a hardware firewall, well email me through my profile as it's one of the 'things I do'.. spend a couple of hundred squid and get some proper protection that will be transparent to your PC.. definitely my favoured solution, but it's no substitute for an anti-virus package that will detect and delete this shite that's been put on your PC..

>> Edited by CarZee on Wednesday 9th October 11:21

DanL

6,582 posts

288 months

Wednesday 9th October 2002
quotequote all
On the subject of firewalls, I recommend Zone Alarm for general ease of use and freeness. Available here:

www.zonelabs.com/store/content/company/zap_za_grid.jsp

Just press submit, and go for Zone Alarm (not pro or plus, as they cost money).

On another note, are you sure you were hacked? I've not used Yahoo a great deal, but IIRC if you request to see someone's web cam it pops up a dialog with some text from the requester in it - if this is all you were seeing, he was just messing you about, I reckon.

It might be a good idea to check the security settings for messenger (sorry - can't remember where in the menu) to make sure it prompts you before accepting or sending files to/from other people (although I think this is turned on by default).


Dan

mondeoman

Original Poster:

11,430 posts

289 months

Wednesday 9th October 2002
quotequote all
quote:

On another note, are you sure you were hacked? I've not used Yahoo a great deal, but IIRC if you request to see someone's web cam it pops up a dialog with some text from the requester in it - if this is all you were seeing, he was just messing you about, I reckon.
Dan



Definitely - he knew about files on the PC that hadn't been sent anywhere. He was using the webcam box and changing his user name to converse. Difficult to explain unless you can see it happening, but definitely hacked. He was very proud of himself too, the little shit!

Boarding school kid from SA with nothing better to do than piss people off.

Thanks anyway - I'll try one or other of these solutions tonight and see if that stops him. My only concern is that he'll see it as a challenge and find a way round it .......

Oh, and Norton anti-virus is already installed.

>> Edited by mondeoman on Wednesday 9th October 11:33

neil_cardiff

17,113 posts

287 months

Wednesday 9th October 2002
quotequote all
Also instal AdAware to check to see what you are sending out about yourself. Some applications do install Spyware etc. and as we all know thats Not A Good Thing.

Carzee, have you seen that 3Com are now going to be selling Network Cards with Firewalls embedded in them? Nice idea to me.

Podie

46,647 posts

298 months

Wednesday 9th October 2002
quotequote all
Complain to Yahoo! as they seem to take that sort of thing quite seriously... worth a go.

CarZee

13,382 posts

290 months

Wednesday 9th October 2002
quotequote all
quote:
Carzee, have you seen that 3Com are now going to be selling Network Cards with Firewalls embedded in them? Nice idea to me.
had to happen I suppose.. don't know if I like the idea..

NICs are so simple and reliable, but start loading up shitloads of firmware that needs security patches etc..

Imagine having a boxload of cards for swapping out on PCs and not knowing which patch level each card was and having to match the patch level with the right driver etc..

sounds like a nightmare.. but it'll shift a few units I expect..

edit Podie's right ().. Yahoo take it seriously as they don't like stuff like this appearing in the press, frightening users and advertisers away from their service.

>> Edited by CarZee on Wednesday 9th October 11:47

neil_cardiff

17,113 posts

287 months

Wednesday 9th October 2002
quotequote all
quote:

quote:
Carzee, have you seen that 3Com are now going to be selling Network Cards with Firewalls embedded in them? Nice idea to me.
had to happen I suppose.. don't know if I like the idea..

NICs are so simple and reliable, but start loading up shitloads of firmware that needs security patches etc..

Imagine having a boxload of cards for swapping out on PCs and not knowing which patch level each card was and having to match the patch level with the right driver etc..

sounds like a nightmare.. but it'll shift a few units I expect..



[shiver] Hmm... Good point. It could be useful on the laptop NIC's though. Anyway enough really boring talk - how can get the bastid hackers back? Suggestions?

davidd

6,666 posts

307 months

Wednesday 9th October 2002
quotequote all
also the new checkpoint safe@ range looks like good value for money

If any one is on an ADSL or cable connection please make sure you have some form of protection, it does not have to cost much.

D.

neil_cardiff

17,113 posts

287 months

Wednesday 9th October 2002
quotequote all
Netgear are kicking out some good deals on basic Hardware Firewalls - my account manager with MicroWarehouse will do you guys some bloody good deals (on anything) - if you want to speak to him let me know...

DanL

6,582 posts

288 months

Wednesday 9th October 2002
quotequote all
quote:

quote:

On another note, are you sure you were hacked?

Definitely - he knew about files on the PC that hadn't been sent anywhere. He was using the webcam box and changing his user name to converse.


Well, I guess that answers my question! I'd think Zone alarm should keep him out unless it's a huge flaw in Yahoo messenger itself - it might be worth getting the latest version if you're not currently running it, in case it's a known and patched security hole.

Dan

roop

6,018 posts

307 months

Wednesday 9th October 2002
quotequote all
I use Sygate Personal Firewall - it's free from www.sygate.com. It's a great little piece of software dead easy to set up. No experience of ZA but a colloeague put it on his PC and it killed his connection completely, even when it was set to allow all traffic...! Urk.

Also, go to www.lavasoftusa.com and download AdAware plus the Refupdate software. Gets rid of all the spyware/adware stuff on your Wintel box. This is all free too...!

Roop

neil_cardiff

17,113 posts

287 months

Wednesday 9th October 2002
quotequote all
quote:

I use Sygate Personal Firewall - it's free from www.sygate.com. It's a great little piece of software dead easy to set up. No experience of ZA but a colloeague put it on his PC and it killed his connection completely, even when it was set to allow all traffic...! Urk.

Also, go to www.lavasoftusa.com and download AdAware plus the Refupdate software. Gets rid of all the spyware/adware stuff on your Wintel box. This is all free too...!

Roop



[qoute]
Also instal AdAware to check to see what you are sending out about yourself. Some applications do install Spyware etc. and as we all know thats Not A Good Thing.



As I said too - great minds think alike. Especially when drunk.

moleamol

15,887 posts

286 months

Wednesday 9th October 2002
quotequote all
quote:

quote:

quote:

On another note, are you sure you were hacked?

Definitely - he knew about files on the PC that hadn't been sent anywhere. He was using the webcam box and changing his user name to converse.


Well, I guess that answers my question! I'd think Zone alarm should keep him out unless it's a huge flaw in Yahoo messenger itself - it might be worth getting the latest version if you're not currently running it, in case it's a known and patched security hole.

Dan



Surely something like Zonealarm won't remedy this because it will ask you if you want to let Yahoo act as a server, once that program has that sort of permission, surely if he is using Yahoo to hack then a firewall will not stop him. I thought a firewall would only stop people trying to get in through various ports on your computer e.g. trying to get straight in through your IP addy.

DanL

6,582 posts

288 months

Wednesday 9th October 2002
quotequote all
quote:

Surely something like Zonealarm won't remedy this because it will ask you if you want to let Yahoo act as a server, once that program has that sort of permission, surely if he is using Yahoo to hack then a firewall will not stop him. I thought a firewall would only stop people trying to get in through various ports on your computer e.g. trying to get straight in through your IP addy.


Well, yeah, which is why I said
quote:

Zone alarm should keep him out unless it's a huge flaw in Yahoo messenger itself - it might be worth getting the latest version ... in case it's a known and patched security hole


It all depends if he's hacking through messenger (probably using a scrpt to exploit a known vulnerability) or through another port having got the IP address from the messenger session.

Messenger is (supposed) to be fairly secure these days as I understand, so my bet's it's a hole in Windows that's being exploited. Might be worth running windows update to get the latest security patches too...

Dan

(Edited as I can't spell scrpt)

(And again to say that I can spell it, but the software won't let me)
>> Edited by DanL on Wednesday 9th October 13:31

>> Edited by DanL on Wednesday 9th October 13:33

nmlowe

1,666 posts

290 months

Wednesday 9th October 2002
quotequote all
Arrrrgghhh!

I hate hackers!

The Fu@#ing sad Geeks!!

What's the point in hacking into someones computer and messing around with stuff anyway????

AND... How many of them are there?? I have the Norton Firewall on my home machine, and I have had loads of warnings that my machine is being attacked and the risk is high level!

I had a message come up the other day saying "Your computer is being accessed remotely without authority" Or something like that, and then norton shut the machine down!!

Are they attacking everyones files with programs or viruses, or are the little buggers actually sitting there watching what you type?

I managed to use a hack trace program my dad downloaded the other day and it showed the IP address of the atacker was a communications company in chicago.