mailing list archives
Re: Hacked again???
From: Christoph 'knurd' Jeschke <christoph.jeschke () gmail com>
Date: Fri, 17 Jun 2005 03:28:40 +0200
Mauricio Fernandez schrieb:
I am not sure, but I think that I was hacked again.
Not really. You "hacked" yourself bei using broken software and not
using your brain ;-)
I have a w2k SP4 full patched box
Not so fine. Desktop Firewalls are _not_ useful. They can't reliable
control outgoing connections, especially if your run your computer as
Administrator (and I guess, you do). In some cases, Desktop Firewalls
aka Personal Firewalls are making your system weaker (because there were
additional bugs in some firewalls). I guess, you are working in a
network with other machines ... so check _every_ machine in your
network. And ... get off this lousy "firewalls".
Please, completely re-setup your machine and, this is important, CHANGE
EVERY PASSWORT YOU EVER USED. TROJ_PWSIM.A is a Keylogger, so every
password you typed in during the Malware was active, is PROBABLY STOLEN.
If this is the real intruder, your machine is not longer yours, probably
a zombie in a bigger Bot-Net. Now you have really to re-setup your machine.
Does anyone know some attack with this three files combination?
Read the linked pages. Additionally you can use a very good german tool:
I did really good experiences with this. Most of this $)§@&$-Malware
will not harm you anymore - if you operate your computer wisely, of course!
Please, read additionally:
Re: Hacked again??? Christoph 'knurd' Jeschke (Jun 17)