Firewall Wizards: Re: Help, some one's hacked into my home computer

["Bill Pennington" <bpennington () lucidnetworks com>]

Wish I could offer you more help. Those ffast* files are from MS Office,
they are Fast Find index files if I remember correctly. They update all the
time. Do you have a good backup? If so I would restore your system from your
last backup. I am sure others will have better suggestions!

Bill Pennington
Consultant
Lucid Networks


-----Original Message-----
From: Denise Lucas <denise_lucas () yahoo com>
To: firewall-wizards () nfr net <firewall-wizards () nfr net>
Date: Sunday, May 16, 1999 6:17 PM
Subject: Help, some one's hacked into my home computer


> i'm on a cable modem, i run back officer friendly,
> stepped away from the desktop for a few hours, came
> back and saw the alerts.  I've done a find on all the
> files changed today and compared them with the times
> that they were on.  I'm stumped on what to do next.
> This is happening right now, realtime.  Can anybody
> please respond.
> Machine is an AST Manhattan Commerce Pro
> Pentium Pro running
> Windows 95
>
> It looks like they ftp'd some files called
> ffastun.ffl, ffastun0.ffx, ffastun.ffo, ffastun.ffa
> and made some changes to system files.
>
> Any suggestions, please, please call me.
>
> Thanks,
>
> Denise
> ===
>
> When you have eliminated the impossible, whatever remains, however
> improbable, must be the truth.
>
> Sir Arthur Conan Doyle
> _________________________________________________________
> Do You Yahoo!?
> Free instant messaging and more at http://messenger.yahoo.com