Computing.Net > Forums > Security and Virus > security question!

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

security question!

Reply to Message Icon

Original Message
Name: Clover
Date: July 4, 2003 at 16:13:30 Pacific
Subject: security question!
OS: XP home
CPU/Ram: 516/amd 2400+
Comment:

ok here goes.
Last night my p.c rebooted ,I was leaning over it at the time and may have pressed one of he F keys but not sure.

Anyway I am connected via cable.The modem shows four green lights and when its connected (plugged in) to computer the fifth light flashes showing activity.

when it rebooted up again no yellow light would show and I could not access the net.I went into cmd and put in ipconfig and where it usually has :

Ip address : xx.xxx.xx.x
subnet mask :xx.xx.xxx.xx
default gateway: xxx.xxx.xx

it didnt show as that,it had

automaticIPconfigured :169.254.34.141
subnetmask:255.255.0.0

ok I tried commands ipconfig/release,ipconfig/renew and tried the repair facility in the properties of network connection folder all to no avail.

I was here for hours trying everything.I done a reformat on the disk and reinstalled xp(it was overdue fresh install anyway)

When all was done it still wouldnt work that IP was still showing.I am some what pc savy but no expert.I took out the battery on the motherboard and the memory for five minutes.I was just trying anything I could think of really.

when I put them back in viola the modem started flashing again ,I could access the net and my original ipconfig settings were back.

Questions: Was I hacked ?
Did they plant something in the memory so it stayed even if u reinstalled?

I dont know what to think of it,I posted just to see if anyone here could shed some light on the subject.

Thanks


Report Offensive Message For Removal


Response Number 1
Name: EC
Date: July 4, 2003 at 20:18:52 Pacific
Reply: (edit)

Sound like maybe you just needed to reset your modem for it to renegotiate an IP and then you're back on the net.
As for being hacked, you need some security logs to show that, and you did not mention any firewalls, so you should get one, like ZONE ALARM PRO or the ZONE ALARM FREE to monitor your outbound connections.


Report Offensive Follow Up For Removal

Response Number 2
Name: anonproxy
Date: July 5, 2003 at 09:33:23 Pacific
Reply: (edit)

You're paranoid. You have cable, you get an IP address from your modem. Like EC said, just turn your modem off/on to reset the process. Or disable the network connection through Windows and then restart it.

There is some combo or function key setup by default which links to shutdown. I have done this before cleaning keys. Heh, yes I learned my lesson.

Get a firewall installed. There are free ones like EC mentioned.

And relax a little. Taking apart your computer is a little extreme.

FYI, your memory (RAM) is volatile. When the power is off, its data is no longer valid. your battery powers your internal clock and CMOS memory. This is not executable, only an OS independent reference for configuration data. Some viruses manipulate this, but they are rare and often ineffective. In short, if your hardware is working, leave it alone.


Report Offensive Follow Up For Removal

Response Number 3
Name: clover
Date: July 5, 2003 at 17:49:15 Pacific
Reply: (edit)

Paranoid maybe a bit since my comp is comprimised very often by a certain paramilitary group ,reasons I cant really discuss on here.

I pulled the modem out for five minutes ,turned on and off.I tried all that I had a firewall installed but obviously if it was hacked and they gained entry the firewall wouldnt show an attack.

The IP was from a netherlands address also.

Now have zonealarm so hopefully it stay quiet.

thx for replies


Report Offensive Follow Up For Removal

Response Number 4
Name: anonproxy
Date: July 5, 2003 at 21:36:03 Pacific
Reply: (edit)

"my comp is comprimised very often by a certain paramilitary group ,reasons I cant really discuss on here."

Uh huh.

IP address 169.254.34.141 is lost somewhere near Atlanta, Georgia. I did not make it to the Netherlands. Its listed owner is the IANA. Translation - odd but entirely uncomfirming.


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you own an iPhone?

Yes
No, but soon
No


View Results

Poll Finishes In 7 Days.
Discuss in The Lounge
Poll History




Data Recovery Software