Multiple Messengers Hacked..HELP!!!!!!!!

Discussion in 'Software' started by TrndAssassin, Jun 6, 2006.

  1. TrndAssassin

    TrndAssassin Private E-2

    Well im not exactly new here but its been forever since ive been on this site, im here because I have a very annoying issue that I need fixed
    I have yahoo, and I have msn
    Both messenging programs
    I use them both
    Some how My Ex has managed to figure out a way to kick me off my messenger while im on it, and take it over and talk to whoever I was talking to. This has been messing up Buisiness deals, and my current relationship. I have created new messenger accounts and changed passwords and nothing solves the problem. My ex still manages to do the same thing. She also managed to do this to my Fiance's computer, and every account my fiance uses, she is trying to break my fiance and I up. I dont understand how a girl half way across the united states is able to hack both my msn messenger and yahoo messenger, and my fiance's can anyone help me to solve this problem? I dont know all of my ex's accounts, I dont know how shes even doing this. I build computers and I program, Ive used some pretty weird and devius programs before, but ive never seen a way to hack two different messenger systems, and two different computers, and take over the messengers and kick the origional user off without leaving a trace. How can I stop this Any Help would be greatly appreciated!!!!!!!!!
     
  2. Gecks

    Gecks Specialist

    This isn't my area of expertise, but I believe that, since most messenging software (MSN definatley included) only allow you to log in on one computer at once, simply logging in on another computer with your account would both kick you off and allow someone to continue a conversation you were involved in. If you immediately log back into MSN, do you sign in OK?

    The real question is how your msn accounts and passwords are getting found out. Hopefully someone can give you some ideas for this.
     
  3. TrndAssassin

    TrndAssassin Private E-2

    Yes if I immediatly log back in I either sign in ok and kick the other person off, or it tells me im logged in on another computer. Some how my ex, is getting the passwords to my accounts, even though they are different for every account WAY different. She is also getting the passwords for my Fiance's accounts which are on a completely different computer. She has been able to log into both, and now she has done one better Shes been able to log in and talk say under my name, while im still logged in and talking. This is getting really annoying really quick. I have probably 6 different accounts now, and she gets into all of them within a hour of me creating them.
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I'm still of the opinion that she's implanted something on your and your fiances computers that track your keystrokes ....would love to see/know what happens if you set up a new account and only use it with someone elses computer ...borrow a friends ...go to a cybercafe ...thouroughly examine the contents of your computer ...security logs, etc ...install zone alarm ....check your firewalls ...
     
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Would really like to hear more of this ....bump!!
     
  6. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Sounds like a key logger has somehow been planted on your computer.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis

    Post back in the Malware Removal Forum.
     
  7. TrndAssassin

    TrndAssassin Private E-2

    Well I ran hijack this and I dont find anything out of the ordinary, yes ive used hijack this a few times before, would you guys like me to copy and paste the log ? How could a key logger been placed on my computer? I hadnt talked to this person for several months, then all a sudden she reapeared and started causing me all these problems. She has never had access to my pc itself, and I havent accepted any files from the person since before the last time I whiped my hard drive out, I also havent went to any sites the person has sent me.
    She has to be doing this by ip some how.
    What gets me is the girl is only 17 and I would have never guessed her to be smart enough to pull this sort of stuff off. Let alone create such a headache in my life.
     
  8. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    She's getting your UserName and passwords somehow. If not a keylogger then someone is giving her them. There are several different methods that a keylogger can be planted on a system.

    Attach your HijackThis log. Do not copy and paste the log into your reply.
     
  9. TrndAssassin

    TrndAssassin Private E-2

    Heres the log.
    We can rule out someone giving her the pass, no one knows my passwords, unless shes screwing a IT that works for yahoo. At 17 I highly doubt that. This wouldn't bother me so much if I could just create a new account and all of it stop,but ive got multiple accounts and shes still doing it which tells me however shes doing it has to be ip related/ program related, yes a keylogger I would agree but how?, I mean in previous years, 6 years of online gaming, ive always had a very secure, very sturdy system, and now I have a teenage girl, hijacking my accounts.
     

    Attached Files:

  10. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    No key loggers are visible in the log. You are running a completely unpatched copy of Windows XP, this is a major security concern; and leaves your computer wide open to numerous different attacks and infections. You should install SP2 and then run Windows Update to bring your OS Up2Date.

    Your ex is getting your UserNames and passwords somehow. If you have them wriiten down, then you need to keep them stored where no one else can find them.
     
  11. TrndAssassin

    TrndAssassin Private E-2

    There not written down, and the woman lives 2 states away, heck I had to run a keylogger on my own system to remember one of the passwords because I had just created so many accounts with different passes, that I forgot some of the passwords, and guess what she already had them. My Fiance is running a completely updated version of xp home and is still having the same issue. There are two completely seperate systems on different internet providers getting hacked by one person MY EX. My Fiance's system is fully updated. She has about he same number of accounts all with different passwords. Anyone else have ideas on how My ex is getting the passwords when she lives two states away?
    Im installing zone alarm now and changing all my passwords to see if that solves the problem, im just hoping that this firewall doesnt crash my wireless net, ive had issues with firewalls killing my net before.
     
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Zone alarm (free version) will prompt for permissions ....won't screw with your net....am still curious as to using a different computer - off your isp - off your net.
     
  13. TrndAssassin

    TrndAssassin Private E-2

    Timw I would think my fiance's computer which is on a different isp would count as a different computer. Before all this happened, my ex had never spoke with my current fiance, now my ex is hijacking her accounts. Unless my ex is smart enough to trace my fiance's ip through a instant message or a ip, this is a very impressive lil 17 year old hacker that we have on our hands.
    As for me myself getting onto a different Isp it wont happen because all of my friends well are to poor for computers. I should be changing my isp in a month when I switch from verizon 1.5mb back to insight 5mb. Till then, the different isp is out of question. Zone Alarm is installed now I have to remember how to change all my passwords. FUN.
     
  14. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I'm just really intrigued, all considered. Obviously she has somehow targeted you and the fiance ...I do have some info somewhere about finding the ip address of people on instant messenger ...i'll try to find it ...but that doesn't answer the question of how she's got the passwords. PM me so I can get you the info on finding the ip address' if you want it.
    Zone alarm is real good ....should alert you to any poss. intrutions ...have you checked your security logs for any alerts?
     
  15. TrndAssassin

    TrndAssassin Private E-2

    So far 0 alerts I probably wont get any alerts till tomorrow when I try to talk to my fiance on yahoo or msn. Right now im changing my passwords on everything.
    Its weird that shes able to now log in and type under my name
    without with it kicking me out, but when I come back, it doesnt kick her out.
    Its like shes able to get in and actually watch my conversations,and talk under whoevers account shes hacked whether it be mine or my fiances, while were talking,and kick my fiance or Iwhenever she wishes.
     
  16. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Still looking ....but in the mean time:
    theres a program called magic net trace...all they have to do is click on your name while u are chatting ..its really that easy
    If you check out www.wiredpatrol.org there's a listing of federal laws concerning cyberstalking as well as state laws. Maybe they can offer some advice to you on what you can do to get help.
    Secure instant messaging:
    http://www.winfosec.com/simp.php
     
  17. Bolts

    Bolts Private E-2

    Hey TrndAssassin,

    This is an intriguing problem. Have you considered someone near you that you might know hacking your wireless network?

    packet sniffers are pretty smart and my understanding is that all packets can be cracked - perhaps one of your ex's friends lives near by...

    maybe someone with more knowledge on wireless nw hacking could give you some clues

    Bolts
     
  18. TrndAssassin

    TrndAssassin Private E-2

    Shes never lived in this area, shes never lived within a 100 miles of my current house, so yeah I doubt she has someone hacking my wireless.
     
  19. TrndAssassin

    TrndAssassin Private E-2

    Well Goodmorning, I changed all my passwords and installed zone alarm last night. It lasted probably 2 hours today, and she hacked my account with the new password, and zone alarm shows 0 access attempts.
     
  20. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  21. TrndAssassin

    TrndAssassin Private E-2

    I have msn messenger 7.5 so unless there is some sorta leak that microsoft doesnt know about then yeah. its not that.
     
  22. TrndAssassin

    TrndAssassin Private E-2

    I will say though zone alarm has really slowed her process, its almost like shes not getting the pass, because she only was able to do it once and hasnt done it since.
     
  23. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Two things that I've come up with
    1)Password Capture : A variant of the Key Logger that captures passwords as they are entered or transmitted. Some password capture trojans impersonate the login prompt, asking the user to provide their password.
    And 2)http://www.pestpatrol.com/pest_info/Stomp/m/msn_messenger_exploit.asp
    Have you ever been asked to authenticate your account?
     
  24. TrndAssassin

    TrndAssassin Private E-2

    I dont think its sitting as a trojan, ive ran spybot, ive ran avg, ive ran a hijack this scan and nothnigs turned up anywhere.
    Im kinda curious to know if the router im on has a dmz setup on it, if so that would leave all the ports open to cause tons of problems, But I cant get into the router to figure it out, because its not my router hehe. Either way I dont think theres a dmz setup on it.
    This is just mind boggling how shes doing this. Im sure its either just some stupid program, or one of her friends is doing it for her.
     
    Last edited: Jun 7, 2006
  25. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  26. TrndAssassin

    TrndAssassin Private E-2

    nope im doing the scan as we speak though
     
  27. TrndAssassin

    TrndAssassin Private E-2

    hmmm first 30 seconds of the scan two hacking tools were found....interesting.
    and 16 spyware, wow so much for spybot working like a charm.
     
  28. prometheos

    prometheos Staff Sergeant

    Although "rootkits" are rare they are extremely difficult to detect. In fact, any anti-virus software that uses any of the Windows APIs for file scanning may be completely bamboozled because the "rootkit" program will alter the results of a filescan to protect itself. MajorGeeks has a rootkit revealer program that will allow you to rule out that particular possibility:)
    http://www.majorgeeks.com/Rootkit_Revealer_d4652.html
     
  29. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Now we're getting somewhere!!!:) :)
     
  30. TrndAssassin

    TrndAssassin Private E-2

    um great , half way through , the scan locks up
     
  31. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  32. TrndAssassin

    TrndAssassin Private E-2

    The two hacking programs that were detected were
    funwebs...basically uninstalled from my computer I know where the files are.
    and winfixer2005
    what the heck is winfixer2005 and whats it do?
     
  33. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    There are many different versions of WinFixer... the most common of which is based on a Vundo/Virtumonde trojan [a.k.a. the MSEvents or ATLDistrib sub-cases of WinFixer].

    *IF* you happen to have this version, here's what you should do:

    Download VirtumundoBeGone from:

    http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

    * Save it to your Desktop
    * Close all running programs (including your Internet Browser)
    * Double-click VirtumundoBeGone.exe on the desktop
    * Follow the directions as indicated

    please be advised that this program may generate a "BLUE SCREEN OF DEATH" (and perhaps a "dump" of your system memory)... this is an expected/necessary part of the process, so don't be surprised if it happens.

    just reboot if your system "jams"
     
  34. BCGray

    BCGray Guest

    Bounce
     
    Last edited by a moderator: Jun 7, 2006
  35. TrndAssassin

    TrndAssassin Private E-2

    im doing a rootkit revealer right now so far its found 1 thing
     
  36. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    @BCGray ....the "link" should (did/does for me) start a download ....
     
  37. TrndAssassin

    TrndAssassin Private E-2

    the rootkit scan came up with 25 discrepencies, I cant save the log because it wont show as a file, and I did a print screen of the log but its to big to be attached, so if someone once to look at the rootkit log, for me I will have to send it to them.
     
  38. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Post it in the malware section ....or PM Shadow with a query as to how to post/send the log.
     
  39. prometheos

    prometheos Staff Sergeant

    Hi TmdAssassin
    In theory you could save rootkitrevealer to c:\windows\system32 then
    start=>run=>rootkitrevealer -a -c C:\scan.txt
    This should provide a csv (comma separated value) text file called scan.txt in the root of your C: drive which will be a bit more compact.:)
     
  40. TrndAssassin

    TrndAssassin Private E-2

    heres a complete active scan , scan log
    the very last entry named messenger pass, thats a program I installed, it only gives the passwords to the accounts ive logged into on my computer, it doesnt give the passwords to any one elses accounts but yeah someone look at the log and tell me what ya think.
    Meanwhile I get back to yall later tonight
    im taking my fiance and going fishing to get my mind off this issue.
     

    Attached Files:

  41. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Post it over in the malware section ....those guys rock when it comes to spyware .....catch any fish?
     
  42. TrndAssassin

    TrndAssassin Private E-2

    Nope didnt catch any fish,cought a little somethin else, but thats not important lol, and had some really good pizza. Oh plus I got a phone call for me to start my new job monday, yay. Shame its not car or computer oriented oh well. I have to pay for my adventurous life some how.
     
  43. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Congrats .....something is working ....glad you had a good time and a positive phone call!!!
     
  44. Robert

    Robert Sergeant

    Er - I think you have spies somewhere in the tie up between you and your new girlfriend. Here's what I would do. Between you and the Gf get new hotmail/yahoo addresses and keep them SECRET and go from there! This means secret from everyone!
    Cheers
     
  45. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Originally Posted by TimW
    could you check the active scan log in the post by trnassassin (software) ...under "Multiple messangers hacked...help!!!!" ....finally convinced him to run an online scan that picked up a ton of stuff and got him to install zone alarm ...which seemed to stop the problem with his ex. getting into his passwords...
    Tim

    The guy never completed all steps from the sticky as originally requested by SPD back in msg # 6. They should all be followed. Also he has ignored the fact that his system has not been updated. That is a MAJOR security issue. Also he is changing passwords on a system that is potentially infected. He should use a diferent PC (not his or his girlfriends) to change passwords.
     
  46. TrndAssassin

    TrndAssassin Private E-2

    Well Cranking the settings on zone alarm fixed the issue on my pc, with my accounts, now I just have to get zone alarm onto my fiance's pc and the problems solved. As for how my system was being hacked, im guessing theres a bug or a program or something somewhere that my ex is using, im not to worried about it as long as ive got the hacking stopped.
    My isp is going to change in a few weeks, and when it does I'll reformat my hard drive and bring it back up. Then I should basically have no issues ever again.
    Thanks for all the help
    Everyone.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds