hacker/stalker

Status
Niet open voor verdere reacties.
als ik icq opstart krijg ik soms wel is de vermelding
icq allready in use?
 
Geplaatst door APOCALYPSE
als ik icq opstart krijg ik soms wel is de vermelding
icq allready in use?
Klik om te vergroten...

hm, dat klinkt niet erg gezond APOCALYPSE.

Hoe je het went of keert: je wordt gehacked en jouw firewall houd het niet tegen.
Dus doe er iets aan. Neem een andere firewall die makkelijk te configureren is voor je.
 
ik had icq voor het eerst sinds maanden weer erop gezet en toen had ikm het 2 keer nu niet meer
dus ze komen door de router heen? moet ik iets veranderen bij de router?
 
denk dat ik eerst morgen maar is ff aangifte ga doen
heb diegene ze tel dus die komen er wel achter dan wie het is
 
Geplaatst door APOCALYPSE
denk dat ik eerst morgen maar is ff aangifte ga doen
heb diegene ze tel dus die komen er wel achter dan wie het is
Klik om te vergroten...

lijkt me dat dit niet gaat werken, je hebt nergens harde bewijzen??? probeer eerst hier achter te komen, en ga dan eens praten met zijn isp (telefonisch)
 
Geplaatst door APOCALYPSE
denk dat ik eerst morgen maar is ff aangifte ga doen
heb diegene ze tel dus die komen er wel achter dan wie het is
Klik om te vergroten...


Klopt. De politie zal de aangifte van jou wel maken, maar ze gaan daar verder niets mee doen APOCALYPSE. Ze hebben ook geen tijd hiervoor, dus dat wordt gelijk geseponeerd.

Je kunt het inderdaad beter naar de internet provider van de hacker sturen.

Ik heb bij abuse gewerkt van een internet provider.
Dit is wat ze doen meestal:
De eerste keer geven ze een waarschuwing.
De tweede keer wordt hij van wanadoo voor 3 dagen verwijderd.
De derde keer wordt hij voorgoed verwijderd van van zijn internet provider.
 
maar denk jij zeker dat het een hacker is saldos soms heb ik weken geen last ik bedoel het is moeilijk te bewijzen toch?
 
fport

@APOCALYPSE

Hier heb je een simpel programmaatje dat open poorten laat zien met het bijbehorende proces.
Misschien heb je er wat aan?

http://www.foundstone.com/index.htm....htm&subcontent=/resources/proddesc/fport.htm

Identify unknown open ports and their associated applications
Copyright 2002 (c) by Foundstone, Inc.
http://www.foundstone.com

fport supports Windows NT4, Windows 2000 and Windows XP

fport reports all open TCP/IP and UDP ports and maps them to the owning application. This is the same information you would see using the 'netstat -an' command, but it also maps those ports to running processes with the PID, process name and path. Fport can be used to quickly identify unknown open ports and their associated applications.

download link
http://www.foundstone.com/resources/termsofuse.htm?file=fport.zip

groetjes

edit

hier een kun je een uitgebreide securityscan, duurt wel eventjes voordat ie klaar is btw.

http://www.blackcode.com/scan/
 
Laatst bewerkt:
resultaat van een scan


1 tcpmux CLOSED 2 compressnet CLOSED 3 compressnet CLOSED
5 rje CLOSED 7 echo CLOSED 9 discard CLOSED
11 systat CLOSED 13 daytime CLOSED 17 qotd CLOSED
18 msp CLOSED 19 chargen CLOSED 20 ftp-data CLOSED
21 ftp CLOSED 23 telnet CLOSED 24 CLOSED
25 smtp CLOSED 27 nsw-fe CLOSED 29 msg-icp CLOSED
31 msg-auth CLOSED 33 dsp CLOSED 35 CLOSED
37 time CLOSED 38 rap CLOSED 39 rlp CLOSED
41 graphics CLOSED 42 nameserver CLOSED 43 nicname CLOSED
44 mpm-flags CLOSED 45 mpm CLOSED 46 mpm-snd CLOSED
47 ni-ftp CLOSED 48 auditd CLOSED 49 login CLOSED
50 re-mail-ck CLOSED 51 la-maint CLOSED 52 xns-time CLOSED
53 domain CLOSED 54 xns-ch CLOSED 55 isi-gl CLOSED
56 xns-auth CLOSED 57 CLOSED 58 xns-mail CLOSED
59 CLOSED 61 ni-mail CLOSED 62 acas CLOSED
64 covia CLOSED 65 tacacs-ds CLOSED 66 sql*net CLOSED
67 bootps CLOSED 68 bootpc CLOSED 69 tftp CLOSED
70 gopher CLOSED 71 netrjs-1 CLOSED 72 netrjs-2 CLOSED
73 netrjs-3 CLOSED 74 netrjs-4 CLOSED 75 CLOSED
76 deos CLOSED 77 CLOSED 78 vettcp CLOSED
79 finger CLOSED 80 www-http CLOSED 81 hosts2-ns CLOSED
82 xfer CLOSED 83 mit-ml-dev CLOSED 84 ctf CLOSED
85 mit-ml-dev CLOSED 86 mfcobol CLOSED 87 CLOSED
88 kerberos CLOSED 89 su-mit-tg CLOSED 90 dnsix CLOSED
91 mit-dov CLOSED 92 npp CLOSED 93 dcp CLOSED
94 objcall CLOSED 95 supdup CLOSED 96 dixie CLOSED
97 swift-rvf CLOSED 98 tacnews CLOSED 99 metagram CLOSED
100 newacct CLOSED 101 hostname CLOSED 102 iso-tsap CLOSED
103 gppitnp CLOSED 104 acr-nema CLOSED 105 csnet-ns CLOSED
106 3com-tsmux CLOSED 107 rtelnet CLOSED 108 snagas CLOSED
109 pop2 CLOSED 110 pop3 CLOSED 111 sunrpc CLOSED
112 mcidas CLOSED 113 auth CLOSED 114 audionews CLOSED
115 sftp CLOSED 116 ansanotify CLOSED 117 uucp-path CLOSED
118 sqlserv CLOSED 119 nntp CLOSED 120 cfdptkt CLOSED
121 erpc CLOSED 122 smakynet CLOSED 123 ntp CLOSED
124 ansatrader CLOSED 125 locus-map CLOSED 126 unitary CLOSED
127 locus-con CLOSED 128 gss-xlicen CLOSED 129 pwdgen CLOSED
130 cisco-fna CLOSED 131 cisco-tna CLOSED 132 cisco-sys CLOSED
133 statsrv CLOSED 134 ingres-net CLOSED 135 loc-srv CLOSED
136 profile CLOSED 137 netbios-ns CLOSED 138 netbios-dgm CLOSED
139 netbios-ssn CLOSED 140 emfis-data CLOSED 141 emfis-cntl CLOSED
142 bl-idm CLOSED 143 imap2 CLOSED 144 news CLOSED
145 uaac CLOSED 146 iso-tp0 CLOSED 147 iso-ip CLOSED
148 cronus CLOSED 149 aed-512 CLOSED 150 sql-net CLOSED
151 hems CLOSED 152 bftp CLOSED 153 sgmp CLOSED
154 netsc-prod CLOSED 155 netsc-dev CLOSED 156 sqlsrv CLOSED
157 knet-cmp CLOSED 158 pcmail-srv CLOSED 159 nss-routing CLOSED
160 sgmp-traps CLOSED 161 snmp CLOSED 162 snmptrap CLOSED
163 cmip-man CLOSED 164 cmip-agent CLOSED 165 xns-courier CLOSED
166 s-net CLOSED 167 namp CLOSED 168 rsvd CLOSED
169 send CLOSED 170 print-srv CLOSED 171 multiplex CLOSED
172 cl/1 CLOSED 173 xyplex-mux CLOSED 174 mailq CLOSED
175 vmnet CLOSED 176 genrad-mux CLOSED 177 xdmcp CLOSED
178 nextstep CLOSED 179 bgp CLOSED 180 ris CLOSED
181 unify CLOSED 182 audit CLOSED 183 ocbinder CLOSED
184 ocserver CLOSED 185 remote-kis CLOSED 186 kis CLOSED
187 aci CLOSED 188 mumps CLOSED 189 qft CLOSED
190 gacp CLOSED 191 prospero CLOSED 192 osu-nms CLOSED
193 srmp CLOSED 194 irc CLOSED 195 dn6-nlm-aud CLOSED
196 dn6-smm-red CLOSED 197 dls CLOSED 198 dls-mon CLOSED
199 smux CLOSED 200 src CLOSED 201 at-rtmp CLOSED
202 at-nbp CLOSED 203 at-3 CLOSED 204 at-echo CLOSED
205 at-5 CLOSED 206 at-zis CLOSED 207 at-7 CLOSED
208 at-8 CLOSED 209 tam CLOSED 210 z39.50 CLOSED
211 914c/g CLOSED 212 anet CLOSED 213 ipx CLOSED
214 vmpwscs CLOSED 215 softpc CLOSED 216 atls CLOSED
217 dbase CLOSED 218 mpp CLOSED 219 uarps CLOSED
220 imap3 CLOSED 221 fln-spx CLOSED 222 rsh-spx CLOSED
223 cdc CLOSED 243 sur-meas CLOSED 245 link CLOSED
246 dsp3270 CLOSED 344 pdap CLOSED 345 pawserv CLOSED
346 zserv CLOSED 347 fatserv CLOSED 348 csi-sgwp CLOSED
371 clearcase CLOSED 372 ulistserv CLOSED 373 legent-1 CLOSED
374 legent-2 CLOSED 375 hassle CLOSED 376 nip CLOSED
377 tnETOS CLOSED 378 dsETOS CLOSED 379 is99c CLOSED
380 is99s CLOSED 381 hp-collector CLOSED 382 hp-managed-node CLOSED
383 hp-alarm-mgr CLOSED 384 arns CLOSED 385 ibm-app CLOSED
386 asa CLOSED 387 aurp CLOSED 388 unidata-ldm CLOSED
389 ldap CLOSED 390 uis CLOSED 391 synotics-relay CLOSED
392 synotics-broker CLOSED 393 dis CLOSED 394 embl-ndt CLOSED
395 netcp CLOSED 396 netware-ip CLOSED 397 mptn CLOSED
398 kryptolan CLOSED 400 work-sol CLOSED 401 ups CLOSED
402 genie CLOSED 403 decap CLOSED 404 nced CLOSED
405 ncld CLOSED 406 imsp CLOSED 407 timbuktu CLOSED
408 prm-sm CLOSED 409 prm-nm CLOSED 410 decladebug CLOSED
411 rmt CLOSED 412 synoptics-trap CLOSED 413 smsp CLOSED
414 infoseek CLOSED 415 bnet CLOSED 416 silverplatter CLOSED
417 onmux CLOSED 418 hyper-g CLOSED 419 ariel1 CLOSED
420 smpte CLOSED 421 ariel2 CLOSED 422 ariel3 CLOSED
423 opc-job-start CLOSED 424 opc-job-track CLOSED 425 icad-el CLOSED
426 smartsdp CLOSED 427 svrloc CLOSED 428 ocs_cmu CLOSED
429 ocs_amu CLOSED 430 utmpsd CLOSED 431 utmpcd CLOSED
432 iasd CLOSED 433 nnsp CLOSED 434 mobileip-agent CLOSED
435 mobilip-mn CLOSED 436 dna-cml CLOSED 437 comscm CLOSED
438 dsfgw CLOSED 439 dasp CLOSED 440 sgcp CLOSED
441 decvms-sysmgt CLOSED 442 cvc_hostd CLOSED 443 https CLOSED
444 snpp CLOSED 445 microsoft-ds CLOSED 446 ddm-rdb CLOSED
447 ddm-dfm CLOSED 448 ddm-byte CLOSED 449 as-servermap CLOSED
450 tserver CLOSED 512 exec CLOSED 513 login CLOSED
514 cmd CLOSED 515 printer CLOSED 517 talk CLOSED
518 ntalk CLOSED 519 utime CLOSED 520 efs CLOSED
525 timed CLOSED 526 tempo CLOSED 530 courier CLOSED
531 conference CLOSED 532 netnews CLOSED 533 netwall CLOSED
539 apertus-ldp CLOSED 540 uucp CLOSED 541 uucp-rlogin CLOSED
543 klogin CLOSED 544 kshell CLOSED 550 new-rwho CLOSED
555 dsf CLOSED 556 remotefs CLOSED 560 rmonitor CLOSED
561 monitor CLOSED 562 chshell CLOSED 564 9pfs CLOSED
565 whoami CLOSED 570 meter CLOSED 571 meter CLOSED
600 ipcserver CLOSED 606 urm CLOSED 607 nqs CLOSED
608 sift-uft CLOSED 609 npmp-trap CLOSED 610 npmp-local CLOSED
611 npmp-gui CLOSED 634 ginad CLOSED 666 mdqs CLOSED
704 elcsd CLOSED 709 entrustmanager CLOSED 729 netviewdm1 CLOSED
730 netviewdm2 CLOSED 731 netviewdm3 CLOSED 741 netgw CLOSED
742 netrcs CLOSED 744 flexlm CLOSED 747 fujitsu-dev CLOSED
748 ris-cm CLOSED 749 kerberos-adm CLOSED 750 rfile CLOSED
751 pump CLOSED 752 qrh CLOSED 753 rrh CLOSED
754 tell CLOSED 758 nlogin CLOSED 759 con CLOSED
760 ns CLOSED 761 rxe CLOSED 762 quotad CLOSED
763 cycleserv CLOSED 764 omserv CLOSED 765 webster CLOSED
767 phonebook CLOSED 769 vid CLOSED 770 cadlock CLOSED
771 rtip CLOSED 772 cycleserv2 CLOSED 773 submit CLOSED
774 rpasswd CLOSED 775 entomb CLOSED 776 wpages CLOSED
780 wpgs CLOSED 786 concert CLOSED 800 mdbs_daemon CLOSED
801 device CLOSED 996 xtreelic CLOSED 997 maitrd CLOSED
998 busboy CLOSED 999 garcon CLOSED 1000 cadlock CLOSED


SCAN RESULTS:
Your system is secured. No open ports were found.
PROCEED TO SCAN PHASE 2
 
en scan 2


Results of Security Risk Scan


Network Vulnerability Scan
At Risk! Show Details
Hide Details
Scan Description:
Attempts to create a connection with, or test for access to your computer to see if unknown or unauthorized Internet communication is allowed.

Scan Results:
WARNING!! The scan was able to make a connection with your computer. This means that you could potentially be vulnerable to attack by malicious people who gain access to your computer and can potentially view, copy, delete, or modify data on your computer.

To Fix This Problem:

Install a personal firewall on your computer
If you have a firewall installed on your computer it may not be properly configured to make you computer invisible on the Internet
Internet connections to your computer are made through ports. To learn more about the status of ports on your computer, see: Network Vulnerability port status


NetBIOS Availability Scan
Safe Show Details
Hide Details
Scan Description:
Attempts to create a connection with, or test for access to your computer's information.

Scan Results:
The scan could not access your computer's information. However, this does not mean you are completely safe. A properly configured personal firewall will prevent your computer's information from being visible to hackers.

Active Trojan Horse Scan
Safe Show Details
Hide Details
Scan Description:
Attempts to create a connection with, or test for access to your computer through methods commonly used by Trojan horses.

Scan Results:
The scan did not create a connection with your computer. However, this does not mean you are completely safe. You should regularly scan your computer with an antivirus program and install a personal firewall to prevent unauthorized access to your computer over the Internet.

Trojan horse applications allow access to your computer through ports. To learn more about the status of ports on your computer, see: Active Trojan Horse port status


Antivirus Product Scan
Safe Show Details
Hide Details
Scan Description:
Searches your computer for a recent version of a commonly used antivirus program. The results show if an antivirus program was detected and whether or not it is a recent version.

Scan Results:
You are at low risk from computer viruses. Your PC has a recent version of a commonly used antivirus program. Current antivirus software helps to provide comprehensive protection from computer viruses.

Antivirus Definition Scan
Safe Show Details
Hide Details
Scan Description:
Checks the date of virus definitions for software detected in the Antivirus Product Scan. Definitions older than two weeks are considered out of date. Current virus definitions are an essential component of any virus protection system. Antivirus software uses virus definitions to detect and repair viruses.

Scan Results:
Your computer contains recent virus definitions. Current virus definitions help to provide comprehensive protection from computer viruses.

Browser Privacy Scan
At Risk! Show Details
Hide Details

hier staan 2 poorten open hoe maak ik die dicht?
 
deze laatste resultaten zijn die van de scan van Symantec???

welke poorten stonden open??

verder heb je ook de Phase 2 scan van blackcode gedaan??

groetjes
 
deze 2 poorten staan open
network vulnerrability scan

browser privery scan

deze scan is van symantec


en die 2de scan van blackcode lukte niet pakte de pagina niet
 
Over die Browserprivacy zou ik me nog niet zo'n zorgen maken, die geeft Symantec wel heel erg snel, over die networkvulnerability wel!!

IK bedoel eigenlijk welke poort stond open. Bijv poort 139 of 445.

Waarschijnlijk staat poort 139 open, denk ik

139 NetBIOS. NetBIOS is used for Windows File & Print sharing. If port 139 is open, your computer is open to sharing files over the Internet. Other components of NetBIOS can expose your computer name, workgroup, user name, and other information. To learn more about preventing connections to your NetBIOS ports, see: NetBIOS Information and Configuration Instructions

Onderaan de scan staat namelijk een link Network Vulnerability Port Status, die laat zien welke poort het betreft...

Grtz
 
Laatst bewerkt:
Inderdaad. De browser privacy kun je alleen krijgen door Norton internet security erop te zetten en dan de "privacy control" aan te zetten.
De uitslag van de test nu betekend dat sites waar je surft jouw IP adres, versie windows en versie I.E> kunnen zien. Ik zou me inderdaad daar geen zorgen over maken.

Maar de networkvulnerability is open en dat betekend dus dat jouw firewall geen moer tegenhoud op dit ogenblik. Dus dit moet echt dicht want anders kan elke hacker erin bij je.
 
Laatst bewerkt:
ok en hoe kan ik dat dicht maken moet ik wat in de router instellen of op andere manier?
 
ik heb trouwens geen vaste ip veranderd steeds ook in de router dus dat is wel goed
 
welke poort??

@APOCALYPSE

Je moet dus eerst weten welke poort, dus doe nogmaals de securityscan van Symantec, als ie klaar is dan kijken bij de Network Vulnerability Port Status om te kijken welke poort het betreft.

groetjes

edit

verder hoeft een open poort nog geen probleem te zijn, want als je een mailserver of webserver hebt draaien moeten deze poorten resp. 25 en 80 juist openstaan..
 
Laatst bewerkt:
ik zou eerst eens een goede virus scanner over je pc halen. en een trojan scanner.

daarna is goed in de config van je router kijken, NAT zit zo inelkaar dat niemand naar jou pc kan conntecten als jou pc een client staat die ergens heel wil connecten. staat niet toevalig DMZ functie aan ? of een andere funtie die poorten direct door stuurt.

verder op die norton site kan je als je wat door klikt pcies zien welke network poorten der openstaan. Welke geeft ie pcies aan?
 
Status
Niet open voor verdere reacties.
                    Steun ons                    

Nieuwste berichten

Terug
Bovenaan Onderaan