| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 138420 | 2014-11-27 06:34:00 | PC hacked? | lakewoodlady (103) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 1389048 | 2014-11-27 06:34:00 | Hello, Went onto my pc today and suddenly found that I did not have to login with my password! Has the computer been hacked? My son uses the PC as well and just a few weeks ago his Origin account was hacked by some b%#$%d Russian low life! I immediately removed personal info files, but have no idea what the perpetrators have found out! What is best thing to do? LL |
lakewoodlady (103) | ||
| 1389049 | 2014-11-27 06:43:00 | Went onto my pc today and suddenly found that I did not have to login with my password! Has the computer been hacked? Not necessarily. Bit more details would be helpful. Was the computer turned on all the time or Off ? Who else has access to the computer ? If the computer was turned off, have a look in eventvwr that will tell you in the windows / system logs exactly what time it was on. Do you know how easy it is to bypass a Windows passworded Computer even if you dont know the password :nerd: I have to do it all the time. Talk to the PC owner- 1st Question I ask if it has to go back to the workshop.Do you have a password to log on when starting ???? - Most either say NO or if they do they give the password. The ones that say NO, you'd be surprised -- get it back fire it up and what do you know--- Password protected :annoyed: Never mind, by pass it or remove it in about 1-2 minutes. XP is so simple its laughable ;) |
wainuitech (129) | ||
| 1389050 | 2014-11-27 07:38:00 | [QUOTE=wainuitech;1211165]Not necessarily . Bit more details would be helpful . Was the computer turned on all the time or Off ? Who else has access to the computer ? If the computer was turned off, have a look in eventvwr that will tell you in the windows / system logs exactly what time it was on . Do you know how easy it is to bypass a Windows passworded Computer even if you dont know the password :nerd: I have to do it all the time . Talk to the PC owner- 1st Question I ask if it has to go back to the workshop . Do you have a password to log on when starting ???? - Most either say NO or if they do they give the password . The ones that say NO, you'd be surprised -- get it back fire it up and what do you know--- Password protected :annoyed: Never mind, by pass it or remove it in about 1-2 minutes . XP is so simple its laughable ;)[/QUOTE I turned computer off last night . It was password protected, always has been . I turned it on this afternoon and it did not ask for password . That is weird I thought! Son uses computer as well as me, but had not logged on since yesterday, anyway, he did not do anything different, or change password settings in any way . BUT as I said, his Origin account has been hacked . Is there someway they could have got into it from the Origin hack? He has since removed the Origin account and the weird "AMD gaming evolved" application which came in with something else . I will check out the eventvwr now . LL |
lakewoodlady (103) | ||
| 1389051 | 2014-11-27 08:23:00 | Do a check and see if it was turned on between when you know it it was turned off and then on today. Open the eventvwr - in the Windows / System Logs, you'll see when it was shut down last night - if it was turned on before you thought today it will show. Example, in the red box on this PC you can see when it was shutdown last night and turned on today: 6052 If someone got in then they would have had to have done it while the PC was on last night while it was on (before the password was removed). |
wainuitech (129) | ||
| 1389052 | 2014-11-27 08:55:00 | Do a check and see if it was turned on between when you know it it was turned off and then on today. Open the eventvwr - in the Windows / System Logs, you'll see when it was shut down last night - if it was turned on before you thought today it will show. Example, in the red box on this PC you can see when it was shutdown last night and turned on today: 6052 If someone got in then they would have had to have done it while the PC was on last night while it was on (before the password was removed). Ok, it shows in the eventvwr that it was definitely not on between the time I shut it down last night at 10.28 pm till I turned it on at 6.08 tonight. Maybe it is just one of those weird random things which happen with Windows (7)? I posted a HJT for someone to look at in case anything is on that shouldn't be. Son has now removed Origin, but is still highly pissed with Russian hacker! I have changed the password, (for all the good it might be, as you say easy to hack ) LL |
lakewoodlady (103) | ||
| 1389053 | 2014-11-27 09:15:00 | Ok, it shows in the eventvwr that it was definitely not on between the time I shut it down last night at 10.28 pm till I turned it on at 6.08 tonight. Maybe it is just one of those weird random things which happen with Windows (7)? I posted a HJT for someone to look at in case anything is on that shouldn't be. Son has now removed Origin, but is still highly pissed with Russian hacker! I have changed the password, (for all the good it might be, as you say easy to hack ) LL Answered it, there is one suspect. and suggestions. ( and links) |
wainuitech (129) | ||
| 1389054 | 2014-11-27 09:42:00 | Answered it, there is one suspect. and suggestions. ( and links) Thanks, yes have removed Boonty games from HJT, Malwarebytes came up clean, as did AdWcleaner. Can't think of anything else, at the moment, off to bed now. Hopefully all is ok, changed several passwords for things just in case! Cheers, LL |
lakewoodlady (103) | ||
| 1389055 | 2014-11-27 18:35:00 | Hello, Went onto my pc today and suddenly found that I did not have to login with my password! My son uses the PC as well So he removed the need for the password... |
pctek (84) | ||
| 1389056 | 2014-11-27 19:23:00 | So he removed the need for the password... Ur no, he didn't. LL |
lakewoodlady (103) | ||
| 1 | |||||