locked work station.
#1
locked work station.
I left my computer on while I was in class today and when I got home, the screen had a window on the log-in screen that said "This workstation has been locked by Zues/Administrator. you must be a member of the administrators group to unlock this workstation." When I put in my user name/password to unlock it, it said that my password was incorrect. Both user accounts on my welcome screen were unresponsive to the password. It said that the password was incorrect for both of them. I had to end up restarting it and starting the computer in safe mode. From there, I went and checked the user groups and found a new administrator account that was never there before. This is the "backdoor" account. I reset my password and can now log in. I'm only worried that it'll happen again. How exactly COULD this happen, that my computer would get locked while I was away, then my administrator password be CHANGED, and a new account added?
computerhacked.jpg
computerhacked.jpg
#2
Senior Member
True Car Nut
Join Date: Jan 2006
Location: NEBF:06,07 | NYBF:06,07 | ONBF:06,07 | CNBF:06 & more............
Posts: 8,029
Likes: 0
Received 0 Likes
on
0 Posts
sounds like either you back a virus or someone hacked into your pc
also what type of internet connection do you have?
and do you have a router?
also what type of internet connection do you have?
and do you have a router?
#4
Senior Member
True Car Nut
Join Date: Jan 2006
Location: NEBF:06,07 | NYBF:06,07 | ONBF:06,07 | CNBF:06 & more............
Posts: 8,029
Likes: 0
Received 0 Likes
on
0 Posts
a hardware firewall is the best to use...
software ones dont always stop everything.
with a hardware firewall you dont even have a IP address that someone out side can see, so thay cant even get throw to your pc if they cant get throw the router.
Brands to get:
Linksys
D-Link
Netgear
Cisco- if you have $250 + to spend
A good place to get one at is NewEgg www.newegg.com
software ones dont always stop everything.
with a hardware firewall you dont even have a IP address that someone out side can see, so thay cant even get throw to your pc if they cant get throw the router.
Brands to get:
Linksys
D-Link
Netgear
Cisco- if you have $250 + to spend
A good place to get one at is NewEgg www.newegg.com
#5
Senior Member
True Car Nut
Originally Posted by bandit
a hardware firewall is the best to use...
software ones dont always stop everything.
with a hardware firewall you dont even have a IP address that someone out side can see, so thay cant even get throw to your pc if they cant get throw the router.
Brands to get:
Linksys
D-Link
Netgear
Cisco- if you have $250 + to spend
A good place to get one at is NewEgg www.newegg.com
software ones dont always stop everything.
with a hardware firewall you dont even have a IP address that someone out side can see, so thay cant even get throw to your pc if they cant get throw the router.
Brands to get:
Linksys
D-Link
Netgear
Cisco- if you have $250 + to spend
A good place to get one at is NewEgg www.newegg.com
and yes then can stop everything if configured correctly.
#6
Senior Member
True Car Nut
Join Date: Jan 2006
Location: NEBF:06,07 | NYBF:06,07 | ONBF:06,07 | CNBF:06 & more............
Posts: 8,029
Likes: 0
Received 0 Likes
on
0 Posts
Still its just software, you can still see you IP. if there is a whole in the software, it will leak.
but yes they do work better then not haveing anything..
but for $35-50 you can get a router and also be able to hook up more then one PC
but yes they do work better then not haveing anything..
but for $35-50 you can get a router and also be able to hook up more then one PC
#7
Senior Member
True Car Nut
Join Date: Jan 2006
Location: NEBF:06,07 | NYBF:06,07 | ONBF:06,07 | CNBF:06 & more............
Posts: 8,029
Likes: 0
Received 0 Likes
on
0 Posts
heres some good info to make your PC run faster and safer
http://web.archive.org/web/200504010...servicecfg.htm
http://web.archive.org/web/200504010...servicecfg.htm
#8
I have a linksys router but it doesn't have a firewall I don't think. I looked through my history on firefox and there'* a history for this which is kind of suspicious to me..
This is from 9 this morning according to the firefox history.
http://192.168.0.1/com/gatewayreset/
http://192.168.0.1/com/decomission
http://192.168.0.1/com/decomissionmodem
http://192.168.0.1/com/resetmodem
http://192.168.0.1/com/closeconnection
http://192.168.0.1/com/satellitelink
http://192.168.0.1/com/gateway
http://192.168.0.1/com/firewall
192.168.0.1 is obviously the address for my router, 192.168.1.1 is my router. My internet connection is Direcway and it'* 'supposeod' to have all ports blocked unless you have the PRO package, which I don't. I can't even use remote desktop from here, so I don't know how someone could have remotely done this stuff.. No one else has access to my computer though, I'm the only one that uses it. This is wierd.
:?
This is from 9 this morning according to the firefox history.
http://192.168.0.1/com/gatewayreset/
http://192.168.0.1/com/decomission
http://192.168.0.1/com/decomissionmodem
http://192.168.0.1/com/resetmodem
http://192.168.0.1/com/closeconnection
http://192.168.0.1/com/satellitelink
http://192.168.0.1/com/gateway
http://192.168.0.1/com/firewall
192.168.0.1 is obviously the address for my router, 192.168.1.1 is my router. My internet connection is Direcway and it'* 'supposeod' to have all ports blocked unless you have the PRO package, which I don't. I can't even use remote desktop from here, so I don't know how someone could have remotely done this stuff.. No one else has access to my computer though, I'm the only one that uses it. This is wierd.
:?
#9
Senior Member
True Car Nut
Join Date: Jan 2006
Location: NEBF:06,07 | NYBF:06,07 | ONBF:06,07 | CNBF:06 & more............
Posts: 8,029
Likes: 0
Received 0 Likes
on
0 Posts
then someone or somthing downloaded a virus that added a new user to your PC, good thing you have a router with a firewall, cuz if you didn't your computer may not be working right now
#10
Senior Member
True Car Nut
Join Date: Feb 2006
Location: Melrose
Posts: 4,596
Likes: 0
Received 0 Likes
on
0 Posts
Someone probably got access to your PC. You can run a software firewall, but it becomes a nuisance when it asks you every time, based on your settings if you want to allow your computer to connect to the requested site.
Also, you may want to find out if your cable modem has a configuration page where you can edit the DMZ or Demilitarized Zone zone, which allows a straight connection to the net without restrictions, which could allow someone to get in. Usually the configuration page will have an IP address. Call your service provider to find out if you have one or access it and check it.
Also, you may want to find out if your cable modem has a configuration page where you can edit the DMZ or Demilitarized Zone zone, which allows a straight connection to the net without restrictions, which could allow someone to get in. Usually the configuration page will have an IP address. Call your service provider to find out if you have one or access it and check it.