I left my computer on while I was in class today and when I got home, the screen had a window on the log-in screen that said "This workstation has been locked by Zues/Administrator. you must be a member of the administrators group to unlock this workstation." When I put in my user name/password to unlock it, it said that my password was incorrect. Both user accounts on my welcome screen were unresponsive to the password. It said that the password was incorrect for both of them. I had to end up restarting it and starting the computer in safe mode. From there, I went and checked the user groups and found a new administrator account that was never there before. This is the "backdoor" account. I reset my password and can now log in. I'm only worried that it'll happen again. How exactly COULD this happen, that my computer would get locked while I was away, then my administrator password be CHANGED, and a new account added?

computerhacked.jpg

sounds like either you back a virus or someone hacked into your pc

also what type of internet connection do you have?

and do you have a router?

install a firewall. (I like sygate) I would not use the XP one if my life depended on it.

a hardware firewall is the best to use...
software ones dont always stop everything.

with a hardware firewall you dont even have a IP address that someone out side can see, so thay cant even get throw to your pc if they cant get throw the router.

Brands to get:
Linksys
D-Link
Netgear
Cisco- if you have $250 + to spend

A good place to get one at is NewEgg www.newegg.com

incorrect. software firewalls will work just fine for the average home user.

and yes then can stop everything if configured correctly.

Still its just software, you can still see you IP. if there is a whole in the software, it will leak.

but yes they do work better then not haveing anything..

but for $35-50 you can get a router and also be able to hook up more then one PC

heres some good info to make your PC run faster and safer

http://web.archive.org/web/200504010...servicecfg.htm

I have a linksys router but it doesn't have a firewall I don't think. I looked through my history on firefox and there'* a history for this which is kind of suspicious to me..
This is from 9 this morning according to the firefox history.
http://192.168.0.1/com/gatewayreset/
http://192.168.0.1/com/decomission
http://192.168.0.1/com/decomissionmodem
http://192.168.0.1/com/resetmodem
http://192.168.0.1/com/closeconnection
http://192.168.0.1/com/satellitelink
http://192.168.0.1/com/gateway
http://192.168.0.1/com/firewall


192.168.0.1 is obviously the address for my router, 192.168.1.1 is my router. My internet connection is Direcway and it'* 'supposeod' to have all ports blocked unless you have the PRO package, which I don't. I can't even use remote desktop from here, so I don't know how someone could have remotely done this stuff.. No one else has access to my computer though, I'm the only one that uses it. This is wierd.
:?

then someone or somthing downloaded a virus that added a new user to your PC, good thing you have a router with a firewall, cuz if you didn't your computer may not be working right now

Someone probably got access to your PC. You can run a software firewall, but it becomes a nuisance when it asks you every time, based on your settings if you want to allow your computer to connect to the requested site.

Also, you may want to find out if your cable modem has a configuration page where you can edit the DMZ or Demilitarized Zone zone, which allows a straight connection to the net without restrictions, which could allow someone to get in. Usually the configuration page will have an IP address. Call your service provider to find out if you have one or access it and check it.