This Forum has been archived there is no more new posts or threads ... use this link to report any abusive content
==> Report abusive content in this page <==
Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
How to get a hacker completely out of my laptop?
02-27-2013, 07:29 AM
Post: #1
How to get a hacker completely out of my laptop?
So, I stupidly downloaded a RAT from a guy, and I didn't find out until a day later when he joked about it. They were able to move my mouse around and open my CD tray. I immediately turned my laptop off and took the battery out then consulted some friends. I ended up downloading virus protection, malware protection, and running both of those. I made sure to change my passwords to everything, but low and behold he's still in my computer and was even able to take some of my personal photos and share them online. I'm so done. I youtubed how to see if he was still in my computer by going to me netstat and of course it informed me a few things were established, but the window keeps closing and won't load everything. I even changed my wifi password. I just want him out of my laptop. I wanted to just do a full system restore and erase everything but apparently windows 7 doesn't let you do that, and i don't have the disk to where i can re-install windows. I'm fed up. If anyone could help me I'd be much obliged. I run a few big facebook pages, and if you have one I'd be willing to share yours in return for help. Thanks.
I'd rather not deal with anyone personally other than through your answers, unless you give me a solution to my problem. As you can imagine I was naive once and now I've had this happen, I'm a little untrusting of everyone now. I hope you can understand.

Ads

Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #2
 
See if you can get a OS disc from a friend or buy one cheaply off ebay. Turn the internet off of your computer completely and look for any odd applications.

Ads

Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #3
 
Hi,

Send me a private message. I may be able to help.

*Edit: Understood. I didn't want to reply with a huge answer because I have a step process I wanted to ask you to follow. I've made myself available on Yahoo Messenger. If you decide to contact me, I'll be more than happy to help. Good luck.
Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #4
 
If you want to stop their manipulation, you need to disconnect from all sorts of communications to the internet. Then see if you can uninstall whatever it is you downloaded. If not, then it's reinstall time. BACKUP all your important files, take note of what programs you need to reinstall. Now follow the steps here: http://windows.microsoft.com/en-AU/windo...ery-method

You should choose the factory restore option.
Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #5
 
As you've discovered, the only sure way to do this, is to re-install your OS. Windows 7 will allow you to do a System Restore, but this could get messy if you're not experienced. My best suggestion is to download a new version of Windows 7 (assuming you have a key) and burn it to DVD.
http://www.mytechguide.org/10042/windows...r-download

My next best suggestion is to switch off all connections, including Wireless and LAN, and open Task Manager, select Performance, then Resource Monitor. Select the Network Tab, and expand Processes with Network Activity. Expand this, and then switch on your usual connection, expand it to the size of your screen, and you'll see which applications are in use on your network. If your hacker is looking, it'll take up the majority of your link, so sort by Total (B/sec) and pop to the top.
Right click it, and make a note of the name before ending the process.
Now you have the name of the process, you can do some further investigation into getting rid of it, if you're technical enough, you may be able to search for, and delete the process from wherever it's installed, so although some of the software will still be on your PC, it won't be able to run.
These are the steps I would take, but being in support for a long time, I'd expect to find some stumbling blocks along the way.
It's FAR better to re-install Windows, ensuring your firewall is on, and ensure proper anti-virus software is installed, than to try and reverse engineer it using other options.
Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #6
 
After cleaning your PC with portable CCleaner, run a full system scan with updated definitions from malwarebytes & superantispyware applications while completely off the internet on your PC.

You may need to download these apps + defs on a CD/flash disk to import to your PC to run.
Check your startup items under CCleaner tools to verify only the usual items load.

Once you remove the rat(s), disable system restore to remove it from restore points, then re-enable.
I believe this should be able to get rid of the RAT/Keylogger he uses.

If not, there are other utilities such as Kaspersky TDSS killer.

Manual Removal:

1) Enable both hidden & system files view in Windows explorer.
2) Search for all files on C:
3) Group by date AFTER search completes, then scan date range of problem.
4) If you find the file(s), delete. If unable to delete (in use) use unlocker to remove them.
5) Disable hidden & system files views.

ALWAYS use caution & ask someone if your not certain what your doing.
Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #7
 
I’m no expert when it comes to hacking, but…

I run XP on my computer. If you run a different version of Windows, this path may vary.

Firstly, on your desktop click Start\Control Panel\System. Now click on the Remote tab.

Make sure there is no tick in the box labelled "Allow Remote Assistance invitations to be sent from this computer".

Make sure there is no tick in the box labelled "Allow users to connect remotely to this computer".

Now click the Apply button, then click the OK button and return to your desktop.

Also, whenever a web site asks if you wish your password to be remembered, always say no.

If you run Firefox, click Tools\Options\Security. Under Passwords, make sure there is no tick in the box labelled "Remember passwords for sites". Now click the OK button.

If you use a different browser, I'm sure there will be similar changes you should make.

Once that's done...

Try this:

Boot your computer to the Safe Mode menu screen. You do this by repeatedly pressing F8 as soon as you boot up. Once there, use the arrow keys to highlight Safe Mode with Networking. Continue to boot from there, by pressing Enter. You will now see some drivers being loaded. There will be a pause at some point. This usually lasts for no more than 30 seconds.

Once at your desktop, download this free package.

When you click on the download button, wait for a few seconds and the download box will appear, without you having to enter your name or email address.

Save it to your desktop, unzip it...click on start.exe...then click on Emergency Kit Scanner. Wait for it to open (this may take a couple of minutes), then get updates and run a Deep Scan (the scan may take a while):

http://www.emsisoft.com/en/software/eek/

Hope this helps.
Find all posts by this user
Quote this message in a reply
02-27-2013, 07:37 AM
Post: #8
 
I’m no expert but I think you can refer other answers because I don't know the exact answer ~
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)