Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

NT AUTHORITY/system Ip scanning me hacking maybe what to do?

Status
Not open for further replies.

JPirate

Programmer
Aug 11, 2003
44
PR
OK ... A few days ago... a message box on my computer emerged saying i had to save and close all my programs in use... cause a remote shutdown was in progress i had only one minute... :( ... so I did... It shutdown.... I was using a conection witch was not firedwalled at the moment (I THOUGHT) ... not sure... The User who said was shutting my computer down.. was (NT AUTHORITY/ SYSTEM)"CAN HE TURN OFF MY FIREWALL REMOTELY? then when I restarted my pc... an unknown file was in my start folder.. and my computer did not recognize which program to use to open it... I found it very... suspicious.. so i deleted... I thought i had firedwall that conection.. ... using built in OS firewall... i did a system restore... and used for a while the "netstat" command in MS DOS... to check out regularly if someone was on my pc... did not find anything iregular... now today... it happened again... :( ... i thought the problem was over... but the same user called (NT AUTHORITY/ SYSTEM) restarted this time my computer :( ... I AM REALLY MAD
now checking out this forums someone gave me the idea to check my error log files... OMG!!!!!!! A LOT OF ERRORS FROM NT AUTHORITY / SYSTEM .. errors about REGISTRY"S... and something saying ... that the NT AUTHORITY/ SYSTEM ... was trying to START some controls in my system like NAVAP , and BACKGROUND INTELLIGENT TRANSFER SERVICES STUFF LIKE THAT.... someone pls please help me I want to stop this.... and i want to get him back! I will b vry thnkful i want to know ... what is causing this.. .how is he doing this??? Would like to learn commands on MS DOS... anything you can help :) PLZ!!!! WHERE DID HE SCAN MY IP???? through msn messenger ???? could that be done? .. .plz heelp!!!!!!
 
Howdy:

You are about post #20 on this site about this problem..

thread779-627674
 
FYI, restoring your system apparently won't solve the problem either!!!!

The MSBlast worm has already attacked 100,000 computers - I'm also one of the unlucky ones.
 
I'm got the same with my system and I hope some can help us. 100,001 computers attacked at least
 
Follow Murray's advice and go here:

thread 779-627674

Everything is spelled out. I've already secured over a dozen client/relative machines myself...
 
my computer is shutting down on his own
I think I Have a virus...
what do u think?
 
chadrac
Any reason that you haven't followed the advice above (Thread779-627674 ) instead trying to get your name in print?

________________________________________________________________
If you want to get the best response to a question, please check out FAQ222-2244 first

'People who live in windowed environments shouldn't cast pointers.'
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top