• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 151
  • Last Modified:

Password Changed automatically

Hi,

the password of my Windows XP was changed automatically by some reason. Also the password of my internet acces through dial-up doesn't work anymore.
This all started to happen when I installed ITunes from the Ipod CD.

I didn't download anything but some ITunes files and I didn't open any attachments because I got none.

The thing is that I can access my machine now because I just hacked it with Knoppix. Nevertheless I don't feel good about this because I also want to use Netbanking.

The password changing happend over the night.

I have a firewall installed but no Antivirus. But I will check with the Antivirus as soon as possible.

Any suggestions how this could happen because I also don't know about any virus changing passwords of Windows Accounts and even the password of my Login
for the internet provider. (In fact this password is selected by the provider and I shouldn't be able to change it myself)

Thanks for any ideas.
0
michi3012
Asked:
michi3012
1 Solution
 
ComputronCommented:
It sounds to me like some remote software is/has been installed and running. If you're using XP pro, see if you have terminal services running and perhaps someone is using RDP to access. Also check your users accounts to see if there are any unknown users setup. Also go to a command prompt and do a netstat -an and see if you have anything listening. Some remote package may be listening that someone is coming in with. Otherwise a keylogger may be giving out info. Its hard to say for sure without more info, but this is a start.

Check these online scanners
1. http://us.mcafee.com/root/mfs/default.asp?cid=9059 
2. http://security.symantec.com/
3. http://housecall.trendmicro.com/ 
4. http://www.pandasoftware.com/activescan/com/activescan_principal.htm
5. http://www.pcpitstop.com/antivirus/default.asp
Stinger - http://vil.nai.com/vil/stinger
0
 
michi3012Author Commented:
I thought about the same, thanks for you suggestions I will try them and see if they helped.

This will take a while because I'm at work now.
0
 
masnrockCommented:
Alright, get to using a ton of spyware programs like Adaware, Spybot S&D, and Ewido while your computer's started up in safe mode.

But yeah, someone's got something that's constantly monitoring your account or they're just changing it from the outside.
0
 
imacgoufCommented:
Hi there,

Various causes to your question:

Since you do not have an AntiVirus running, if some malicious sites you visit it will store in your temporary internet folder a threat which may be launched at the next restart etc. Others are chat rooms.

You mentioned you downloaded a few iTunes files ...what are these few itunes files you referring is it mp3 from someone or some sites etc.

If your PC is just a standalone without any file sharing. Disable them and inside your Firewall exception uncheck any other apps which is not needed to be accessed by anyone.

By the way for your information...this is only 1 of such backdoor of many more others
Backdoor.Berbew is a Backdoor Trojan Horse that is downloaded from the Internet by Trojan.Download.Berbew. The Backdoor Trojan steals passwords and delivers them in the form of URL requests to the Web site of the Trojan's creator. Port numbers 7714 and 8546 may be opened for listening (the port numbers may vary).

For full protection in future you should install
Antivirus and antispyware even though you have a firewall.
For Antivirus: Check out on Symantec and others mentioned by the experts
For AntiSpy get Microsoft Windows Defenders http://www.microsoft.com/athome/security/spyware/software/default.mspx 
it is free.





0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now