Do you notice anything abnormal on this netstat -ano cmd command?
1: https://imgur.com/a/UGSbj
2: https://imgur.com/a/SfNOJ
3: https://imgur.com/a/4mMvo
I just looked into this and you can apparently tell if you’re being hacked by using the netstat -b cmd command, too:
1: https://imgur.com/a/DlmCr
2: https://imgur.com/a/7aVmI
[s]I type in Google: “what is my IP” and this IP address appears: https://imgur.com/a/2DWES
Why is it coming out like this? It doesn’t look like a normal IP address to me. [/s]
On AVAST, when I go to: Protection > Firewall > Settings > Friends,
These IP addresses appear (nobody I know of have added these): https://imgur.com/a/8y4tP <<<< is this normal or do these have to be added by a user manually?
I looked at the Firewall logs a couple of days ago, there was a lot of blocked traffic. Now it seems to have been cleared. Maybe the hackers saw it, and got rid of it?
Firewall logs (rules): https://imgur.com/a/HtEAu
Long story short:
I gave some hackers some shit earlier in the year on IRC (at the time I wasn’t aware that they were hackers). Somehow I think they’re sending malware through the servers - either the admins of the network are doing dodgy shit, or they’ve befriended an admin, and gained access to the servers. These are just assumptions, but how else could they send malware through IRC without somebody accepting a file? I think my computer was part of a Botnet, and they gained a lot of personal information on me. Well, I know my devices were part of a Botnet or something similar because they leaked personal stuff from my mobile phone. My Mum’s email address was on my email inbox, and I’m concerned they sent her malware and she clicked on it. They were also saying “do you like Sonic” and stuff, and my little brother loves Sonic. Sonic is his background picture on this laptop, too. ![]()
I did a Home Network Security scan on her computer, and this message popped up: “Your router has been hacked and its DNS settings have been modified to serve malicious contents”, as well as other network concerns.
My Mum’s router username and password were the default log-in details (my family don’t know about stuff like this, I didn’t take much concern into this either until recently). I tried to change the routers default password to something else several times, but it wouldn’t allow me to. I tried to call her ISP to fix this, but they couldn’t fix it either, so we had to get another router.
I know the hackers are on my Mum’s/Brother’s laptop still, even after several anti-virus scans.
I did several factory resets on my laptops that were infected, and somehow they were still on. I suspect the malware could be stored elsewhere other than the hard drive, such as the BIOS etc? I don’t really want to fuck my Mum’s laptop up if I do something wrong.