Beware hackers are alive and well

[Leafless]

I was just about to complete and post a fairly lengthily response concerning provincial politics category under "3'500 City of Ottawa jobs to be eliminated", concerning post #207, when advised by my anti-virus program detected an unauthorized intrusion from a source I.P. 134.117.137.191 which is also my source I.P., so the hacking is being done right from the same source I.P. as my own and the hacking done on this site.

As a result just prior to posting a dialogue appeared advising me I was not logged in (which is impossible)as I was already in the process of replying. Anyways I pushed the suggested 'save button' nevertheless loosing my entire intended reply.

I have also noticed concerning my personal mail certain messages have bee pre-opened in order I suspect to obtain my I.D.

As a result when posting anything concerning Francophone's I will post short and sweet and not use the quote feature, as this loss of the entire post concerning the same thread as happened previously and is a waste of time and effort. This will force me to post many times concerning the same post I am replying to.

[GostHacked]

I am hoping you have done a san for viruses spyware, malware ect .. right??? If it is comming from an IP that your PC is getting from your ISP, then you have a problem with your PC.

Does this happen on other websites you visit and post on? What browser do you use? It could be something unique with this website and how it interacts with your browser. What security programs do you have ? Any firewalls??

95% of the time it is not someone who is hacking, but a virus or a steath program that got to your drive by some method. An unprotected PC online (no FW AV ect) can get a virus in under 10 minutes. I have seen it where a friend bought a new PC, installed everything, forgot the firewall at least, connected online to get some windows updates and his PC was instantly slammed... I spent the rest of the afternoon reinstalling his windows and having a few beers.

Try this

If you right click on your main windows tool bar, you have the option to select TASK MANAGER. What I suggest is going through that list with Google and find out what the EXEs are for. I have found problems with people computers that way even when a full scan with an antivurus and spyware did not pick up. Or even take a screenshot of your task manager 'Processes' tab.

Even if you suspect someone is hacking you. Stop using that PC where you noticed the problem. Try using another PC to post with. Could be your PC is just having a headache and needs to see a doctor.

[geoffrey]

I always copy my long posts before clicking submit. That way if something happens, I can just paste it again and nothing is lost.

[Leafless]

I am hoping you have done a san for viruses spyware, malware ect .. right??? If it is comming from an IP that your PC is getting from your ISP, then you have a problem with your PC.

I find a lot of these programs significantly slow down the speed of your computer.

I have been on the net for quite a while and always have been fairly safe without using an anti-virus, spyware program of any kind. I find a lot of these programs significantly slow down the speed of your computer.

How do I achieve this, I simply disable everything of importance that would normally allow access to my computer. For instance when I come to this site I enable active scripting and allow paste operations via script and everything works fine and do similar at other sites by enabling only at that time security options to allow me to do whatever I wish to do. If I do get a virus (hardly ever) which is always noticeable one way or other, I simply reload my basic operating system on my special net hard drive and a few other basic programs all within an hour and a half.

I do have a firewall but don't really keep it updated and only use it to warn me and partially identify who is trying to gain access to my computer. To clarify what I was saying and should have said about having the same DNS server address but not the same IP address which is different every time you log on the net is what I meant.

Anyways when I come here at times I develop a personal firewall log of up to about 60-KB and being warned at the same time of someone trying to gain access to my computer usually through port 1026-1027 being described as NET BROWSING, all within in a short time, whereas usually surfing the net for 1-hr it is around 15-20 KB of log page of UDP, TCP protocol intrusion warnings which I understand does not mean much. This individual or whoever is doing this has the same DNS server address as mine in my area and this is when I have strange things happening just prior to posting on this site.

This as happened far to many times to be coincidence by destroying the ability to post, which is just prior to posting a dialogue informs me that I am not logged on to the site which is impossible as I would not be able to reply at all if that was the case. And when you try to save your post by pushing the suggested button, it never works and all is lost.

Geoffrey's idea is a good one, that is, if you have time to copy your post before it gets scrubbed.

[geoffrey]

Do you actually think your being censored Leafless?

[Leafless]

Do you actually think your being censored Leafless?

Certainly.

All you have to do is examine how secretive and manipulating the Liberal government has been over the years establishing the French fact while at the same time destroying freedoms and the true identity of this country.

Are you in denial that their are Francophone's actively pursuing their interest at all times?

[Catchme]

Do you actually think your being censored Leafless?

Certainly.

All you have to do is examine how secretive and manipulating the Liberal government has been over the years establishing the French fact while at the same time destroying freedoms and the true identity of this country.

Are you in denial that their are Francophone's actively pursuing their interest at all times?

If I was Greg, I would be pretty chagrined at your spurious accusation.

[BubberMiley]

You don't think there's a chance that it might just be that you are completely paranoid and have lost touch with reality? This has been known to happen a lot more often than little french Liberal spies surreptitiously accessing your computer.

[Charles Anthony]

Here is a hint to possibly regain "lost" posts: use your Back button on the browser. It is usually still in memory or at least your computer can be configured to retain it.

This as happened far to many times to be coincidence by destroying the ability to post, which is just prior to posting a dialogue informs me that I am not logged on to the site which is impossible as I would not be able to reply at all if that was the case. And when you try to save your post by pushing the suggested button, it never works and all is lost.

This happens all of the time with me when I am on a dial-up connection.

If somebody tries to telephone me while I am connected to the internet, my connection is kicked off. Thus, I can not submit a post in which I am in the midst of composing.

In other words, you can, in this order:

1) log on to the internet

2) load up the discussion forum

3) start posting a reply

4) have somebody try to call you (there are often ways to stop this)

5) get kicked off the internet (there are many other harmless reasons for getting kicked off the internet)

6) never know 4) or 5) happened and still type out your reply

7) when you try to submit or save in the discussion forum, your action is rejected.

This can all happen without anybody exterior actively censoring an internet user.

[Greg]

Do you actually think your being censored Leafless?

All you have to do is examine how secretive and manipulating the Liberal government has been over the years establishing the French fact while at the same time destroying freedoms and the true identity of this country.

Are you in denial that their are Francophone's actively pursuing their interest at all times?

Hmm, I fail to see how this has anything to do with the MLW forums?

We have a secure dedicated server - the "Liberal government" would not have the right or the abilities to hack this forum (or even your computer) to monitor and or manipulate your actions.

I don't doubt you maybe having problems with your computer, but I can assure you it has nothing to do with this forum or any of its members,

I suggest you download the spyware removal tool, HiJackthis and give it run and report back here.

http://www.merijn.org/programs.php#hijackthis

[Leafless]

I suggest you download the spyware removal tool, HiJackthis and give it run and report back here.

http://www.merijn.org/programs.php#hijackthis

I am sorry I even brought this up.

I have no problem anywhere else on the net.

I even had a dialogue box appear on my screen, not long ago, while posting, saying: " Are you aware this can be read worldwide".

Sorry again I even brought this up.

[Charles Anthony]

I even had a dialogue box appear on my screen, not long ago, while posting, saying: " Are you aware this can be read worldwide".

Your browser is only telling you the obvious before you submit a form.

Everything posted on the internet can be read worldwide.

[Leafless]

I even had a dialogue box appear on my screen, not long ago, while posting, saying: " Are you aware this can be read worldwide".

Your browser is only telling you the obvious before you submit a form.

Everything posted on the internet can be read worldwide.

I don't think we understand each other.

This dialogue box with that message had never appeared om my computer 'ever' but that once.

I am well aware everything can be read on the WWW.

[Charles Anthony]

This dialogue box with that message had never appeared om my computer 'ever' but that once.

I get a similar message every time I do a security update, a kernel update, an operating system update, a browser update and each time I clear my cache or my router.

[Leafless]

You don't think there's a chance that it might just be that you are completely paranoid and have lost touch with reality?

"Lost touch with reality"--You mean like you.

I don't go near marrywanna.

[BubberMiley]

I don't go near marrywanna.

Good thing. It makes you paranoid.

[geoffrey]

All you have to do is examine how secretive and manipulating the Liberal government has been over the years establishing the French fact while at the same time destroying freedoms and the true identity of this country.

The dollars spent on silencing you on a forum with only 20-30 active posters would be a large enough sum to have greater results elsewhere.

Are you in denial that their are Francophone's actively pursuing their interest at all times?

Absolutely not. I am in denial that they have the means or reason to go after you on a small political forum.

[guyser]

pssssssssssssttttt.........super secret, in fact double secret .........it was Polynewbie.

[Leafless]

I don't go near marrywanna.

Good thing. It makes you paranoid.

I heard that word mouthed off by you various times.

It must be one of the few words in your minuscule vocabulary that you can type when your stoned.

[Leafless]

Absolutely not. I am in denial that they have the means or reason to go after you on a small political forum.

Do you know me?

I don't know you either.

[Leafless]

I suggest you download the spyware removal tool, HiJackthis and give it run and report back here.

http://www.merijn.org/programs.php#hijackthis

Done and my system is clean, there was nothing to remove.

BTW- How long does one have to post or is there a time limit?

Is one automatically cut off from the site or the board closes and is deactivated after so many minutes of inactive use?

[GostHacked]

Leafless

Does this happen on any other computer you use with your username and password for this site?? If not, then you have a huge problem with your curent set up. If he is on the same DNS then chances are he is a client of the ISP you are with.

Could be something with this site in particular. Greg has had problems with hackers on this site, so something could have snuck on your drive from here. And a good deal of the time it is due to some botched up or compromised Active X script.

Advice, check your network PCs as well, they could be compromised as well, so formatting and reinstalling windows on this one wont solve the issue.

Also how are you doing that net install?? Try doing a clean format and with a genuine XP CD. Something on your end is compromised.

If you are being hacked, ever show those logs to your ISP? Ever call and complain about it?

[Leafless]

Leafless

Does this happen on any other computer you use with your username and password for this site?? If not, then you have a huge problem with your curent set up. If he is on the same DNS then chances are he is a client of the ISP you are with.

Yes, it does happen on a second computer.

For example just when I was getting ready to log off after posting here my firewall warning alarm repeately signalled on and off, so I hit emergency lock and sat back and viewed my net activity screen and noticed who ever it is, is from the same IP provider and mine was hitting my computer with a 49-byte file every free seconds followed by 200-byte file using a variety of different ports to try to gain access.

So far nothing serious as happened to my programs outside of what I noted.

Only if my programs or operational characteristics of my computer are affected will I consider showing my I.P. my firewall log to see if anything can be done. I have a few other things to try to stop these attacks.

For now I will write it off as an annoyance.

[GostHacked]

Leafless

Does this happen on any other computer you use with your username and password for this site?? If not, then you have a huge problem with your curent set up. If he is on the same DNS then chances are he is a client of the ISP you are with.

Yes, it does happen on a second computer.

For example just when I was getting ready to log off after posting here my firewall warning alarm repeately signalled on and off, so I hit emergency lock and sat back and viewed my net activity screen and noticed who ever it is, is from the same IP provider and mine was hitting my computer with a 49-byte file every free seconds followed by 200-byte file using a variety of different ports to try to gain access.

So far nothing serious as happened to my programs outside of what I noted.

Only if my programs or operational characteristics of my computer are affected will I consider showing my I.P. my firewall log to see if anything can be done. I have a few other things to try to stop these attacks.

For now I will write it off as an annoyance.

Is that other PC you use on the same LAN as your other problematic PC?

Here are some steps you need to take in order to find out what the real issue is. Take your Firewall logs and send them on in to your ISP's abuse team. usually abuse(or spamblock or security)@isp.com. They will be able to cut that person off from connecting to the Internet. Their modem would have to be disabled if the problem is comming from that same IP/person.

It could be that the person's PC that is attacking you is not even aware of the issue. Could be some virus bot on the PC that hits yours. it could also be a stealthy virus that is on your systems (if they are all connected through a LAN, then if one PC is infected, the others have the potential of infection as well).

It might even be some settings you have or some special program.

So here is what you need to send in.

Firewall, Antivirus, Syware logs. (this will show time, type of activity and how much of it)

Take the IP and go to http://www.arin.net , plug that IP into the field up top and then record that information and throw it all in an email to your ISP.

I highly suggest you take those steps, or your problem won't go away. You seem to have a good grasp on PC security in any case.

For the record, I do enjoy my marijuana.

[Greg]

Done and my system is clean, there was nothing to remove.

BTW- How long does one have to post or is there a time limit?

Is one automatically cut off from the site or the board closes and is deactivated after so many minutes of inactive use?

Good to hear your computer is clean.

As far as I'm aware, there is no time limit on posting. When you're typing your post, there is no direct connection between the forum software and your browser - it's an idle connection. So when you click the "Add Reply" button, even after a long period of time, it should be submitted with no problems.

Question, when you submit the post and the post isn't accepted, are you still logged into the forums? That is perhaps the only way I can see that a post would not be accepted. If your the forums are logging you out during the idle period, you would not be able to make the post.

This could also be a cookie problem too. Cookies are how the forum software knows who you are, whether you are logged in. So if you have a any software that manages cookies (anti virus, etc), then you might want to consider changing it to something else.