Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: July 27, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 213 Members: 0 Total: 213 Full disclosure CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus [KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability [KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability CVE-2024-33326 CVE-2024-33327 CVE-2024-33328 CVE-2024-33329 CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100 SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products Novel DoS Vulnerability Affecting WebRTC Media Servers APPLE-SA-06-25-2024-1 AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8 40 vulnerabilities in Toshiba Multi-Function Printers 17 vulnerabilities in Sharp Multi-Function Printers SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise) IT Security and Insecurity Portal www.waraxe.us Forum Index -> Newbies corner -> Please help with PC security issue View previous topic :: View next topic Please help with PC security issue Posted: Tue Jun 30, 2009 9:39 pm shyspy Advanced user Joined: Jun 08, 2009 Posts: 60 HI, Well whenever i connect to the internet i get the following when i do an netstat -a Code: TCP administrator:1110 localhost:4762 TIME_WAIT TCP administrator:1110 localhost:4778 TIME_WAIT TCP administrator:1110 localhost:4795 TIME_WAIT TCP administrator:1110 localhost:4802 TIME_WAIT TCP administrator:1110 localhost:4805 TIME_WAIT TCP administrator:1110 localhost:4806 TIME_WAIT TCP administrator:1110 localhost:4809 TIME_WAIT TCP administrator:1110 localhost:4814 ESTABLISHED TCP administrator:1110 localhost:4816 ESTABLISHED TCP administrator:1110 localhost:4819 TIME_WAIT TCP administrator:1110 localhost:4822 TIME_WAIT TCP administrator:1110 localhost:4824 TIME_WAIT TCP administrator:1110 localhost:4826 TIME_WAIT TCP administrator:1110 localhost:4828 TIME_WAIT TCP administrator:1110 localhost:4844 ESTABLISHED TCP administrator:1110 localhost:4845 ESTABLISHED TCP administrator:1110 localhost:4847 ESTABLISHED TCP administrator:1110 localhost:4850 ESTABLISHED TCP administrator:1110 localhost:4852 ESTABLISHED TCP administrator:1110 localhost:4853 ESTABLISHED TCP administrator:1110 localhost:4854 ESTABLISHED TCP administrator:1110 localhost:4855 ESTABLISHED TCP administrator:1110 localhost:4860 ESTABLISHED TCP administrator:1110 localhost:4861 ESTABLISHED TCP administrator:1110 localhost:4864 ESTABLISHED TCP administrator:1110 localhost:4866 ESTABLISHED TCP administrator:1110 localhost:4869 ESTABLISHED TCP administrator:1110 localhost:4872 ESTABLISHED TCP administrator:1110 localhost:4874 ESTABLISHED TCP administrator:1110 localhost:4875 TIME_WAIT TCP administrator:1110 localhost:4876 ESTABLISHED TCP administrator:1110 localhost:4896 ESTABLISHED TCP administrator:1110 localhost:4898 ESTABLISHED TCP administrator:4389 localhost:1110 ESTABLISHED TCP administrator:4424 localhost:1110 ESTABLISHED TCP administrator:4498 localhost:1110 ESTABLISHED TCP administrator:4499 localhost:1110 ESTABLISHED TCP administrator:4662 localhost:1110 TIME_WAIT TCP administrator:4669 localhost:1110 ESTABLISHED TCP administrator:4704 localhost:1110 TIME_WAIT TCP administrator:4706 localhost:1110 TIME_WAIT TCP administrator:4708 localhost:1110 ESTABLISHED TCP administrator:4711 localhost:1110 ESTABLISHED TCP administrator:4714 localhost:1110 TIME_WAIT TCP administrator:4716 localhost:1110 TIME_WAIT TCP administrator:4717 localhost:1110 TIME_WAIT TCP administrator:4720 localhost:1110 TIME_WAIT TCP administrator:4722 localhost:1110 TIME_WAIT TCP administrator:4748 localhost:1110 TIME_WAIT TCP administrator:4750 localhost:1110 TIME_WAIT TCP administrator:4752 localhost:1110 TIME_WAIT TCP administrator:4754 localhost:1110 TIME_WAIT TCP administrator:4756 localhost:1110 TIME_WAIT TCP administrator:4757 localhost:1110 TIME_WAIT TCP administrator:4760 localhost:1110 TIME_WAIT TCP administrator:4763 localhost:1110 TIME_WAIT TCP administrator:4766 localhost:1110 TIME_WAIT TCP administrator:4767 localhost:1110 TIME_WAIT TCP administrator:4770 localhost:1110 TIME_WAIT TCP administrator:4771 localhost:1110 TIME_WAIT TCP administrator:4774 localhost:1110 TIME_WAIT TCP administrator:4775 localhost:1110 TIME_WAIT TCP administrator:4780 localhost:1110 TIME_WAIT TCP administrator:4782 localhost:1110 TIME_WAIT TCP administrator:4784 localhost:1110 TIME_WAIT TCP administrator:4786 localhost:1110 TIME_WAIT TCP administrator:4788 localhost:1110 TIME_WAIT TCP administrator:4790 localhost:1110 TIME_WAIT TCP administrator:4791 localhost:1110 TIME_WAIT TCP administrator:4794 localhost:1110 TIME_WAIT TCP administrator:4796 localhost:1110 TIME_WAIT TCP administrator:4800 localhost:1110 TIME_WAIT TCP administrator:4803 localhost:1110 TIME_WAIT TCP administrator:4807 localhost:1110 TIME_WAIT TCP administrator:4814 localhost:1110 ESTABLISHED TCP administrator:4816 localhost:1110 ESTABLISHED TCP administrator:4818 localhost:1110 TIME_WAIT TCP administrator:4830 localhost:1110 TIME_WAIT TCP administrator:4832 localhost:1110 TIME_WAIT TCP administrator:4834 localhost:1110 TIME_WAIT TCP administrator:4837 localhost:1110 TIME_WAIT TCP administrator:4840 localhost:1110 TIME_WAIT TCP administrator:4842 localhost:1110 TIME_WAIT TCP administrator:4844 localhost:1110 ESTABLISHED TCP administrator:4845 localhost:1110 ESTABLISHED TCP administrator:4847 localhost:1110 ESTABLISHED TCP administrator:4850 localhost:1110 ESTABLISHED TCP administrator:4852 localhost:1110 ESTABLISHED TCP administrator:4853 localhost:1110 ESTABLISHED TCP administrator:4854 localhost:1110 ESTABLISHED TCP administrator:4855 localhost:1110 ESTABLISHED TCP administrator:4860 localhost:1110 ESTABLISHED TCP administrator:4861 localhost:1110 ESTABLISHED TCP administrator:4864 localhost:1110 ESTABLISHED TCP administrator:4866 localhost:1110 ESTABLISHED TCP administrator:4869 localhost:1110 ESTABLISHED TCP administrator:4872 localhost:1110 ESTABLISHED TCP administrator:4874 localhost:1110 ESTABLISHED TCP administrator:4876 localhost:1110 ESTABLISHED TCP administrator:4896 localhost:1110 ESTABLISHED TCP administrator:4898 localhost:1110 ESTABLISHED Does this mean that my pc is hacked. I have no server Or anything running on my system. Posted: Tue Jun 30, 2009 11:25 pm gibbocool Advanced user Joined: Jan 22, 2008 Posts: 208 Its possible it's hacked or a virus, but we need some more info.. perhaps your process list or something.. Try run an antivirus and antispyware. _________________ http://www.gibbocool.com Posted: Wed Jul 01, 2009 12:53 am BoboTiG Advanced user Joined: Jun 22, 2009 Posts: 66 And If you can give us programs loaded at boot (msconfig) too. - Posted: Wed Jul 01, 2009 7:58 am shyspy Advanced user Joined: Jun 08, 2009 Posts: 60 Quote: Its possible it's hacked or a virus, but we need some more info.. perhaps your process list or something.. Try run an antivirus and antispyware. Quote: And If you can give us programs loaded at boot (msconfig) too. My task Manager running process are, http://www.tadkalagake.com/images/770_running_process.JPG Msconfig Startup process are , http://www.tadkalagake.com/images/638_msstartup.JPG Posted: Wed Jul 01, 2009 10:35 am gibbocool Advanced user Joined: Jan 22, 2008 Posts: 208 Do you know what rthdcpl.exe, vbptask.exe, and hkcmd.exe are? If not, kill them and see if it solves your problem _________________ http://www.gibbocool.com Posted: Wed Jul 01, 2009 11:46 am shyspy Advanced user Joined: Jun 08, 2009 Posts: 60 gibbocool wrote: Do you know what rthdcpl.exe, vbptask.exe, and hkcmd.exe are? If not, kill them and see if it solves your problem well i trie dthhs but doesn't help and some process like klwtblfs.exe and otehrs can't be ended. Also now my pc is running very very slow .... I have formated it but as soon as i connect to the internet its again infected. One more thing m using win xp pro do i need to update it Or go for vista will it provide more security or something. Posted: Wed Jul 01, 2009 12:29 pm pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria rthdcpl.exe Quote: rthdcpl.exe is a process belonging to the Realtek HD Audio Control Panel and is bundled alongside Realtek sound cards and audio hardware. "This program is a non-essential process, but should not be terminated unless suspected to be causing problems.\r" vbptask.exe Quote: vbptask.exe is located in a subfolder of "C:\Program Files". Known file sizes on Windows XP are 114,688 bytes (39% of all occurrence), 122,880 bytes, 118,784 bytes, 131,072 bytes, 139,264 bytes, 110,592 bytes, 143,360 bytes, 135,168 bytes, 237,568 bytes, 159,744 bytes. vbptask.exe is not a Windows core file. Program is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). The program has no visible window. vbptask.exe is able to hide itself. Therefore the technical security rating is 56% dangerous, however also read the users reviews. hkcmd.exe Quote: "hkcmd.exe" is Intel's "extreme" grahics hot key interceptor. If you never use the Intel hotkeys, you can go to Control Panel > Intel Extreme Graphics > Hot Keys and turn them off. Get more detailed information about hkcmd.exe and all other running background processes with Security Task Manager. Note: Any malware can be named anything - so you should check where the files of the running processes are located on your disk. If a "non-Microsoft" .exe file is located in the C:\Windows or C:\Windows\System32 folder, then there is a high risk for a virus, spyware, trojan or worm infection! Posted: Wed Jul 01, 2009 7:10 pm BoboTiG Advanced user Joined: Jun 22, 2009 Posts: 66 In msconfig, do not check NULL and vchost. vchost is a spyware. Security Task Manager1.7 Posted: Thu Jun 17, 2010 7:26 am arun005 Beginner Joined: Jun 17, 2010 Posts: 1 Hello, Enhanced Process Viewer that protects your PC Use the link : http://www.trustdownload.com/Antivirus-and-Spyware-Cleaners/Antivirus/Security-Task-Manager.html Thank you Posted: Mon Oct 04, 2010 4:47 am ashin Beginner Joined: Oct 04, 2010 Posts: 1 Thank you for the link _________________ www.cyberls.com Posted: Tue Oct 05, 2010 3:51 am sk8er Advanced user Joined: May 09, 2005 Posts: 64 you will use a firewall, endian Firewall is a good. http://www.endian.com/en/community/overview/ saludos. Please help with PC security issue www.waraxe.us Forum Index -> Newbies corner You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.336 Seconds