Hacked >> Many changed passwords

[Guest]

Thanks in advance for all the posts many of you provide here.
I ran advances properties, software items, start up and then click to view
history( not sure how I arrived here but this is what showed. Also 3 times
this many changes in hardware.

3/18/2005 9:00:17 PM ADDED Slingo Program Group
3/18/2005 9:00:17 PM REMOVED "C:\Program Files\Messenger\msmsgs.exe"
/background Startup Programs
3/18/2005 9:00:17 PM REMOVED desktop.ini Startup Programs
3/19/2005 12:27:32 PM CHANGED Accessories Property "UserName" changed from
"Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "Name" changed from
"Default User:Accessories" to "All Users:Accessories". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property "UserName"
changed from "Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property "Name"
changed from "Default User:Accessories\Accessibility" to "All
Users:Accessories\Accessibility". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property "UserName"
changed from "Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property "Name"
changed from "Default User:Accessories\Entertainment" to "All
Users:Accessories\Entertainment". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "UserName" changed from
"Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "Name" changed from "Default
User:Startup" to "All Users:Startup". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "UserName" changed from
"NT AUTHORITY\SYSTEM" to "Default User". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "Name" changed from "NT
AUTHORITY\SYSTEM:Accessories" to "Default User:Accessories". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property "UserName"
changed from "NT AUTHORITY\SYSTEM" to "Default User". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property "Name"
changed from "NT AUTHORITY\SYSTEM:Accessories\Accessibility" to "Default
User:Accessories\Accessibility". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property "UserName"
changed from "NT AUTHORITY\SYSTEM" to "Default User". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property "Name"
changed from "NT AUTHORITY\SYSTEM:Accessories\Entertainment" to "Default
User:Accessories\Entertainment". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "UserName" changed from "NT
AUTHORITY\SYSTEM" to "Default User". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "Name" changed from "NT
AUTHORITY\SYSTEM:Startup" to "Default User:Startup". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "UserName" changed from
"STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "Name" changed from
"STEVE\steveroyjohnson:Accessories" to "NT
AUTHORITY\SYSTEM:Accessories". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property "UserName"
changed from "STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property "Name"
changed from "STEVE\steveroyjohnson:Accessories\Accessibility" to "NT
AUTHORITY\SYSTEM:Accessories\Accessibility". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property "UserName"
changed from "STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property "Name"
changed from "STEVE\steveroyjohnson:Accessories\Entertainment" to "NT
AUTHORITY\SYSTEM:Accessories\Entertainment". Program Group
3/19/2005 12:27:32 PM CHANGED Games Property "UserName" changed from
"STEVE\steveroyjohnson" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Games Property "Name" changed from
"STEVE\steveroyjohnson:Games" to "All Users:Games". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "UserName" changed from
"STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "Name" changed from
"STEVE\steveroyjohnson:Startup" to "NT AUTHORITY\SYSTEM:Startup". Program
Group
3/19/2005 12:27:32 PM CHANGED desktop.ini Property "User" changed from
".DEFAULT" to "All Users". Startup Programs
3/19/2005 12:27:32 PM CHANGED desktop.ini Property "Location" changed from
"Startup" to "Common Startup". Startup Programs
3/19/2005 12:27:32 PM CHANGED desktop.ini Property "User" changed from "NT
AUTHORITY\SYSTEM" to ".DEFAULT". Startup Programs
3/19/2005 12:27:32 PM CHANGED desktop.ini Property "User" changed from
"STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Startup Programs

I went in and changed remot access item x 3
lowered my temp files storage, deleted off line stuff and don't allow remote
innvitations. reinstalled my firewall. Changed my setting to make it run
sleeker. Thanks so much Wesley. BUT
how do I change all of these back? Do I need to? Help me to make it all
right please
Thanks



Expand AllCollapse All

 

[Galen]

In auctionsco <[email protected]> had this to say:

My reply is at the bottom of your sent message:

Thanks in advance for all the posts many of you provide here.
I ran advances properties, software items, start up and then click to
view history( not sure how I arrived here but this is what showed.
Also 3 times this many changes in hardware.

3/18/2005 9:00:17 PM ADDED Slingo Program Group
3/18/2005 9:00:17 PM REMOVED "C:\Program Files\Messenger\msmsgs.exe"
/background Startup Programs
3/18/2005 9:00:17 PM REMOVED desktop.ini Startup Programs
3/19/2005 12:27:32 PM CHANGED Accessories Property "UserName" changed
from "Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "Name" changed from
"Default User:Accessories" to "All Users:Accessories". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property
"UserName" changed from "Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property
"Name" changed from "Default User:Accessories\Accessibility" to "All
Users:Accessories\Accessibility". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property
"UserName" changed from "Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment Property
"Name" changed from "Default User:Accessories\Entertainment" to "All
Users:Accessories\Entertainment". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "UserName" changed from
"Default User" to "All Users". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "Name" changed from
"Default User:Startup" to "All Users:Startup". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "UserName" changed
from "NT AUTHORITY\SYSTEM" to "Default User". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "Name" changed
from "NT AUTHORITY\SYSTEM:Accessories" to "Default User:Accessories".
Program Group 3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility
Property "UserName" changed from "NT AUTHORITY\SYSTEM" to "Default
User". Program Group 3/19/2005 12:27:32 PM CHANGED
Accessories\Accessibility Property "Name" changed from "NT
AUTHORITY\SYSTEM:Accessories\Accessibility" to "Default
User:Accessories\Accessibility". Program Group 3/19/2005 12:27:32 PM
CHANGED Accessories\Entertainment Property "UserName" changed from
"NT AUTHORITY\SYSTEM" to "Default User". Program Group 3/19/2005
12:27:32 PM CHANGED Accessories\Entertainment Property "Name" changed
from "NT AUTHORITY\SYSTEM:Accessories\Entertainment" to "Default
User:Accessories\Entertainment". Program Group 3/19/2005 12:27:32 PM
CHANGED Startup Property "UserName" changed from "NT
AUTHORITY\SYSTEM" to "Default User". Program Group 3/19/2005 12:27:32
PM CHANGED Startup Property "Name" changed from "NT
AUTHORITY\SYSTEM:Startup" to "Default User:Startup". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "UserName" changed
from "STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories Property "Name" changed
from "STEVE\steveroyjohnson:Accessories" to "NT
AUTHORITY\SYSTEM:Accessories". Program Group
3/19/2005 12:27:32 PM CHANGED Accessories\Accessibility Property
"UserName" changed from "STEVE\steveroyjohnson" to "NT
AUTHORITY\SYSTEM". Program Group 3/19/2005 12:27:32 PM CHANGED
Accessories\Accessibility Property "Name" changed from
"STEVE\steveroyjohnson:Accessories\Accessibility" to "NT
AUTHORITY\SYSTEM:Accessories\Accessibility". Program Group 3/19/2005
12:27:32 PM CHANGED Accessories\Entertainment Property "UserName"
changed from "STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM".
Program Group 3/19/2005 12:27:32 PM CHANGED Accessories\Entertainment
Property "Name" changed from
"STEVE\steveroyjohnson:Accessories\Entertainment" to "NT
AUTHORITY\SYSTEM:Accessories\Entertainment". Program Group 3/19/2005
12:27:32 PM CHANGED Games Property "UserName" changed from
"STEVE\steveroyjohnson" to "All Users". Program Group 3/19/2005
12:27:32 PM CHANGED Games Property "Name" changed from
"STEVE\steveroyjohnson:Games" to "All Users:Games". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "UserName" changed
from "STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Program Group
3/19/2005 12:27:32 PM CHANGED Startup Property "Name" changed from
"STEVE\steveroyjohnson:Startup" to "NT AUTHORITY\SYSTEM:Startup".
Program Group 3/19/2005 12:27:32 PM CHANGED desktop.ini Property
"User" changed from ".DEFAULT" to "All Users". Startup Programs
3/19/2005 12:27:32 PM CHANGED desktop.ini Property "Location" changed
from "Startup" to "Common Startup". Startup Programs 3/19/2005
12:27:32 PM CHANGED desktop.ini Property "User" changed from "NT
AUTHORITY\SYSTEM" to ".DEFAULT". Startup Programs 3/19/2005 12:27:32
PM CHANGED desktop.ini Property "User" changed from
"STEVE\steveroyjohnson" to "NT AUTHORITY\SYSTEM". Startup Programs

I went in and changed remot access item x 3
lowered my temp files storage, deleted off line stuff and don't allow
remote innvitations. reinstalled my firewall. Changed my setting to
make it run sleeker. Thanks so much Wesley. BUT
how do I change all of these back? Do I need to? Help me to make it
all right please
Thanks



Expand AllCollapse All

See my reply to your question on the 19th. I just posted it so you should be
able to read it by the time you get this. I'm not 100% certain that the
answer is correct but it's where I'd start if I were facing this sort of
problem.

Galen