Re: my pc hacked?

["kimseng" <query () singnet com sg>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Hong, 

For Win2k, go to properties, go to settings, click on ASCII setup.
Uncheck "local typed characters locally"

Hope this helps. 
 
Thank you and best regards, 

Kim Seng
- ----- Original Message ----- 
From: "hong li" <hong_li_98 () yahoo com>
To: "Hagen, Eric" <ehagen () DenverNewspaperAgency com>
Cc: <security-basics () securityfocus com>
Sent: Thursday, October 02, 2003 8:20 PM
Subject: RE: my pc hacked?


> Thank you so much for all your help.
> When I telnet Cisco rouer IP address from dos prompt,
> I can see the password as I typed.  
>
> > your "local echo" of hyperterminal may be turned on, 
> That's true for hyperterminal.  (thanks)
>
> Is there anyway you can turn off echo when you telnet
> from dos prompt?
>
> Thanks,
>
> Hong
>
>
> > In addition, your "local echo" of hyperterminal may
> be turned on, 
> which would let you see the password or anything else
> you typed.
>
> S
>
>  
> > In addition, your "local echo" of hyperterminal may
> be turned on, 
> which would let you see the password or anything else
> you typed.
>
> S
>
> --- "Hagen, Eric" <ehagen () DenverNewspaperAgency com>
> wrote:
> > WebCompServer is a part of Crystal Reports 8.
> >
> > In addition, your "local echo" of hyperterminal may
> > be turned on, which
> > would let you see the password or anything else you
> > typed.
> >
> > Other than that, the PC moving slow is unlikely to
> > be an indication that you
> > were "hacked", especially if there are no unusual
> > processes running or
> > unusual ports open.  Note, if NMAP turned up ZERO
> > open ports, the scan
> > probably did not run properly or you have a
> > locked-down firewall (in which
> > case, getting hacked is very unlikely).
> >
> > Eric Hagen
> >
> > -----Original Message-----
> > From: hong li [mailto:hong_li_98 () yahoo com]
> > Sent: Wednesday, September 17, 2003 8:06 AM
> > To: security-basics () securityfocus com
> > Subject: my pc hacked?
> >
> >
> > Hi, all
> >
> > I think my workstation was hacked.  (windows 2000
> > professional) When I connect to the router
> > to do some configurations through hyperterminal and
> > I
> > can see the password on the screen, even with
> > encrypted password.  The pc was incredible slow.  I
> > tried netstat -na and did not see the suspicious
> > connection. Show processes and only see one
> > suspicious
> > "webcompserver.exe" 
> > (did not google this yet).  I tried to use nmap to
> > scan ports and shows all posts are closed.
> >
> > Any idea or suggestions whether the pc was hacked?
> >
> > Thanks in advance,
> >
> > Hong
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! SiteBuilder - Free, easy-to-use web site
> > design software
> > http://sitebuilder.yahoo.com
> --------------------------------------------------------------------
> ------- 
> > Captus Networks 
> > Are you prepared for the next Sobig & Blaster? 
> >  - Instantly Stop DoS/DDoS Attacks, Worms & Port
> > Scans 
> >  - Precisely Define and Implement Network Security 
> >  - Automatically Control P2P, IM and Spam Traffic 
> > FIND OUT NOW -  FREE Vulnerability Assessment
> > Toolkit 
> > http://www.captusnetworks.com/ads/42.htm
> --------------------------------------------------------------------
> --------  
>
>
> __________________________________
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
> http://shopping.yahoo.com
>
> --------------------------------------------------------------------
> -------
> --------------------------------------------------------------------
> --------  

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBP3zKgE7YYXVNy15YEQKa4ACeJaB0B1EVIU8tA8GAJLoLVDcM5YIAn2IH
SUjyAk+kUlnMlO9lkB/G5Icb
=/VPw
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
----------------------------------------------------------------------------