My network is frequently hacked by virus

[Elieis]

Sponsored Links

Hi,
I am not able to understand why my system is getting hacked again and again. I have a group 6 computers in my office. We run an multi-user accounting software. This software crashes in between. I had already faced a data loss tool long time ago. But this is happening. I have installed a license copy of BitDefender and prohibited my staff from using any other source of media.

[Zachary]

There are variou reasons for your system issue. Due to which intruders enters your system and destroy the system. The first reason according to me is the FTP Server, the second ine is the IRC client or bot. This are used to DDOS more computers, flood the IRC users or even hack a network computer. It is distributed in the form of Fileserv as a copyright material but in reality it is a threat. The third reason is some hacker is using your system to enter a different system to attain anonymity.

[Big Fish]

Whenever your system is hacked you will notice a program which is left after every attack. This is natural that there is application which is left behind after every attack. By location this application you an get the information that which malicious program is causing you problem. And the same can be stopped again in order to avoid future consequences.

[Shen]

What I know about this is that almost all attack leaves a IRC client as debris behind. This IRC client helps them to control the attack from a channel of IRC server or Trojan. This channel waits for response from the hacker who has created them via TCP or UDP. They open a port automatically in the background. Using the tool Fport you can listen to this ports and block the attack.

[Steve123]

First of all you have to notice that which client is accessing your net work in the background. To do this download TCPView. This will give you a complete update of the port scanning. Then note the list of services as per the port. After that search on Google for the default port assigned for default service. Once you got any suspicious file then locate it. Kill the process from Task Manager and delete the same from windows directory.

[Milton.J]

I use Fport. By running Fport I got a list of ports which are accessed by different service. What a Trojan do is it opens a port on your computer. This port is then used by the virus to download more content or throw data from your system to distant servers. This confidential data is then captured by the hackers. But Fport can give you the information of this. From looking at the output of the application you can see that you have a program in the directory c:\windows\system32 called abc.exe. Right off the bat, that file name looks suspicious let alone the port it is listening on. This happen in my case.