Never do the MISTAKE I did ? My PC got Hacked ? Need Help !!!

[Gorsko]

Most of my applications which I use are paid application. I do download some cracked application only after checking the VirusTotal Scans.. I too feel the same to just MOVE ON !!! Thanks for the reply..

DoubleD3 i'm really sorry for you, i hope you get back on track soon.
Here is some really usefull information on how not to get hacked:

1.When downloading suspicious/cracked files, always check/run them with Sandboxie First.
2.Never save your password in any browser.If you have alot of e-mails/users/passwords, just write them on a paper.
3.Never run Java (Run Now) Plugin on site that is not trusted.
4.Always update your anti-virus.
5.If you already have 1 Anti-virus and have a better computer, install Malwarebytes Anti-Malware also, just to be safer.
6.Everyone just to be safe do this:
- Open run and type: msconfig
- Go to StartUp
- If you see any program suspicious/not installed by you, untick it and restart your computer, after restarting scan your computer fully.

 

[blackberry]

You have been watching way too much TV.

The internet spans multiple countries all with different laws regarding computers and their uses.
There is no cyber police that has jurisdiction over multiple countries and its a lost cause trying to get something done about it.

I've never been interested in this, but isn't there a cyber police?
I mean your case isn't a small matter. $150-$200/day can be considered a big theft and I assume that they would do something.
Not to mention that other things have been stolen from your PC.

Btw you should mind what mails you are opening.
Few months ago I saw on TV how a hacker took him 1 min to create a mail that will enable him upon opening to get full control of the users PC...

 

[pitbulllopez]

I can see a lot of people have shared a lot of useful tricks how you can restore you hacked pc. i myself got an idea, and a warning as well to be careful in future.

 

[DoubleD3]

Perhaps try a Live DVD/CD to access your files. Boot from disc, with network unplugged (if you cant boot from disc google how to change pc/bios settings) These are free: UBCD (4 Windows) http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CDQQFjAA&url=http%3A%2F%2Fwww.ultimatebootcd.com%2F&ei=RN36UNfCHeL_4QTcwYDwBQ&usg=AFQjCNGXFsEb1DhrlxVrZRfWLJ8qogmOdg&bvm=bv.41248874,d.bGE If youre ok with Linux, try Hirens Boot CD g'luck

Thanks for the reply phracktl. The link which U have sent is really helpful. I will surely give a try and report back.

 

[DoubleD3]

DoubleD3 i'm really sorry for you, i hope you get back on track soon.
Here is some really usefull information on how not to get hacked:

1.When downloading suspicious/cracked files, always check/run them with Sandboxie First.
2.Never save your password in any browser.If you have alot of e-mails/users/passwords, just write them on a paper.
3.Never run Java (Run Now) Plugin on site that is not trusted.
4.Always update your anti-virus.
5.If you already have 1 Anti-virus and have a better computer, install Malwarebytes Anti-Malware also, just to be safer.
6.Everyone just to be safe do this:
- Open run and type: msconfig
- Go to StartUp
- If you see any program suspicious/not installed by you, untick it and restart your computer, after restarting scan your computer fully.

Thanks for sharing tips on keeping the PC safe.. I found an application which monitors all activities of your computer. Link to the application:

http://www.winpatrol.com/

PM me if anyone needs the key for this application for the Premium version..

You have been watching way too much TV.

The internet spans multiple countries all with different laws regarding computers and their uses.
There is no cyber police that has jurisdiction over multiple countries and its a lost cause trying to get something done about it.

Very True.. Thanks for the reply..

 

[saber210]

Hello, Heres a tip:

IF you use adsense only or wordpress. Try to fix it by reinstalling a new wordpress (with new password and username)

For the permalinks, use site:domain.com to copy all the permalinks

Then use the cache:domain.com and copy the articles again and post it on your new installed wordpress(with the same permalinks)

Or if you dont have any cache, try to use archive.org and find the most updated archive of your site.

Hope my tips help.

Dont download suspicious file.

 

[yeasin33]

I shall buy Last Pass soon as possible.. Thanks for the reply..

Lastpass is free.

 

[panda23]

Sorry to hear that but time to move on.

 

[MusicDisk]

use recuva, its will restore all

 

[ButterflyCollector]

As well as manual backups I use a service called Sugarsync. You can set all your documents to be synced to the cloud. Easiest form of back up and means your documents are safe as soon as they are saved on your PC

Good luck with getting your data back

 

[DoubleD3]

I can see a lot of people have shared a lot of useful tricks how you can restore you hacked pc. i myself got an idea, and a warning as well to be careful in future.

It is really nice that U are being careful after reading my post and taking the tips shared on this thread. Thanks for replying..

 

[tooth]

Wow this thread was inspirational. I hope you find a solution to your financial problems and I'll always be sure to keep backups now.

You can always make quick cash the usual way - by pawning things you own, selling them on craigslist, getting a short term loan (if you are a student the university might be able to help you), or family. $300 is not very much money and you should be able to raise it quickly by selling your smartphone, some extra computer parts and various tools you have lying around by pricing 10-15% below fair price.

 

[DoubleD3]

Hello, Heres a tip:

IF you use adsense only or wordpress. Try to fix it by reinstalling a new wordpress (with new password and username)

For the permalinks, use site:domain.com to copy all the permalinks

Then use the cache:domain.com and copy the articles again and post it on your new installed wordpress(with the same permalinks)

Or if you dont have any cache, try to use archive.org and find the most updated archive of your site.

Hope my tips help.

Dont download suspicious file.

Hey, This idea is really nice.. I will do exactly as what U telling me.. But, If I have to do this then it is a lot of work to do.. Thanks for replying saber210

 

[smbx33]

Perhaps try a Live DVD/CD to access your files.

Brilliant idea, I might add that if booting from a dvd/ cd does not work out for you there are usb alternatives usually. To list a few that I have used to recover data (straight from wiki bc im lazy)

[LIST]
[*]BackTrack[FONT=verdana]: A security distribution which can also be used for forensics and data recovery as a Live CD (GCC compiler and ddrescue pre-installed, and it avoids tampering the disks).[/FONT]
[*][FONT=verdana]BartPE: A lightweight variant of Microsoft Windows XP or Windows Server 2003 32 bit operating systems, similar to a Windows Preinstallation Environment, which can be run from a Live CD or Live USB drive.[/FONT]
[*][FONT=verdana]Hiren's BootCD: A boot CD containing various diagnostic programs such as partitioning agents, system performance benchmarks, disk cloning and imaging tools, data recovery tools, MBR tools, BIOS tools, and many others for fixing various computer problems.[/FONT]
[*][FONT=verdana]Knoppix: The original Linux Live CD. It contains many useful utilities for data recovery.[/FONT]
[*][FONT=verdana]SpinRite: A FreeDOS-based data recovery tool for hard disks and magnetic storage devices.[/FONT]
[*][FONT=verdana]SystemRescueCD: A Gentoo based Live CD, useful for repairing unbootable computer systems and retrieving data after a system crash.[/FONT]
[*][FONT=verdana]Trinity Rescue Kit: A free command-line Live CD Linux distribution created especially for rescuing Windows PCs.[/FONT]
[*][FONT=verdana]Ultimate Boot CD for Windows: A Microsoft Windows XP Live CD with diagnostic and repair utilities built in, useful for removing malware and recovering data.[/FONT]
[*][FONT=verdana]WinPE: A customizable Microsoft Windows Boot DVD (made by Microsoft and distributed for free). Can be modified to boot to any of the programs listed.[/FONT]
[/LIST]

Talking about my websites. They have deleted all my website files. I have sent a mail to my hosting company regarding this. Hope they can restore the files..

I think the hacker has deleted some windows file which is making me unable to use my PC. I am using another PC. I am taking my hard-disk to an expert before I could do anything to it..

My question is if you can not use your PC then how do you know the files have been deleted? If you are just assuming they are deleted then I suggest getting a live CD and retrieving you lost files as you were advised on previous post. Now if getting your RoboForm passwords would help you out as far as getting email addresses and access to accounts you did not memorize, I also have a solution for that. Preferably after you have created a backup of your hard drive, If you have a newer copy of windows (vista or newer) get a copy of Windows your pc had and re-install the operating system. DO NOT format the hard drive before the installation, not doing so will create a folder in the c: drive called windows.old.

Re-install RoboForm. Then locate the "My RoboForm Data" "My Documents/Documents" folder inside windows.old and copy it/replace the freshly made one from your installation. Restart your computer.(just to be safe ) you should have all your accounts/passwords then.

To delete windows old (after you copied the files you want to transfer over mp3s,movies, docs, etc.) you can delete windows.old by following these steps: (from microsoft website):

[LIST=1]
[*][FONT=verdana]Click Start, type disk cleanup in the Start Search text box, and then click Disk Cleanup.[/FONT]
[*][FONT=verdana]In the Disk Cleanup Options dialog box, click Files from all users on this computer.[/FONT]
[*][FONT=verdana]In the User Account Control dialog box, click Continue.[/FONT]
[*][FONT=verdana]Click to select the Previous Windows installation(s) check box, and then click OK.[/FONT]
[/LIST]
[FONT=verdana]Advanced users can also use a command prompt to delete files and folders from an earlier installation of Windows Vista. To do this, follow these steps:[/FONT]
[LIST=1]
[*][FONT=verdana]Click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.[/FONT]
[*][FONT=verdana]In the User Account Control dialog box, click Continue.[/FONT]
[*][FONT=verdana]At the command prompt, type takeown /F <DriveLetter>:\<FolderName>\* /R /A, and then press ENTER. 

Note When you run this command, you are granted ownership of the administrator group for the folder, of all the subdirectories in the folder, and of all the files in the folder.[/FONT]
[*][FONT=verdana]At the command prompt, type cacls <DriveLetter>:\<FolderName>\*.* /T /grant administrators:F, and then press ENTER. 

Note When you run this command, administrators are granted full rights to all files and to all folders.[/FONT]
[*][FONT=verdana]At the command prompt, type rmdir /S /Q <DriveLetter>:\<FolderName>\, and then press ENTER. 

Note When you run this command, all subfolders and all files in the specified folder are deleted. Additionally, the specified folder itself is deleted.[/FONT]
[/LIST]

I hope this helps......

 

[DoubleD3]

Lastpass is free.

Hey, Ya.. I just checked it.. I am now switching over to lastpass.. Thanks for the reply..

 

[ezines]

Yes, booting the PC through LIVE CD have a good possibility that you take all your files back. Chances the files deleted are system files only. Those files needed for the booting the PC.

I always come across with this issues when a client tells me that he has a bad hard drive and all the files were deleted. Upon booting through the Live CD, all files are there except for the system files necessary for the boot process. Most of the time, a simple re-install of the OS will detect the previously installed OS. If not, a new OS can installed on top of the previous one. When all the files and data are recovered, it's time to reinstall a fresh OS.


There are pre-made Live CD available for downloads in .iso formats. All you have to do is download it from a different PC, burn it to a CD or a flash drive(if possible).

Boot your PC through that newly created Live CD and check your files on your old hard drive.

 

[DoubleD3]

Sorry to hear that but time to move on.

Ya, I too feel the same that I should just Move on rather than wasting my Time in finding out who did this to me.. Thanks for the reply panda23..

 

[DoubleD3]

use recuva, its will restore all

I have handed over my hard disk to a professional. Hope he gets all my important data back..

 

[jsurya]

I too use Roboform to handle my login details for the past 7-8 years and I almost take a backup of the roboform files and bookmarks every month to my primary email (I use this email for just backups, never used online) and I set a phone verification for this primary email as well!

 

[DoubleD3]

As well as manual backups I use a service called Sugarsync. You can set all your documents to be synced to the cloud. Easiest form of back up and means your documents are safe as soon as they are saved on your PC

Good luck with getting your data back

So far this is the best cloud back up service I have come across.. Thanks for the reply..