Author Topic: Tracing trojan horses & other attackers? (Read 229 times)

Vector · « **on:** January 07, 2003, 03:46:39 AM »

Hi

Since I got my adsl, I've been attacked several times. Notron internet security has blocked them. Also scanned with norton antivirus & other trojan horse removers and didn't find any problems.
The real problem is that it pisses me off when seeing some tard trying to access my pc. If there are any ways to make their life more difficult, like softwares that immediately trace them (and I don't mind if try to do some harm in THEIR computer

) I'd love to hear them.

Latest attacker was traced to dialin.net, germany (norton gives the IP) and I've notified the ISP with all that additional info that ip tracers gave me. However as ISP's name says, I don't expect much that they can do.
Any software to explode attackers pc's ?

Thx!

Kelly[KGN] · « **Reply #1 on:** January 07, 2003, 04:12:54 AM »

Hi Vector,

they'll will do, trust me.
Your attacker will get a message with a note that if his behavoir doesn't change (they'll receive 2 more complains with proof) he will loose his account.

If he destroyed something on your PC you can even sue him for that, although it's a lot of work and might not be worth the effort.

Hackers aren't untouchable as they think...at least the "tool-kiddies" who know nothing than using some programs.

Vector · « **Reply #2 on:** January 07, 2003, 04:26:21 AM »

Hi Kelly

The problem is that this person that attacked me, could have a troijan server inside his pc, which is used by the real hacker with troijan client software from somewhere else.
Would be nice to have a software that detects the client version of the troijan. Hmm, perhaps I should look for some hackerz sizez...

Kelly[KGN] · « **Reply #3 on:** January 07, 2003, 05:23:20 AM »

Hi,

if that's the case, somebody will probably get in trouble without being guilty, poor guy.
One the other hand, chances are pretty low that this is the case.

A good firewall and virus protection will do most of the work against some tard who scans randomly for some IPs and I don't care about them, if I'm attacked by the same guy often, over a couple of days it's another thing, and I always send a mail to the ISP from where the attack comes from...in all cases the attacks stopped 2-3 days later, and never happened again.

LBE182 · « **Reply #4 on:** January 07, 2003, 05:41:16 AM »

The best defense is a router, if you are using cable; the router masks your IP.

If not try Black Ice, Nuke-Nabber, Zone alarm, Gozilla(or something like that). It has been a while since I used firewalls but I think you can still get them some where.

I have heard of software you can get to counter attack hackers, I don’t remember what they were, or how to get them. I will ask around.

StSanta · « **Reply #5 on:** January 07, 2003, 07:35:12 AM »

The easiest way is to simply block the attacks. The best thing is to do a trace and contact the offenders ISP. That's normally as far as you can go though, as they alone sit with the info on who's doing the attacking. If it's a trojan horse, the owner of the puter can be informed and have it removed.