Question

Locked

user account membership changed

By lmayeda ·
I am running XP Pro and have PC admin and Domain admin rights. I was troubleshooting permissions problems on a business application and discovered that my network PC rights had changed from administrator to Debugging user. I did not change it and no one else has access to my PC. After changing it back to administrator and logging off/on, I discovered that I could not PING the network server by name (nor other PCs on the LAN) ... but I could PING by IP address. When I ping a computer by name, a strange IP address displays "69.46.226.163" before the PING times out. When I entered this IP address on my browser, it came up with what appears to be a shopping website. Whois resulted in memphislending.com. I also discovered in my network connections a new Internet Gateway connection (connected) which I managed to deleted. I've re-booted by PC but I still can't ping local PC's by name and I still see the 69.46.226.163 IP address. I suspect that I've been hijacked, though my Symantec scan and Spybot S&D are clean. Any ideas as to how to pursue? Thanks in advance

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Hijacked PC

by Info-Safety, LLC In reply to user account membership c ...

Unless your Symantec product is NIS 2007, it is unlikely to uncover nasty spyware, nor is Spybot. Good anti-spyware products include Webroot Spysweeper and PCtools Spyware Doctor. If you have strange entries in your HOSTS file -- usually in C:\WINDOWS\SYSTEM32\DRIVERS\ETC
you can expect that you are being rerouted.

I hope this helps.

Craig Herberg
http://info-safety.com

Collapse -

Keep the suggestions coming!

by lmayeda In reply to Hijacked PC

Am using Semantic Corporate ver 9.0. I guess we should upgrade. There are no strange entries in my HOSTS file. I had to add the IP address and name of my domain controller to be able to ping it by name and to be able to get to the local business application. I will have to re-install Webroot Spysweeper which I had previously had installed ... I thought it was taking up too much resources. There must be somewhere else in the system that is causing the re-routing. Thanks for your input.

Collapse -

Keep the suggestions coming!

by lmayeda In reply to Hijacked PC

Am using Semantic Corporate ver 9.0. I guess we should upgrade. There are no strange entries in my HOSTS file. I had to add the IP address and name of my domain controller to be able to ping it by name and to be able to get to the local business application. I will have to re-install Webroot Spysweeper which I had previously had installed ... I thought it was taking up too much resources. There must be somewhere else in the system that is causing the re-routing. Thanks for your input.

Collapse -

Keep the suggestions coming!

by Info-Safety, LLC In reply to Keep the suggestions comi ...

It's possible there is a proxy installed. The obvious place to look is somewhere in IE's Internet Options -- Connections. It's a great idea, though, to check for nasty spyware.

Good luck.

Craig Herberg
http://info-safety.com

Back to Networks Forum
5 total posts (Page 1 of 1)  

Hardware Forums