Hacked?

Point value changed by question poster.

as a system administrator I will advise teh following.
once we have detected that you have been hacked, copy the data (only the data) to a safe location and reinstall the system.
make sure that you have a antivirus installed and have the latest pathes installed before connecting to the internet.
if possible set up the serverbehind the firewall.

check the www.microsoft.com/technet
regarding security.
MS has a baseline analyzer that you can use to safeguard your system.

http://www.microsoft.com/downloads/details.aspx?FamilyID=8b7a580d-0c91-45b7-91ba-fc47f7c3d6ad&displaylang=en

regards

leopold

You've probably been hacked AND hijacked. Check out this discussion for some good advice:

http://tinyurl.com/2fcjk

You have Spamware/spyware on your pc...

Goto www.lavasoftusa.com

Download Adaware - Free

Install it, Update it, Run it... Put green checkmarks in all the boxes, custom folders, select all hard drives, next next... It will scan your system. Hit next when done, it will give you a list of junk that shouldn't be there, right click on that list and select "Select all objects", next/finish. Reboot. They will be gone.

Also, ensure you are running the latest updates on your anti-virus and run a full scan. If you have none, you can goto trendmicros.com and do a free online full pc scan for virii.

I agree with the wise and knowing SyscoKid on this one! And yes, it is my answer in the thread Sysco posted that was the accepted answer.
You've been hacked, and they are running the Serv-U FTP server on your system.
The thread Sysco posted does give some good ideas for what to look for, what files are the ones that are being used by the ServU FTP client.
What is happening is that people are using your machine for, most likely, a "Warez" server. The MYBOT.LOG files you see contain the warez (or it could be MP3, or porn files, etc.), and your machine is connected to an IRC channel. From that channel, people there are uploading/downloading from/to your machine.
So, first off GET A FIREWALL!
I like ZoneAlarm, personally.
http://www.zonelabs.com
It will tell you what applications are trying to access the Internet. You can use that to block this thing.
Next, look in the list of Services for something that is STarted that should not be there. It could be labeled "FireDaemon", or "Serv-U FTP". I can't be more specific then that.
The location of the Services applet is different, depending on which version of Windows you have.
Anyway, you need to find the service for the connection to the IRC chat channel, and disable it.
Cleanup can happen after that.
Good luck!

Go to lavasoftusa.com and download Adaware install it. Run the update then scan for problems. The other I use is Spybot Search & Destroy. Basically the same but as the names metion each does a better job at what its named for.

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software

Spybot:
http://tinyurl.com/ziar

Ad-Aware:
http://tinyurl.com/tek5

Stinger
http://vil.nai.com/vil/stinger/
This item will not update through the program. You have to download the new version.

CWshredder:
http://tinyurl.com/2bzef
Or
http://tinyurl.com/2k642
Look for the file in English CWShredder.exe

StartUpList:
http://www.mac-net.com/576482.page

StartUpList is information only. Startup, Registery, and others. You can?t fix anything from within the program.

Hijack This:
http://mjc1.com/mirror/hjt/

Hijack This is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure. Items you are not sure of do a Google search for them.

Run Your Antivirus again

I have had to boot into safe mode and run these.

Good Luck Lee