Hacker Harassment Continued - - Requested by dennis_I

And Just now my 12:46 posting Reappears? Hmm?

really strange, prolly my side, I'm sure.

Again, thanks for your help!

Question:

What about the two Warnings! on the Security Check on post #7?

Dennis, 

I did everything like you instructed and THEN I changed my passwords on several accounts and Still I am locked out of them when I try to log back in.

I know I entered correct info and how can it be that every account that I changed the password on is INCORRECT? I wrote it down correct and entered it correct and I am NOW locked out of SIX accounts that I updated passwords on. See what I'm going through?

AND if I try to reset them on the respective reset pages, it always tells me the feature is unavailable forcing me to have to call customer service which is another huge annoyance.

It seems they were piggybacking me while I changed the password and then they changed it on me right after. How can it be that after I changed six passwords I am now locked out of all of them especially the cable account?

Clearly, IT is still harassing me WHILE you were helping me and the conclusion as you mentioned and I always believed is true, via the network credentials. Since they're in my network that means they have device specific info, right?

Oh yeah, IT didn't bother to lock me out of this Continued-2nd BC account, it would be POINTLESS and they know it!

1. SO HOW can I GET RID OF this Harassing Hacker FOR GOOD?

2. PROOF? - HOW can I show proof to the police to get THEM in TROUBLE for it?

Edited by AngryOne1Continues, 24 February 2024 - 04:25 PM.

@ AngryOne1continues

I too have no idea what happened to your post which you say was timed at 12.46 pm, and I have checked your two topics and your posting history and can find no record of it. This is complicated by the fact that you have two accounts both of which dennis_J has replied to. this is confusing to everybody. I understand you created the second account on a misunderstanding but when all this is over I would be grateful if you would send me a PM saying which account you wish to keep then we can merge your two accounts into one.

To send me a PM just click on my avatar, this takes you to my profile where you will find a button 'Send me a message' near the top on the right. Clcik on this and send me your reply.

Chris Cosgrove

Many thanks Chris.
------------------
@ AngryOne1continues
Yes please apply the updates, recommended by SecurityCheck.
We need to ensure that your network is as secure as possible.
With this in mind, please check that you have covered all of the recommended steps, from the articles I referred to in post #11.
Please let me know if you need more information on any of the content.

Hi Dennis,

So, I did the updates.

I went over the list of securing a network but I come to realize that I DO for a FACT have a Hacker harassing me and I alone cannot combat it. I know due to my previous email account tagged to my previous BC account (the first one I started with getting help from you) and I was locked out of both of them. I tried several attempts at Recovery Email with no success even though I have both the current and previous passwords that should work and they don't, which means somebody went to a decent enough length to make sure I cannot log back into them, which is indicative of a Hacker.

I strongly believe it has to due with my neighbor regarding an email about him which is why I landed on this site to get help to prove to the deputies of his dirty deeds. After all your help and no malware found, and we both concluded it's definitely the network yet no matter what I do, he's got a Hacker in his corner. He was following me to the libraries, I have proof. Yet info given to the Deputy fell on deaf ears. He has a habit of lurking within and then after a bit of time it starts playing with the cursor letting me know once again, he's lurking in my computer. It's like driving down the block and an invisible passenger yanks the steering wheel, is how they get their jollies. Said Hacker is prolly getting wind of this posting right now...live!

WHY else would my email account all of a sudden lock me out and will not let me recover it and my 1st BC account, I'm locked out of that too which is tagged to the locked out email account right after I submitted those emails about my harassing neighbor!

What am I missing? Also some of those suggestions - it tells you to do this, do that, yet there's no clear instruction of how and when you do get instructions, they don't match the system steps that show up on my computer. So, it's frustrating and THE neighbor is seems has an ON-CALL Hacker. Isn't that nice, he's the butthole convincing said Hacker to crap on me based on lies I KNOW as I'm on the RCVG end of their Jr. High BS.

After all the clean-up and Proxy Removal, I still have someone IN MY computer.

I have someone in my phone and same clown is shutting off my TV as well, trust me I know, and no I am not crazy, just beyond fed-up!

It seems as if somebody is keeping tabs on me and monitoring me on my own computer and phone - a Peeping Hacker!

What does a Proxy do?

I had someone clean one up before!

Shaking my head!

Anyway, I've said enough

Thanks for your help!

If you have been through everything else, then please run through the following steps, which, unfortunately, nearly exhaust my suggestions. (Ignore any you have already completed)

• Factory reset the router.
  Find the reset button on your router (normally a small hole on the side or back of the router). Use a paper clip, or similar, to press and hold the reset button for 15 seconds. This should reset the router to factory defaults.
• Change the router admin password.
  When the reset is complete, connect to your router’s dashboard and change the login credentials using a strong password.
  Also choose a unique router name, rather than leave as default.
• Check connected devices.
  Navigate to the DHCP settings, "attached devices" section, or a similar name. It varies by router manufacturer.
  This will show the device name and MAC address for each device connected.
  Look through the list of connected devices and note any that aren't yours.
  Be sure to change your Wi-Fi password, using WPA2-PSK encryption, if it is available. That way, unauthorized users who don't know the new password, will be disconnected.
• Enable strong security features, if they are available.
  Your router may have additional security features like a network firewall, intrusion detection systems etc.
• Enable MAC address filtering.
  This allows you to create a list of specific MAC addresses that are allowed to connect to your network to help prevent unauthorized accessing your network.
• Disable or close unnecessary ports.
  Close or disable these ports to reduce the number of potential entry points.
• Disable remote management.
  In your router interface, check for an option to disable remote management. Disabling this feature will prevent hackers from remotely accessing and manipulating your router's settings.
• Update your router's firmware.
• Contact your ISP to find out if your router is vulnerable, and if so, how to update the firmware.
• Disable File and Printer Sharing.
  Open the Control Panel on your computer.
  Select "Network and Sharing Center" >"Change advanced sharing settings."
  Turn off file and printer sharing.
  Click "Save changes".

Should the issues persist, then we can check for any changes made in the last few days, if you run a new FRST scan and post the logs, as you did at the beginning.
If this does not reveal anything, then I feel that as your know the perpetrator, support from a local computer security/network specialist may be the best way forward.

Regarding your query on RemoveProxy.
Malicious software may change Internet Explorer proxy settings, so it's something we include sometimes as a precautionay measure.
This extract from the FRST tutorial explains in more detail.

Removes some Internet Explorer policy restriction settings like "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" or ProxySettingsPerUser in HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings. It removes "ProxyEnable" (if it is set to 1), "ProxyServer", "AutoConfigURL", "DefaultConnectionSettings" and "SavedLegacySettings" values from the machine and users keys. It also applies the BITSAdmin command with NO_PROXY.
In addition, it removes the default value of the "HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies" key if it is altered.

 

While reading this page, once again, another window TWICE popped up blocking the screen I was reading ...

so the Bored Hacker IS most likely just sitting around WAITING for me to get online so they could continue to harass me, ain't that right ya Bored Hacker? Peeping me ALL the time!

I will go through the list and let you know when done.

The Filtering and Closing Ports - I would need instructions for this.

IS THERE ANY WAY of finding out WHO THE GUEST is on my page at this time of posting?

or it's irrelevant if said Hacker is hacking he wouldn't BE a guest on this site on my page live? Brainstorming.

I really do APPRECIATE your help!

Please run through all the steps that you can and we'll look at the ports later, if the issues are still present
Could you please send me a PM with the make and model of your router?
Regarding your questions, the site can be viewed by guests, without logging in and this varies constantly throughout the day.
Let's focus on attempting to prevent further intrusion via your router, if this proves to have been compromised.
Remember to send me new FRST logs when you are done.

Working on it.... I just needed a break from this, a refresher.

Again, thank you for your consistent help on this.

Ok, I did all on the list except for:

• Enable MAC address filtering. -  don't know how or where to do this
  This allows you to create a list of specific MAC addresses that are allowed to connect to your network to help prevent unauthorized accessing your network.
• Disable or close unnecessary ports. - don't know how or where
  Close or disable these ports to reduce the number of potential entry points.
• Disable remote management. - unavailable to do 
  In your router interface, check for an option to disable remote management. Disabling this feature will prevent hackers from remotely accessing and manipulating your router's settings.
• Update your router's firmware. - unavailable to do
• Contact your ISP to find out if your router. 

FRST Log coming up...

You mentioned getting a new router in your PM.
This might be a good time to do this, as some of the security options don't seem to be available on your current model.
The port settings can be quite complex to navigate, so here are some Nirsoft tools that should help you with this.
CurrPorts v2.77
IPNetInfo v1.95
Also worth a look is Fing Desktop , but it looks as if you need the paid for version to be fully effective.

I'll go through the new logs and get back to you with my findings.


 

You probably recall that we removed the following.

Tcpip\..\Interfaces\{fb4390e7-a7cf-47b1-b480-fdc241a059dc}: [NameServer] 100.120.248.1

I see in the new log that this is present.

Tcpip\..\Interfaces\{fb4390e7-a7cf-47b1-b480-fdc241a059dc}: [NameServer] 100.120.136.1

It is also showing as the DNS currently in use.
(NetName:        SHARED-ADDRESS-SPACE-RFC6598-IANA-RESERVED)
Did this IP address appear in any of your investigations?
------------------------------------------------------------------------------------------------------
There was a Windows Update error also listed, but it may be resolved now.
Please do this to double check.
Press the Windows logo key + I combination on your keyboard to open the Settings app.
Click on Update and Security.
Select Windows Update and then click the Check for Updates button.
Please advise if any updates were shown and if they installed ok.

Yes, I recall that removal. What does that mean? Is that the sneaky SOB?

And the Proxy is that also a sneaky SOB?

update Failed to install on 3.3.2024 - 0x80070070

2024-02 Cumulative update Preview for Windows 10 Version 22Hs for x64-based Systems (KB50534843)