Method for disabling Hacker?

Wordcrafter · 24 Oct 2017

Hello:

I thought I had found a way of getting rid of a hacker that has been corrupting my website, but I reached a road block in Windows 10 itself. By following the advice of three separate contributors in YouTube, I opened up the Command Prompt and entered netstat /b and then when I found the supposed culprit, entered netstat /ano and found the PID number. Unfortunately the information that the contributors were giving me evidently applied to older versions of Windows. When I tried to find my number I found that the Windows Task Manager where I was told I could end the hackers mischief, was quite different. At any rate I didn't find the number. My question is this: Is it even possible to end the mischief of a hacker this way? And seccondly, if it is, since the Windows 10 Task Manager is so different from earlier versions, how can this be done? If I had the Windows Task Manager mentioned by the contributors on YouTube, I might be able to get rid of my hacker.

---- Wordcrafter

Caledon Ken · 24 Oct 2017

Hi Wordcrafter. Welcome to the TenForums @Wordcrafter

If you open task manager, down in left corner click on "More Details" When the various columns show right click on one of the percentages at the top of a column. You should get a menu and you can click show PID.

You can also end a task. Of course the entry hole is still present so in they come again and again.

The issue is your website, not sure what you are using but there must be a hole that the hacker is using to enter your machine. I would update software immediately and then ensure any third party stuff is also up to date. I would think most web site publishing software have forums and they would be a real source of information. I used the Joomla forum and the experts their know their stuff. Once you get the hole concreted you can then turn your attention to the hacker. I think I would do a clean install of Windows to ensure there are no leftovers.

Other members with greater Web site development may have a different opinion and approach.

Ken

Samuria · 24 Oct 2017

Run this post TWO files it produces it should show whats going on so we can stop it

Please download and save FRST 64bit or FRST 32 bit to your Desktop.

http://download.bleepingcomputer.com/farbar/FRST.exe

http://download.bleepingcomputer.com/farbar/FRST64.exe

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Make sure that Addition option is checked.
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back .
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe).