Someone IS hacking a computer of someone I know HELP

[Wompastompa]

I need to find out who is doing this because my friend is going through a messy divorce with a VERY rich man and he is definatly reading her emails and possibly access to her machine he owned a high profile mobile phone telecoms company but has sold off his shares a while ago. I think that this is impossible to find out due to his power is there anyone that can help me find out

Cheers

DF'ers

[DejaVu]

Unlikely to be hacking their computer, if he is, update the virus definitions, turn full protection on and run malwarebytes to be certain.
Perhaps the email accounts if he already has the passwords?

He may also be using a key logger if the password has already been changed.
Only option is to change the passwords on someone else's computer. Also check the 'Secondary email account' that opened theirs is not his!

Also check that Remote Access is switched off on the system...! He may have activated it when he left.

You can try http://www.nirsoft.net/utils/smsniff.html to see if unauthorised access is being gained from an external IP address.
You can then find out which ISP they are with and report it to them as 'Invasion of Privacy'.

You can then also block access from that IP Address from their router (I think).

Finding out who they are going to be a almost impossible, especially if they are a hired professional hacker (unlikely).

[Sanj[UK]]

or just disconnect the machine from the internet completely.

[Wompastompa]

cheers guys prompt as always

[Zippeyrude]

and change email account passwords immediately

[beerman]

and change email account passwords immediately

Do it on a different machine too.

Personally I'd completely rebuild her machine and change all passwords (on a different machine on a different network).

[evilsatan]

Does he live close? Check out packet sniffing. If someone is connected to the same network then they could be getting passwords off. Change your wireless password and enable WPA2 with a strong alphanumeric 64 or 128 bit key.

[cyprus]

Got pics of her?

[koola2]

and change email account passwords immediately

and check there is no rule forwarding email to another account (especially if it is webmail)

[Wompastompa]

just received an email saying we know what your doing and who you are WTF!!!

[muttleymacclad]

Time to call the police.

[Wompastompa]

my mate who asked me to look this up is a military personell and has informed the military police SHITTTT what have i got myself into

[JonEp]

just received an email saying we know what your doing and who you are WTF!!!

Post email headers so we can discover who they are ! ;0)

[drdude]

Presuming the computer is running a variant of Windows, perhaps try dropping to the command line and typing 'netstat -a' (obviously minus the quotes) and you should get a list of all the resources the computer is connected to. The members on here may be able to identify what, if any, looks suspect.

[DejaVu]

just received an email saying we know what your doing and who you are WTF!!!

Reply with "Wow, that's spooky. So do I, but the question is, do you know what colour underwear I have on?"

and CC and BCC you local copper shop and MOD Buddies email IE...

emailharrassment@police.gov.uk (they will get it).
sgt.harris@mod.gov.uk (so will they)

and just for kicks put in

ilovebigcocks@gaydar.co.uk

I'm almost certian it'll stop after the last one.

[Undertaker]

interesting, just get the police involved

let them deal with it

keep us updated though

[Wompastompa]

waiting from the police to get info from this and the military police too keep u in the loop

[Wompastompa]

Right my iPad I used also to login today has shut itself off and had to factory reset to work again, came home and kaspersky was chucking loads of security intrusions at me as was malwarebytes. When I logged on to email and facebook it said that the security certificate was invalid etc so reset Internet settings to default now my machine has completely frozen on restart and all can't do shit completely fucked is this coincidence or what what do u think?

[evilsatan]

If you are just using Windows Firewall then get a decent one like Zonealarm or remove kapersky and install Eset Smart Security.

Disconnect from the internet, boot into safe mode. On another machine (clean machine) download rkill.exe from bleeping computer and the latest malwarebytes. Move to your offline machine in safe mode, run rkill with administrative rights then when it completes install malwarebytes. If you have to reboot then boot into safe mode and run rkill again, then run malwarebytes on a full scan. Maybe there are some nasties on your system. Then install a proper firewall and change the settings to strict so you have to manually allow any incoming/outgoing connections.

I assume there is no chance someone has entered your house and planted a physical keylogger/bug? Not trying to make you paranoid but sounds like some weird shit is happening to you!

[Mule]

If you've been trawling google for security issues that is in fact a really good way of getting viruses etc. on your computer as there are so many trojan websites.