PDA

View Full Version : a hacker keep changing my nameservers



khaleegi
06-25-2007, 05:32 AM
I don't know how is he able to do this, in many times he is able to change it to different nameservers, I changed my E-mail and password but still he is able to do it... usually it is changed from Edit Domain->Modify Name Servers
any help?

Shonky
06-25-2007, 06:29 AM
If you believe your hosting account is compromised I suggest you contact Bluehost A.S.A.P. either by phone or live chat.

hofmax
06-25-2007, 06:57 AM
I agree, contact bluehost asap. If someone keeps changing your name servers it's probably a problem on the domain side of things. You should check if you have a trojan that is used to spy on your passwords etc.

Spyware detection tools:

Hijack this (http://www.download.com/HijackThis/3000-8022_4-10379544.html)
Adaware (http://www.download.com/3000-2144-10045910.html)
Pest Patrol (http://www.pestpatrol.com/)

For extra help go to bleeping computer (http://www.bleepingcomputer.com/)

khaleegi
06-25-2007, 07:20 AM
thanks Shonky ..

they said they said they can not help me on this , I have to find the script which enable them to do this my self

khaleegi
06-25-2007, 07:23 AM
thanks hofmax.. I will look for trojan and I will let you know

khaleegi
06-25-2007, 07:55 AM
Hello I used "Hijack this" can you see any torjan in the attached log file

hofmax
06-25-2007, 08:34 AM
Sorry khaleegi, I'm not an expert for interpreting these log files but you could go to the bleeping computer forums and ask for help there. They have a hijack this tutorial (http://www.bleepingcomputer.com/tutorials/tutorial42.html).

Apparently you can also have them analysed here (http://www.hijackthis.de/)

charlesgan
06-25-2007, 09:36 AM
securing account is own responsibility. BH support cant able to assist in it.

adviced is to use longer password.
and also make sure your pc is clean from spyware etc.