Have You Been Hacked? - Home

Have You Been Hacked?

Date: June 25, 2013

When a computer virus infiltrates your IT network, it is not always obvious.  Has your computer or someone else’s computer been exhibiting strange behaviors or been operating more slowly than usual?  This could be a sign that your IT network has been compromised by a malicious application.  Whether an individual computer or the entire network has been hacked, the symptoms are usually the same.  So, what do you look for?

 

On individual computers:

  • Unusual internet connectivity (sometimes fast, sometimes very slow)
  • The default web home page has been changed
  • The default web search page has been changed
  • The antivirus program isn’t working or freezes up on a regular basis
  • The web browser will not browse to web pages from Microsoft, Symantec or other web pages owned by security firms
  • New files/folders have appeared on the computer in odd places with strange names
  • Web pages exhibit strange behavior such as flashing
  • Web history cannot be deleted
  • The screen saver has been changed

On the entire IT network:

  • Firewall logs and Domain controller event logs are larger than normal and rapidly regenerate
  • Server event logs are missing or modified so that they no longer capture data
  • Security event logs are showing multiple errors for failed logon types
  • Network backups take longer than usual to complete
  • Network backup data set is larger than expected
  • Some security patches will consistently fail
  • Unusual applications, folders and files appear
  • Shared folders will have unknown .bat and .exe files

 

The best way to protect your business’s IT resources is to familiarize yourself, and all computer users, the symptoms of being hacked.  Encourage users to report any strange behaviors to your technical support department or company.  In order to limit your exposure to malicious software applications, be proactive and entrust a Managed Service Provider to oversee your IT network.  With a Managed Service Provider, there are numerous steps taken to protect against malicious applications.   To learn more about the proactive steps that can be taken, contact Pre-Tech today: (855) 600-TECH.