我朋友的电脑被 hack

chiu_yan

我朋友的电脑被 hack

对方经过 vnc remote access, hack 进了我朋友的电脑。
对方用 firefox 开了 where is my ip address 之类的网页来 track 电脑的位置。

也发现对方在我朋友的 router 多里开了一项 port forwarding 给 cs
留下几个没有关闭的 hlds.exe 的 dosbox
1。有没有办法知道对方的意图？
2。有没有办法知道对方在电脑里做了什么东西？
3。有没有办法知道对方的 ip address ?

hlds.exe 的 dosbox 里的内容如下：
20.0 fps  3/32 on      fy_buzzkill
Console initialized.
Protocol version 48
Exe version 1.1.2.7 (cstrike)
Exe build: 10:44:49 Aug 28 2012 (5758)
STEAM Auth Server
Server IP address 192.168.0.28:27041
No IPX Support.

   Metamod version 1.19p32 Copyright (c) 2001-2006 Will Day
     Patch: Metamod-P (mm-p) v32 Copyright (c) 2004-2007 Jussi Kivilinna
   Metamod comes with ABSOLUTELY NO WARRANTY; for details type `meta gpl'.
   This is free software, and you are welcome to redistribute it
   under certain conditions; type `meta gpl' for details.


   AMX Mod X version 1.8.2-dev Copyright (c) 2004-2006 AMX Mod X Development Tea
m
   AMX Mod X comes with ABSOLUTELY NO WARRANTY; for details type `amxx gpl'.
   This is free software and you are welcome to redistribute it under
   certain conditions; type 'amxx gpl' for details.

[DPROTO]: Version 0.4.8p Windows
[DPROTO]:  Loading config './dproto.cfg'
[DPROTO]:  LoggingMode = 2
[DPROTO]:  Config sucessfully loaded.
[DPROTO]: Done.
L 03/25/2015 - 03:19:51: -------- Mapchange to fy_buzzkill --------

Orpheu configuration started.

        Parsing mods configuration started.
        Parsing mod file "cstrike"
        Parsing mod file "dod"
        Parsing mod file "esf"
        Parsing mod file "esf_openbeta"
        Parsing mod file "ns"
        Parsing mod file "SvenCoop"
        Parsing mod file "tfc"
        Parsing mod file "ts"
        Parsing mod file "valve"
        Parsing mods configuration ended.

        Parsing libraries configuration started.
                Parsing file "monstermod"
                        Added library monstermod identified by cvar monster_spaw
n
                Parsing file "podbot"
                        Added library podbot identified by cvar pb_version
        Parsing libraries configuration ended.

        Parsing type aliases started.
                Parsing folder "CBaseEntity"
                Adding alias"CBaseEntity *"
                Parsing folder "CGameRules"
                Adding alias"CGameRules *"
                Parsing folder "charPointer"
                Adding alias"char *"
                Parsing folder "CMBaseMonster"
                Adding alias"CMBaseMonster *"
                Parsing folder "long"
                Adding alias"long"
                Parsing folder "VectorPointer"
                Adding alias"Vector *"

        Parsing type aliases ended.

Orpheu configuration ended.

Orpheu functions search started.

        Parsing functions started.
                Parsing file "SV_Rcon" started
                                Argument type "pointer" validated
                                Searching for signature "[0x55][0x8b][0xec][0x81
][*](...)" ... FOUND
                Parsing file "SV_Rcon" ended
                Parsing file "SV_Rcon_Validate" started
                                Searching for signature "[0x56][0x57][0xe8][*][*
](...)" ... FOUND
                Parsing file "SV_Rcon_Validate" ended
        Parsing functions ended.

Orpheu functions search ended.

Orpheu virtual functions search started.

        Parsing virtual functions started.
        Parsing virtual functions ended.

Orpheu virtual functions search ended.

Orpheu memory structures search started.

        Parsing memory structures started.
        Parsing memory structures ended.

Orpheu memory structures search ended.
[ANTI HLBRUTE v1.1]: ONLINE
L 03/25/2015 - 03:19:51: [CSservers.Ro] Fisierul <addons/amxmodx/configs/csserve
rs.cfg> a fost incarcat cu succes!
Failed to load Steam Service
ServiceStart: failed to start
BOpenService failed
ServiceStart: failed to start
Connection to Steam servers successful.
   VAC secure mode disabled.
Reconnected to Steam servers.
   VAC secure mode disabled.
Reconnected to Steam servers.
   VAC secure mode disabled.
Reconnected to Steam servers.
   VAC secure mode disabled.
Reconnected to Steam servers.
   VAC secure mode disabled.
Reconnected to Steam servers.
   VAC secure mode disabled.


请大家不吝指教。感激不尽。谢谢。