Fixing a pc...

So my dad's computer was hacked before I moved in, not knowing this I connected ny devices, and well.. of course lost all my data and accounts as they seem to be able to monitor network activity.

Here's my problem now. No money, they stole it. So can't do alot of things.

They set my machines up as a machine which of course they could access, long explanation but if anyone wants to hear it I'll explain.

They then stole all my session cookies, somehow as I created them.
Then they just replace everything on my pc with dev versions they can access.

How do I find the hosted networks on my machines, how do I delete them, how do I find their ip, so that all my future PCs block the domains.

IMO, the FIRST thing you need to do is disconnect any and all devices from your network, reformat all drives and reinstall your OS's from fresh and change the password on your devices and router(s) to something that cannot be cracked. If your router is old you may consider replacing it with something updated because if someone or something indeed got in, that would be the first point of entry. If your router is ISP owned, have them replace it.

From a home user perspective you are better off wiping and re-installing as Dark Knight suggested. Depending on how sophisticated the attacker is you need to have a certain level of proficiency in incident response and digital forensics to really determine the breathe and depth of the attack. Most home users and even IT folks are not going to have that skill set. Sure you could run AV/EDR tooling at it, but once a system is compromised it's hard to say without investigating a system what type of anti-protection and evasion measures are employed to maintain persistence.

If you suspect other systems are also compromised which is a common TTP (lateral movement) you could wipe those systems as well.

If the computer's BIOS is infected, reinstalling is not going to help. Can Malware Hide In BIOS? How to Protect Your PC from Infection

That is correct, even firmware controllers on SSDs and other devices. These are less common unless of course you're being targeted by a state sponsored APT. That's really only likely if you have ties to your government, a political figure or critical infrastructure.

A horrible thing to read, a horrible thing to have happen to you. My heart goes out to you and your father.

neemobeer said:

That is correct, even firmware controllers on SSDs and other devices. These are less common unless of course you're being targeted by a state sponsored APT. That's really only likely if you have ties to your government, a political figure or critical infrastructure.

Click to expand...

Unless his fathers computer passed the virus to his computer it is possible that the router or modem could be infected.