Scan your PC for Errors

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] URGENT: my PC's been hacked

[Fixed] Hijackthis! Logs - [Resolved] URGENT: my PC's been hacked posted in the Security & Safety forums; Hello- This afternoon I signed into my MySpace account and happened to notice that my page had been completely erased. When you looked at my page, it appeared as the ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 12-04-2006
Bronze Member
 
Join Date: Dec 2006
Posts: 8
UnderADeadOhioSky - See this Members User comments on their Profile page
Exclamation [Resolved] URGENT: my PC's been hacked

Hello-

This afternoon I signed into my MySpace account and happened to notice that my page had been completely erased. When you looked at my page, it appeared as the "edit profile" screen found only after logging in. I have no idea how they did this but I had to delete my account. I've been fighting an uphill battle with these infections for a few days now and things aren't looking good... to make it worse, i can't find a good anti spyware program. most of them will detect for you, but not remove. I noticed quite a few "svchost" files and other such menaces but can't get them off. I've done all the pre-work, so here are my Hijack this, AVG, and Panda ActiveScan reports. I know you're very busy but please help A.S.A.P.

Thank you much,
Alec
Attached Files
File Type: log hijackthis.log (6.0 KB, 3 views)
File Type: txt AVG report.txt (10.4 KB, 3 views)
File Type: txt Activescan.txt (7.6 KB, 2 views)


  #2  
Old 12-04-2006
upgrader's Avatar
Site Manager
My PC
 
Join Date: Jul 2006
Location: /home/upgrader/
Posts: 6,580
PC Experience: Some Experience
upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page
Send a message via MSN to upgrader Send a message via Skype™ to upgrader
Default

Well done for posting your prework! Im sure the security team will be along soon to help you. For anti-spyware i recommend spybot search and destroy combined with the use of adaware.


__________________
PCHF Rules--PCHF Prework--PCHF Downloads
  #3  
Old 12-04-2006
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,593
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

Before the Security Team get on the case for you, why not download this: ewido - anti-spyware and anti-malware solutions and run it - it will allow you to clean all of the infections that IT finds.


__________________

Pre-Work
/ System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #4  
Old 12-04-2006
Bronze Member
 
Join Date: Dec 2006
Posts: 8
UnderADeadOhioSky - See this Members User comments on their Profile page
Default

thanks for the recommendation. i did in fact use ewidow (who merged with avg) and posted the report under "AVG report" in this post. it found and cleared about 67 tracking cookies. but there is still plenty more to be done, aparrently.

thanks again


  #5  
Old 12-05-2006
chiaz's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Singapore
Posts: 2,866
PC Experience: PC Guru
chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page
Default

Hi.

I notice you have McAfee on your computer, but the installation seems corrupted/partly-removed to me.

Have you contacted MySpace about the problem you mentioned? It appears more to be as an issue on their part, or maybe even a browser problem.


These fixes can be gotten rid of by now...navigate to and delete the following file/folder:
C:\VundoFix Backups\
C:\WINDOWS\system32\Process.exe

As for the cookies, you can get rid of them using ATF Cleaner:
Download ATF Cleaner
  • Double-click ATF-Cleaner.exe to run the program.
  • Click Select All found at the bottom of the list.
  • Click the Empty Selected button.
Click Exit on the Main menu to close the program.


Otherwise your logs look clean...
It's normal to have several instances of svchost.exe running in your system.


  #6  
Old 12-05-2006
Bronze Member
 
Join Date: Dec 2006
Posts: 8
UnderADeadOhioSky - See this Members User comments on their Profile page
Default

thanks a lot. i really appreciate the clarification.


  #7  
Old 12-05-2006
chiaz's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Singapore
Posts: 2,866
PC Experience: PC Guru
chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page
Default

You're welcome. You can read the Afterwork for some malware prevention tips:
http://www.pchelpforum.com/hijackthi...afterwork.html

Good luck, and see you around the forum!



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 08:26 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top