Jump to content

Infected?


Recommended Posts

I just got a ip block from mbam... now im reall worried ugh 08:04:12 MESSAGE Protection started successfully

08:04:17 MESSAGE IP Protection started successfully

08:07:21 MESSAGE IP Protection stopped

08:07:29 MESSAGE Database updated successfully

08:07:31 MESSAGE IP Protection started successfully

09:24:11 MESSAGE Protection started successfully

09:24:16 MESSAGE IP Protection started successfully

10:20:15 IP-BLOCK 216.45.59.114

Link to post
Share on other sites

  • Staff

Yes that site was hacked but has now been fixed.

If you would ilke to check for infection, please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post the one that is not minimized.

Link to post
Share on other sites

  • Staff

Hi,

Are you actually experiencing any issues?

Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1

Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :filefind
    exp.exe
    :regfind
    exp.exe


  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Next, please run a free online scan with the ESET Online Scanner

Note: You will need to use Internet Explorer for this scan.

  1. Tick the box next to YES, I accept the Terms of Use.
  2. Click Start
  3. When asked, allow the ActiveX control to install
  4. Click Start
  5. Make sure that the options Remove found threats and the option Scan unwanted applications is checked
  6. Click Scan
    Wait for the scan to finish
  7. Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
  8. Copy and paste that log as a reply to this topic

Next, download my Security Check from here or here.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Let me know how things are running now and what issues remain.

-screen317

Link to post
Share on other sites

========== filefind ==========

Searching for "exp.exe"

No files found.

========== regfind ==========

Searching for "exp.exe"

No data found.

-=End Of File=-

check up text...

Results of screen317's Security Check version 0.99.5

Windows Vista (UAC is enabled)

Out of date service pack!!

Internet Explorer 8

``````````````````````````````

Antivirus/Firewall Check:

Windows Firewall Enabled!

ESET Online Scanner v3

Kaspersky Internet Security 2010

WMI entry may not exist for antivirus; attempting automatic update.

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

Java 6 Update 20

Out of date Java installed!

Adobe Flash Player

Adobe Reader 9.3.3

Japanese Fonts Support For Adobe Reader 9

````````````````````````````````

Process Check:

objlist.exe by Laurent

Windows Defender MSASCui.exe

Malwarebytes' Anti-Malware mbamservice.exe

Malwarebytes' Anti-Malware mbamgui.exe

Windows Defender MSASCui.exe

Kaspersky Lab Kaspersky Internet Security 2010 avp.exe

Kaspersky Lab Kaspersky Internet Security 2010 x64 klwtblfs.exe

````````````````````````````````

DNS Vulnerability Check:

GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````

no threat detected by eset

Link to post
Share on other sites

  • Staff

Please understand that bumping puts you at the bottom of my list of people to reply to. Please also understand that I am notified every time you reply and I am not online 24/7.. If you keep bumping and sending PMs I will close this thread.

With that said, navigate to Start --> Control Panel --> Add or Remove Programs, and uninstall the following programs (if present):

Java

Link to post
Share on other sites

I also cant seem to save pictures like on image shack and ie8 looks strange sorry if you think Im wasting your time I really need this computer and could you tell me why I had limited connectivty I just think I have a rootkit I just dont know forgive me if you fell like im wasting your time I dont know much about security at all..

Link to post
Share on other sites

Ok here http://www.pcpitstop.com/betapit/sec.asp?conid=23829855 but I still have questions.. Why is it i cant turn on windows defender? and why does my computer act strangely if i try to scan with an antivirus program waity right now I could get it to turn on and are you sure that site is safe just asking anyways I guess I gotta buy a new router hope fully it was a hardware and a bunch of wierd images poped up on my screen but i read it was part of the test..

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.