Jump to content

Hacker


Recommended Posts

He guys,

Since a week now i have been struggling with a root kit. I have done multiple scans with nod32 and malwarebytes.

In these past few days i have removed over 100 threats, but it doesn't resolve my problem. If i would scan right now, malwarebytes nor nod32 would find anything.

I have 2 ip addresses from the guy that attack me:

212.117.177.13 (svchost.exe, port: 53731, Type: outgoing)

91.193.194.138 (firefox.exe, port: 53721, Type: outgoing)

I get these from malwarebytes.

Yesterday i looked with 'net user' and found out that there was a user called 'elephant' i deleted his account.

I think it is completely gone. But when i looked in event viewer i found these users:

ANONYMOUS LOGON

Authenticated users

BATCH

CONSOLE LOGON

CREATOR GROUP

CREATOR OWNER

DIALUP

There are a few more!

But for example, when i look at the users who have right on mine WINDOWS map i see this:

CREATOR OWNER: special permissions

SYSTEM: special permissions

TrustedInstaller: List folders contents and special permissions

I can't delete these users nor change there rights.

A few days ago, i wanted to re-install windows 7. But even that doesn't work, my cd drive doesn't recognized the cd.

I really appreciate if you guys want to help me, please ask me if you want more information.

Thanks.

Kind regards,

Mitchell

Link to post
Share on other sites

Hello, and welcome to Malwarebytes.org

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

You can follow the directions below and someone will assist you with running scans on your system to see if they can detect anything.

Please print out, read and follow the Directions HERE, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank you very much.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.