Super Slow Computer and Ebay Account Hacked (Possible Keylogger?)

aliEnRIK

mleonard79 wrote: »

Thanks - I've ran malwarebytes twice in the last few days but I'm not sure I had windows defender turned off so I'll run it again.

Yes my anti-virus (AVG Free) and firewall are up to date - my Comodo firewall pops up all the time, could it be slowing the PC down any?

Will it be ok to change the passwords on this computer?

Thanks again.

It wil be a slow process, but you could do with going into comodos DEFENSE setup, and deleting all the entries and starting afresh. By rights a KEYLOGGER program would have asked you through comodo if it was to be allowed or not. If you allowed and remember then it needs switching back.

for defense ~ use in SAFE mode
WINDOWS APP and REMEMBER for most
TRUSTED and REMEMBER for trusted programs (anti virus etc)
UPDATE and REMEMBER ~ updating anti virus for example

When installing a program its easiest to disable it, then re-enable once its installed

FIREWALL is easy. Just allow or dissalow, and REMEMBER or dont

mleonard79

aliEnRIK wrote: »

It wil be a slow process, but you could do with going into comodos DEFENSE setup, and deleting all the entries and starting afresh. By rights a KEYLOGGER program would have asked you through comodo if it was to be allowed or not. If you allowed and remember then it needs switching back.

Hi AliEnRik - Thanks for your reply. I actually unninstalled and reinstalled comodo earlier today just in case it might help so I'm assuming that would have deleted all old stuff I'd allowed? If not how do I get into defense + setup? Thanks.

mleonard79

loaner wrote: »

If you are getting infections with AVG, ditch it.

What anti-virus should I go for instead then? Is Avast or Avira ok? Thanks for the tip about disabling third party cookies on firefox3.

DCFC79

mleonard79 wrote: »

What anti-virus should I go for instead then? Is Avast or Avira ok? Thanks for the tip about disabling third party cookies on firefox3.

avast is good

mleonard79

Ok I'm getting really worried now: A new AVG window I've never seen before has just popped up:

mleonard79

loaner wrote: »

Could be infection, could be a false positive, the name suggests a heuristic (guessing) detection, the process detail suggests it is detecting comodo.

burn that CD, and do a scan. Once you are infected, an infection can cloak itself, but it can't hide from a bootcd

I tried to burn the cd but after a few seconds I got a message saying "burning of the cd failed" - I tried 2 cds but got the same error with both. I've ruined so many cds and dvds lately trying to burn things.

I've also had the computer running the housecall scan for the last couple of hours and just when it got down to 5 mins left firefox crashed :mad:

Thanks for the help.

aliEnRIK

mleonard79 wrote: »

Ok I'm getting really worried now: A new AVG window I've never seen before has just popped up:

Theyre just temp folders that are infected
Run CCLEANER
http://www.filehippo.com/download_ccleaner/
(Top selection will remove all temp files)

mleonard79

I clicked on "remove threats" - is that ok?

I've been running ccleaner every day - I've already run it once today but I'll run it again. It's all very frustrating. Thanks.

aliEnRIK

mleonard79 wrote: »

Hi AliEnRik - Thanks for your reply. I actually unninstalled and reinstalled comodo earlier today just in case it might help so I'm assuming that would have deleted all old stuff I'd allowed? If not how do I get into defense + setup? Thanks.

That COULD have been a big mistake if you never switched windows firewall in place of it!?

Anyways ~ not to worry

First off I would update AVG and do a FULL scan
Then Malwarebytes (Update and scan) ~ post the log file if anything found
Spybot (Update, IMMUNISE and scan)

Download HIJACK THIS
http://www.majorgeeks.com/download3155.html
scan and post the log (do NOT remove anything yet)

Comodo ~
FIREWALL - ADVANCED - NETWORK SECURITY POLICY ~ PURGE then APPLY

DEFENSE ~ ADVANCED - COMPUTER SECURITY POLICY ~ PURGE then APPLY
If theres more than 20 items it must have saved the settings, in which case click REMOVE on everything except the comodo firewall section then APPLY

From there on follow my earlier instructions for it and be a little more computer savvy. If your unsure then BLOCK (but dont REMEMBER) and post what and where it was so we can analyse what it was (hopefully)

aliEnRIK

PS .....AVG can take hours, so leave that running tonight if you think it will