urgent pc hacked?? pls help

The_Grandmaster

I don't know what the cause is but at least we can start to rule thigns out if we do a malwarebytes scan and a hijack this log.

Instructions below (written by alienRIK):
Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

tronator

redbull08 wrote: »

yes i save passwords in clear text ive a bad memory

I have bad memory too and I use a different randomly created for everything, but I still don't save it as clear text. Search for KeePass.

redbull08 wrote: »

the folder had gone i did a search
where would Unused Desktop Items" be?
thanks everyone

It should be directly on your Desktop. Did you try %USERPROFILE%\Desktop?

redbull08

tronator wrote: »

I have bad memory too and I use a different randomly created for everything, but I still don't save it as clear text. Search for KeePass.


thanks


It should be directly on your Desktop. Did you try %USERPROFILE%\Desktop?

??? ive never had a folder like that on my desktop, sorry this is confusing me

redbull08

thanks folks
i have to go out now but will come back later
i have run a full scan will report back
any other advice appreciated

The_Grandmaster

redbull08 wrote: »

thanks folks
i have to go out now but will come back later
i have run a full scan will report back
any other advice appreciated

I hope you've updated malwarebytes?

redbull08

how do i do that ?

leaving at 1.15

redbull08

Malwarebytes' Anti-Malware 1.44
Database version: 3902
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.
29/05/2010 12:33:33
mbam-log-2010-05-29 (12-33-33).txt
Scan type: Full Scan (C:\|)
Objects scanned: 232842
Time elapsed: 2 hour(s), 6 minute(s), 0 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\System Volume Information\_restore{D8696F73-2D76-412A-A981-4300C43EF86F}\RP1319\A0399603.dll (AdWare.WebHancer) -> Quarantined and deleted successfully.

redbull08

had I infected file
(AdWare.WebHancer) -> Quarantined and deleted successfully.

could that have hacked me>?????

fiddiwebb

Can you remember the name of the folder you kept your passwords in?

If you do click start> search> All files and folders> put the name of the folder in the search box, lower down click on More advanced options and make sure Search hidden files and folders is ticked and then press search.

If you can't find your folder then it must have ben deleted, have you installed/un-installed any new software/programes recently?

mr_fishbulb

redbull08 wrote: »

had I infected file
(AdWare.WebHancer) -> Quarantined and deleted successfully.

could that have hacked me>?????

Probably not from the description of what it does:

"Trackware.Webhancer is a program that monitors Web sites visited and sends this information to a remote server."