Ive been hacked, please help.

aliEnRIK

davester wrote: »

It looks like from a Facebook thread that your not the only one its happened too, And some had their paypal accounts cleaned out as well, Something thinks its the poker site running the scam. Its more likely that Facebooks poop security that has allowed people to create apps which secretly mine you and your friends lists personnal details, probably stole the login details from the poker facebook app.
According to members the poker site is doing nothing about it.

Which sort of highlights the dangers of putting complete faith in facebook apps which facebook themselves distance themselves from

davester

I can use this threads issue as another reason to tell my Friends why I not have facebook

spud17

davester wrote: »

I can use this threads issue as another reason to tell my Friends why I not have facebook

Same here.

When people claim "I never visit dodgy sites", I then say, "So you don't use Fakebook?"

The_Grandmaster

The malwarebytes log doesn't show anything but I still question

O4 - HKCU\..\Run: [Update] E:\Documents and Settings\silky\My Documents\SYS\winupdate.exe
among others.

alienRIK - does the hijackthis log look right to you?

I don't think facebook itself can be blamed - although it increases your risk, if you don't click on any links people post or subscribe to apps then you should be fine!

aliEnRIK

The_Grandmaster wrote: »

The malwarebytes log doesn't show anything but I still question

O4 - HKCU\..\Run: [Update] E:\Documents and Settings\silky\My Documents\SYS\winupdate.exe
among others.

alienRIK - does the hijackthis log look right to you?

I don't think facebook itself can be blamed - although it increases your risk, if you don't click on any links people post or subscribe to apps then you should be fine!

I would remove that yes.

The_Grandmaster

AlinRIK - And this too I presume can be removed?
E:\Documents and Settings\silky\My Documents\SYS\winupdate.exe

Also SDBOT-WS WORM has been suggested to cause: O4 - HKCU\..\Run: [Update] E:\Documents and Settings\silky\My Documents\SYS\winupdate.exe
But the worm can't be found. False positive on hijackthis.de or has it been missed somehow?

aliEnRIK

The_Grandmaster wrote: »

AlinRIK - And this too I presume can be removed?
E:\Documents and Settings\silky\My Documents\SYS\winupdate.exe

Also SDBOT-WS WORM has been suggested to cause: O4 - HKCU\..\Run: [Update] E:\Documents and Settings\silky\My Documents\SYS\winupdate.exe
But the worm can't be found. False positive on hijackthis.de or has it been missed somehow?

Removing the autorun should be enough