We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Has my PC been hacked?

2

Comments

  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    ============== Pseudo HJT Report ===============
    .
    uSearch Page =
    uStart Page = hxxp://uk.yahoo.com/
    uSearch Bar =
    uInternet Settings,ProxyOverride = *.local
    uURLSearchHooks: H - No File
    uURLSearchHooks: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\5.4\iobitToolbarIE.dll
    uURLSearchHooks: FCToolbarURLSearchHook Class: {ada2ac0d-15c6-4611-ba5d-5b0a8b52fd6d} - c:\program files\nectar search toolbar\Helper.dll
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
    BHO: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\5.4\iobitToolbarIE.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll
    BHO: Norton Identity Protection: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton internet security\engine\19.6.2.10\coIEPlg.dll
    BHO: Norton Vulnerability Protection: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton internet security\engine\19.6.2.10\ips\IPSBHO.DLL
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files\windows live\companion\companioncore.dll
    BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    BHO: Nectar Search Toolbar BHO: {b7c2f0d8-2209-4693-a15d-5a537211d48b} - c:\program files\nectar search toolbar\Toolbar.dll
    BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\6.3.2291.0\npwinext.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton internet security\engine\19.6.2.10\coIEPlg.dll
    TB: Nectar Search Toolbar: {8020143d-5926-4394-a04d-dd0b649da121} - c:\program files\nectar search toolbar\Toolbar.dll
    TB: @c:\program files\msn toolbar\platform\6.3.2291.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\6.3.2291.0\npwinext.dll
    TB: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\5.4\iobitToolbarIE.dll
    uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
    uRun: [Advanced SystemCare 4] c:\program files\iobit\advanced systemcare 4\ASCTray.exe
    uRun: [Google Update] "c:\users\tatz\appdata\local\google\update\GoogleUpdate.exe" /c
    uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
    uRun: [MobileDocuments] c:\program files\common files\apple\internet services\ubd.exe
    mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [<NO NAME>]
    mRun: [SearchSettings] "c:\program files\common files\spigot\search settings\SearchSettings.exe"
    mRun: [ServiceManager.exe] "c:\program files\virgin media\service manager\ServiceManager.exe" /AUTORUN
    mRunOnce: [CleanFiles.bat] c:\windows\system32\cmd.exe /q /c c:\windows\temp\cleanfiles.bat "c:\program files\trend micro\" > c:\windows\temp\CleanFiles.log
    mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: Free YouTube Download - c:\users\tatz\appdata\roaming\dvdvideosoftiehelpers\freeyoutubedownload.htm
    IE: Free YouTube to MP3 Converter - c:\users\tatz\appdata\roaming\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm
    IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
    DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://oas.support.microsoft.com/ActiveX/MSDcode.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    TCP: DhcpNameServer = 192.168.0.1
    TCP: Interfaces\{71B93BCC-EB99-4DD9-B5D4-A339AF8541BD} : DhcpNameServer = 192.168.0.1
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    STS: ObjectDockShlExt Class: {1984d045-52cf-49cd-db77-08f378fea4db} - c:\program files\stardock\objectdockfree\ODMenu.dll
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    .
    Mummy to two girls: October 2013 and February 2016
  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    ============= SERVICES / DRIVERS ===============
    .
    R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1306020.00a\symds.sys [2012-3-23 340088]
    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1306020.00a\symefa.sys [2012-3-23 905336]
    R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.5.1.2\definitions\bashdefs\20120402.001\BHDrvx86.sys [2012-4-3 821880]
    R1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\nis\1306020.00a\ccsetx86.sys [2012-3-23 132744]
    R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.5.1.2\definitions\ipsdefs\20120413.001\IDSvix86.sys [2012-4-14 368248]
    R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1306020.00a\ironx86.sys [2012-3-23 149624]
    R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\nis\1306020.00a\symtdiv.sys [2012-3-23 345208]
    R2 AcerSyncSystemService;AcerSyncSystemService;c:\program files\acer\acersync\AcerSyncSystemService.exe [2010-11-28 56152]
    R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928]
    R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-6-18 328536]
    R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2012-4-12 784792]
    R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
    R2 NIS;Norton Internet Security;c:\program files\norton internet security\engine\19.6.2.10\ccsvchst.exe [2012-3-23 138232]
    R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-10-13 2214504]
    R2 ServicepointService;ServicepointService;c:\program files\virgin media\service manager\ServicepointService.exe [2012-4-16 10310968]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2012-3-18 106104]
    R3 V0700Vid;Creative Live! Cam Chat HD Driver;c:\windows\system32\drivers\V0700Vid.sys [2010-10-17 322304]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-8-5 136176]
    S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-2-15 158856]
    S2 StudioPro;StudioPro webcam;c:\windows\system32\drivers\StudioPro.sys [2011-3-3 124416]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-6 253600]
    S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2010-11-28 36640]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-8-5 136176]
    S3 qcusbser;ACER Android USB Device for Legacy Serial Communication;c:\windows\system32\drivers\qcusbser.sys [2009-8-14 105984]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
    .
    =============== Created Last 30 ================
    .
    2012-04-16 16:50:49
    d
    w- c:\users\tatz\appdata\local\ElevatedDiagnostics
    2012-04-16 16:31:01
    d
    w- c:\users\tatz\appdata\roaming\Virgin Media
    2012-04-16 16:30:50
    d
    w- c:\programdata\Radialpoint
    2012-04-16 16:30:37
    d
    w- c:\users\tatz\appdata\roaming\Radialpoint
    2012-04-16 16:30:24
    d
    w- c:\programdata\Virgin Media
    2012-04-16 16:30:24
    d
    w- c:\program files\Virgin Media
    2012-04-12 20:53:53
    d
    w- c:\program files\IObit Toolbar
    2012-04-12 20:53:53
    d
    w- c:\program files\common files\Spigot
    2012-04-12 20:53:53
    d
    w- c:\program files\Application Updater
    2012-04-06 08:14:41 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2012-04-02 15:27:04
    d
    w- c:\program files\iPod
    2012-04-02 15:27:02
    d
    w- c:\program files\iTunes
    2012-03-23 06:45:03 905336 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\symefa.sys
    2012-03-23 06:45:03 345208 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\symtdiv.sys
    2012-03-23 06:45:03 318584 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\symnets.sys
    2012-03-23 06:45:02 574584 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\srtsp.sys
    2012-03-23 06:45:02 340088 ----a-r- c:\windows\system32\drivers\nis\1306020.00a\symds.sys
    2012-03-23 06:45:02 32888 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\srtspx.sys
    2012-03-23 06:45:02 149624 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\ironx86.sys
    2012-03-23 06:45:02 132744 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\ccsetx86.sys
    2012-03-23 06:44:24 4782 ----a-w- c:\windows\system32\drivers\nis\1306020.00a\symvtcer.dat
    2012-03-23 06:44:24
    d
    w- c:\windows\system32\drivers\nis\1306020.00A
    .
    ==================== Find3M ====================
    .
    2012-04-06 08:14:41 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-03-23 06:45:23 141944 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
    2012-02-15 11:01:50 4547944 ----a-w- c:\windows\system32\usbaaplrc.dll
    2012-02-15 11:01:50 43520 ----a-w- c:\windows\system32\drivers\usbaapl.sys
    .
    ============= FINISH: 18:33:13.71 ===============
    Mummy to two girls: October 2013 and February 2016
  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    what does this all mean? I am totally lost
    Mummy to two girls: October 2013 and February 2016
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    A couple of minor things but nothing to be worried about. Post me attach.txt now.
  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    but it says not to post that log
    Mummy to two girls: October 2013 and February 2016
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    Unless requested do not post it (zip it instead) - I'm requesting you post it. ;)
  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    kinda feel funny about all my stuff being posted on a forum for anyone to read :-( I appreciate you trying to help me though
    Mummy to two girls: October 2013 and February 2016
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    None of it makes you personally identifiable or poses any security risks.
  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    I suppose a plus is that our new laptop comes tomorrow. we bought it last week online from pcworld. so once it arrives, might just transfer all our itunes and documents. is there any good software worth having on the new laptop to prevent spyware and malware etc? what do people recomend?
    Mummy to two girls: October 2013 and February 2016
  • continualdiamond
    continualdiamond Posts: 2,830 Forumite
    I still just kinda feel a bit funny. I'm no pc whiz and i dont know whats sensitive info and whats not. and a few months back my xbox live account was hacked and someone charged £80 to my bank account. so since then i have been super paranoid
    Mummy to two girls: October 2013 and February 2016
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352K Banking & Borrowing
  • 253.5K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245K Work, Benefits & Business
  • 600.6K Mortgages, Homes & Bills
  • 177.4K Life & Family
  • 258.8K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture