![]() |
|
Brotherhood Helpdesk: Post Here For Help If Infected - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448) +---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110) +---- Thread: Brotherhood Helpdesk: Post Here For Help If Infected (/showthread.php?tid=4965472) Pages: Pages
1
2
|
Brotherhood Helpdesk: Post Here For Help If Infected - -Hyperion - Aug 27, 2015 ![]() I am currently a technician for a fortune 500 company and running my own pentesting business. As well as leader of the Brotherhood Computing Sector, also known as BHCPU. I have been away the past few months working on other projects and apparently this section has gone to shit. Instead of going through and answering a bunch of posts, if you need help and think you are infected then please post here using this format: Code OS:-Hyperion Roger Waters Help is first come first serve and check out some of these useful links first. Am I Infected Doing A Basic Cleanup File Analysis Anti Virus Recommendations * - Trigger3lite - Aug 27, 2015 OS: Win7 sp1 What is happening: Virus not going away, infecting other files. What have you done: AVG, Malware bytes and ComboFix(pastebin.com/BhAKjttL) * - YungTrigz - Aug 27, 2015 (Aug 27, 2015 10:03 AM)Trigger3lite Wrote: ComboFix(pastebin.com/BhAKjttL)nononononononono NEVER use combofix unless a pro tells you too. * - -Hyperion - Aug 27, 2015 (Aug 27, 2015 10:03 AM)Trigger3lite Wrote: OS: Win7 sp1 why do you think you have a virus and never run combofix. * - lawton111 - Aug 28, 2015 Sorry - apparently the referral I was given asked me to post in the wrong section and redirected me here :) Here goes : Hi there, I have been referred to you through the forums as I have a Macbook and maybe you can help with the removal of a RAT?? I will copy you my original post to see what I am up against :) Any help you can over would be much appreciated and am happy to compensate you for your time. Hi there, I thought I already posted this but here goes for a second time. I have an ex girlfriend who seems to have gained access to my MacBook and/or my Iphone. These include my email, Facebook, Skype, email and Ebay, further the programs on my Iphone 6 including complete access to Viber. I have repeatedly changed passwords including my login access on my Mac. She seems to have access to all my information - blatantly telling me whats going on in my life and who I am talking to, how much I paid for things on Ebay even when the programs are not running - quite honestly its a little scary. I am not looking to hack anyone just stop what she is doing. Any ideas on this and any remedial action? I am using a Macbook Pro running Yosemite, and also an Iphone 6 Many Thanks * - -Hyperion - Aug 28, 2015 (Aug 28, 2015 04:04 AM)lawton111 Wrote: Sorry - apparently the referral I was given asked me to post in the wrong section and redirected me here :) Is your Iphone jailbroken and what scans etc have you run? * - Kimi Räikkönen - Aug 28, 2015 OS: Windows 7 What is happening: When I startup my PC first 5-10 minutes it's really slow and Task Manager crashes 1-3 times and Programs wont open up or they're not responding. This started happening about 3 days ago. I've run Malwarebytes scan for 4 times and it doesn't detect any viruses. What have you done: Honestly I have no idea how this possibly virus has come to my PC, I've only downloaded few files from sites that I deem trusted. Only have downloaded one file from Graphic designer 1 week ago. Thank you in advance! * - -Hyperion - Aug 28, 2015 (Aug 28, 2015 10:47 AM)Kimi Räikkönen Wrote: OS: Windows 7screen shot your processes please so I can see what all is running. * - Kimi Räikkönen - Aug 28, 2015 It doesn't let me take screenshot with either windows tool or Lightshot, both not responding when starting up... * - -Hyperion - Aug 28, 2015 (Aug 28, 2015 11:06 AM)Kimi Räikkönen Wrote: It doesn't let me take screenshot with either windows tool or Lightshot, both not responding when starting up... Please run rkill>tdsskiller and emsisoft in that order from https://hackforums.net/showthread.php?tid=4558828 here and post the logs. * - lawton111 - Aug 28, 2015 Thanks for your reply. My Iphone 6 is jailbroken and is less than 1 year old, I have now deleted FB and Messenger off it but she still has access to the Programs through the Mac. I have now deleted temp deactivated my FB account until i get this resolved. As I mentioned she still has complete access to anything over the Internet, Skype, Imessage, Viber etc. I have no idea what scans I should run on a Mac as I wouldnt know what to run. Really appreciate your help. Thanks Also she even joked the other day after I changed some passwords that me changing the passwords wouldnt help, so she knew that too. * - -Hyperion - Aug 28, 2015 (Aug 28, 2015 10:22 PM)lawton111 Wrote: Thanks for your reply.run this to start https://itunes.apple.com/us/app/bitdefender-virus-scanner/id500154009?mt=12 I will look tomorrow * - Kimi Räikkönen - Aug 29, 2015 http://prntscr.com/8a7uyr That's screenshot of my processes, atiedxx.exe cannot be stopped and can't locate it at all. * - lawton111 - Aug 29, 2015 Hello, Well i ran Bitdefender first scanning critical locations - it ran for 65minutes but declared my Mac clean of Malware. I then ran Deep system clean and again after 20 minutes it declared my Mac clean. I hope you dont think I am making this up but today she texted me to report on something else I had done on Facebook! Many thanks in advance * - -Hyperion - Aug 29, 2015 (Aug 29, 2015 05:17 AM)Kimi Räikkönen Wrote: http://prntscr.com/8a7uyrrun this http://www.bleepingcomputer.com/download/roguekiller/ Quit all running programs Wait until the pre-scan is completed. Accept the EULA and click Scan. A report will be generated after the scan (you can publish it on the appropriate forum). Click Remove. also that is part of your graphics driver suite (Aug 29, 2015 08:17 AM)lawton111 Wrote: Hello, something you had done private or something she could have seen public? please follow these instructions http://www.cnet.com/how-to/how-to-use-facebooks-new-security-checkup-feature/ and setup 2FA if you have not. |