+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Possibly infected, passwords were changed last night (/showthread.php?tid=5113921)
Possibly infected, passwords were changed last night - the wolf of blockchain - Dec 29, 2015
Malwarebytes didn't pick up anything, can anyone help me?
frst:
http://pastebin.com/RkjdTzPM
addition:
http://pastebin.com/ybrs3iUL
tdds
http://pastebin.com/PE8DiQ5u
* - The Boogeyman - Dec 29, 2015
You probably got Ratted and the file was FUD so your antivirus or Malwarebytes didn't detect the file as being dangerous. Then the attack probably did a session/cookies attack stealing all of your account info from any website that you have saved information/maid but this is only one possibility. I would advise to set your PC back to factor settings and wipe everything. Then change the passwords to all accounts you might have access to if they are not yet taken. Then run a scan to make sure your system is clean. This is a lot to do but it's well worth it. Also go to whitehat/ infected check ups area on HF and find a whitehat who will check your computer scan from certain programs to see if you are infected. PM if you need help.
* - 5chn4pp - Dec 29, 2015
I see an adware infection, not rat.
If you have anything on your computer that you do not want to be scanned on virustotal, please zip them all with a password like "123" before doing this below:
Download HitmanPro 3.7 and save it to your Desktop.
- Right click to run as administrator. When the tool opens click Yes to disclaimer.
- Make sure the update displays no errors, then click next.
- Select I only want to perform a one-time scan and click next.
- When its done, click Save Log and save it to your desktop.
- Please copy and paste the log on pastebin.com and provide the link for the paste in your next reply.
* - the wolf of blockchain - Dec 29, 2015
I appreciate your help
http://pastebin.com/Qxj6QD79
(rogue is a cheat for csgo)
* - 5chn4pp - Dec 29, 2015
I dont see anything, you may have entered your password on a phishing site.
Or you downloaded a 1-time stealer that steals and then deletes itself.
* - the wolf of blockchain - Dec 29, 2015
Strange. I'll report back if anything else happens, thanks so much!