(Jun 4, 2017 11:17 AM)808CULT Wrote:  Hey, I torrent a lot of things so i wouldn't be surprised if I've been infected I'm worried because I've received a text about my coinbase password being changed and about 5 attempts of someone trying to use 2FA so i think my credit cards may be safe for now but then again I've done lots of online shopping so maybe not


I've already used farbar to save time
FRST.txt
Addition.txt

(Jun 4, 2017 11:18 AM)Տnow Wrote:  Uhhhh well if your 2fa was set off and your pass was reset thats a pretty sure sign your account is comprimised... I would reset your pass and 2fa asap

(Jun 4, 2017 11:22 AM)808CULT Wrote:  You can easily change the password via email without verifying 2FA in order to login you need 2fa i 100% know my account has been compromised but I don't know if its because of my home pc or because of a DB leak who knows which is why i posted in here

(Jun 4, 2017 11:23 AM)Տnow Wrote:  Ah, well thats where I check out. Good luck with this

• Quit all running programs.
  
• Right-click on the program and select Run as Administrator to start and when prompted allow it to run.
  
• Read and accept the EULA (End User License Agreement)
  
• Click Scan to scan the system.
  
• When the scan completes select "Report", a log will open. Close the program > Don't Fix anything!
  
• Post the contents of the log in your next reply.

(Jun 4, 2017 11:34 AM)Satudarah Wrote:  I'd blame it on either your proxy, Hola or adware extensions. EDIT: It's Hola.

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

---------

Please download RogueKiller and save it to your desktop.

• Quit all running programs.
  
• Right-click on the program and select Run as Administrator to start and when prompted allow it to run.
  
• Read and accept the EULA (End User License Agreement)
  
• Click Scan to scan the system.
  
• When the scan completes select "Report", a log will open. Close the program > Don't Fix anything!
  
• Post the contents of the log in your next reply.

(Jun 4, 2017 01:10 PM)Satudarah Wrote:  Uninstall Hola using control panel, then remove these:


C:\Users\Blake\AppData\Roaming\Hola
C:\Users\Blake\AppData\Local\bvxvbxvd
C:\Users\Blake\AppData\Local\Hola
C:\Users\Blake\AppData\Local\SearchProtect
C:\Users\Blake\AppData\Local\YSearchUtil
C:\Program Files (x86)\SearchProtect

• Please download Junkware Removal Tool to your desktop.
  
• Shut down your protection software now to avoid potential conflicts.
  
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  
• The tool will open and start scanning your system.
  
• Please be patient as this can take a while to complete depending on your system's specifications.
  
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  
• Post the contents of JRT.txt into your next message.