DO NOT DEAL WITH THIS MEMBER
Jul 17, 2015 06:54 AM
(This post was last modified: Jul 17, 2015 07:05 AM by Filthy Frank .)
Woke up this morning to 20mill missing from my RuneScape. I haven't entered my passwords anywhere else apart from the RS launcher sooooo someone's watching me, heh.
I downloaded that Farbar thingy thing and here are my results :(
FRST: http://pastebin.com/AEuWvE9s
Addition: http://pastebin.com/RP4B6Exk
RogueKiller: http://pastebin.com/23VSiKk2
I ran a few anti-virus crap before this, hopefully it's removed, but posting this just to double check
DO NOT DEAL WITH THIS MEMBER
Doesn't mean it's a keylogger, some RATs have runescape stealer's, as for the farbar recovery tool wait for someone who knows what they're doing like flaremalware.
DO NOT DEAL WITH THIS MEMBER
(Jul 17, 2015 07:28 AM)YungTrigz Wrote: Doesn't mean it's a keylogger, some RATs have runescape stealer's, as for the farbar recovery tool wait for someone who knows what they're doing like flaremalware.
Well either way, I want this crap off my computer, too much stuff on it to restore it :/
DO NOT DEAL WITH THIS MEMBER
Jul 17, 2015 07:42 AM
(This post was last modified: Jul 17, 2015 07:43 AM by YungTrigz.)
(Jul 17, 2015 07:31 AM)Filthy Frank Wrote: Well either way, I want this crap off my computer, too much stuff on it to restore it :/
Alright, Download MalwareBytes (clickable link)
and Avast (Clickable Link) Run a full scan hope it finds it.
DO NOT DEAL WITH THIS MEMBER
(Jul 17, 2015 07:42 AM)YungTrigz Wrote: Alright, Download MalwareBytes (clickable link)
and Avast (Clickable Link) Run a full scan hope it finds it.
Done Malwarebytes, removed whatever it found, doing a full system on Avast now but it's gunna take ages, only at 1% but I guess I'll wait haha
(Jul 17, 2015 07:43 AM)Filthy Frank Wrote: Done Malwarebytes, removed whatever it found, doing a full system on Avast now but it's gunna take ages, only at 1% but I guess I'll wait haha
avast is useless use eset instead
DO NOT DEAL WITH THIS MEMBER
Jul 17, 2015 07:45 AM
(This post was last modified: Jul 17, 2015 07:48 AM by YungTrigz.)
(Jul 17, 2015 07:43 AM)Filthy Frank Wrote: Done Malwarebytes, removed whatever it found, doing a full system on Avast now but it's gunna take ages, only at 1% but I guess I'll wait haha
Also do NOT change your password until avast! is done scanning, he will just see the new one.
(Jul 17, 2015 07:43 AM)Filthy Frank Wrote: Done Malwarebytes, removed whatever it found, doing a full system on Avast now but it's gunna take ages, only at 1% but I guess I'll wait haha
Also do NOT change your password until avast! is done scanning, he will just see the new one.
If avast! finds nothing.
Download RogueKiller and save it.
Right-Click RogueKiller.exe and run it as admin.
Allow the Prescan to complete. Upon completion, a window will open. Click ACCEPT.
A browser window may open. Close the browser window.
Click SCAN and after scan is complete click REPORT
Close the program.
RKreport.txt will be open. Copy the log to pastebin.com, Submit it and paste the it in your reply.
Link: http://www.bleepingcomputer.com/download/roguekiller/
DO NOT DEAL WITH THIS MEMBER
(Jul 17, 2015 07:45 AM)YungTrigz Wrote: Also do NOT change your password until avast! is done scanning, he will just see the new one.
Also do NOT change your password until avast! is done scanning, he will just see the new one.
If avast! finds nothing.
Download RogueKiller and save it.
Right-Click RogueKiller.exe and run it as admin.
Allow the Prescan to complete. Upon completion, a window will open. Click ACCEPT.
A browser window may open. Close the browser window.
Click SCAN and after scan is complete click REPORT
Close the program.
RKreport.txt will be open. Copy the log to pastebin.com, Submit it and paste the it in your reply.
Link: http://www.bleepingcomputer.com/download/roguekiller/
Already been posted in original thread
Jul 17, 2015 08:05 AM
(This post was last modified: Jul 17, 2015 08:06 AM by ๖ۣۜCyber.)
Download Farbar Recovery Scan Tool and save it to your Desktop.
- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please copy and paste the log back here
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
These are the basics, wait for a trained malware specialist to read your logs, and help guide you through the steps you make sure your PC is completely clean.
DO NOT DEAL WITH THIS MEMBER
(Jul 17, 2015 08:05 AM)๖ۣۜCyber Wrote: Download Farbar Recovery Scan Tool and save it to your Desktop.
- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please copy and paste the log back here
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
These are the basics, wait for a trained malware specialist to read your logs, and help guide you through the steps you make sure your PC is completely clean.
Not to sound rude here, but I already posted these, did you not read the thread? :s
DO NOT DEAL WITH THIS MEMBER
(Jul 17, 2015 08:09 AM)Filthy Frank Wrote: Not to sound rude here, but I already posted these, did you not read the thread? :s
Just wait for the trained people man, like charmz, knaut, etc.
(Jul 17, 2015 08:09 AM)Filthy Frank Wrote: Not to sound rude here, but I already posted these, did you not read the thread? :s
Scanned over it then started reading the other person's replies, sorry.
Wait 12 hours and if nobody responds I'll redirect you to a forum where you can get help.
DO NOT DEAL WITH THIS MEMBER
(Jul 17, 2015 08:12 AM)๖ۣۜCyber Wrote: Scanned over it then started reading the other person's replies, sorry.
Wait 12 hours and if nobody responds I'll redirect you to a forum where you can get help.
Thanks man, I'm just gunna lay off typing my passwords into websites until then incase it's still on my PC
(Jul 17, 2015 08:15 AM)Filthy Frank Wrote: Thanks man, I'm just gunna lay off typing my passwords into websites until then incase it's still on my PC
I can take a look at your machine if you would like me to. I can do a remote support session and you can have full control of the machine at any time.
Remove those:
C:\Users\Scott\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Scott\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Scott\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Scott\AppData\Local\Temp\nvStInst.exe
C:\Users\Scott\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Scott\AppData\Local\Temp\sfextra.dll
C:\Users\Scott\AppData\Local\Temp\Skin.dll
C:\Users\Scott\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Scott\AppData\Local\Temp\SRLDetectionLibrary4910999296603301933.dll
C:\Users\Scott\AppData\Local\Temp\SynciosDeviceService.exe
C:\Users\Scott\AppData\Local\Temp\Uninstall.exe
|
