[-Hyperion]

Hey guys it's -Hyperion ✌

I am currently a technician for a fortune 500 company and running my own pentesting business. As well as leader of the Brotherhood Computing Sector, also known as BHCPU.

I have been away the past few months working on other projects and apparently this section has gone to shit. Instead of going through and answering a bunch of posts, if you need help and think you are infected then please post here using this format:

Code

OS:
What is happening:
What have you done:

Do not take help from anyone else unless they are listed on this post.
-Hyperion
Roger Waters
Help is first come first serve and check out some of these useful links first.

Am I Infected
Doing A Basic Cleanup
File Analysis
Anti Virus Recommendations

[Trigger3lite]

OS: Win7 sp1
What is happening: Virus not going away, infecting other files.
What have you done: AVG, Malware bytes and ComboFix(pastebin.com/BhAKjttL)

[YungTrigz]

ComboFix(pastebin.com/BhAKjttL)

nononononononono NEVER use combofix unless a pro tells you too.

[-Hyperion]

OS: Win7 sp1
What is happening: Virus not going away, infecting other files.
What have you done: AVG, Malware bytes and ComboFix(pastebin.com/BhAKjttL)

why do you think you have a virus and never run combofix.

[lawton111]

Sorry - apparently the referral I was given asked me to post in the wrong section and redirected me here :)

Here goes :

Hi there,
I have been referred to you through the forums as I have a Macbook and maybe you can help with the removal of a RAT?? I will copy you my original post to see what I am up against :) Any help you can over would be much appreciated and am happy to compensate you for your time.

Hi there,

I thought I already posted this but here goes for a second time.
I have an ex girlfriend who seems to have gained access to my MacBook and/or my Iphone. These include my email, Facebook, Skype, email and Ebay, further the programs on my Iphone 6 including complete access to Viber.

I have repeatedly changed passwords including my login access on my Mac. She seems to have access to all my information - blatantly telling me whats going on in my life and who I am talking to, how much I paid for things on Ebay even when the programs are not running - quite honestly its a little scary. I am not looking to hack anyone just stop what she is doing.

Any ideas on this and any remedial action? I am using a Macbook Pro running Yosemite, and also an Iphone 6

Many Thanks

[-Hyperion]

Sorry - apparently the referral I was given asked me to post in the wrong section and redirected me here :)

Here goes :

Hi there,
I have been referred to you through the forums as I have a Macbook and maybe you can help with the removal of a RAT?? I will copy you my original post to see what I am up against :) Any help you can over would be much appreciated and am happy to compensate you for your time.

Hi there,

I thought I already posted this but here goes for a second time.
I have an ex girlfriend who seems to have gained access to my MacBook and/or my Iphone. These include my email, Facebook, Skype, email and Ebay, further the programs on my Iphone 6 including complete access to Viber.

I have repeatedly changed passwords including my login access on my Mac. She seems to have access to all my information - blatantly telling me whats going on in my life and who I am talking to, how much I paid for things on Ebay even when the programs are not running - quite honestly its a little scary. I am not looking to hack anyone just stop what she is doing.

Any ideas on this and any remedial action? I am using a Macbook Pro running Yosemite, and also an Iphone 6

Many Thanks

Is your Iphone jailbroken and what scans etc have you run?

[Kimi Räikkönen]

OS: Windows 7
What is happening: When I startup my PC first 5-10 minutes it's really slow and Task Manager crashes 1-3 times and Programs wont open up or they're not responding. This started happening about 3 days ago. I've run Malwarebytes scan for 4 times and it doesn't detect any viruses.
What have you done:
Honestly I have no idea how this possibly virus has come to my PC, I've only downloaded few files from sites that I deem trusted. Only have downloaded one file from Graphic designer 1 week ago.

Thank you in advance!

[-Hyperion]

OS: Windows 7
What is happening: When I startup my PC first 5-10 minutes it's really slow and Task Manager crashes 1-3 times and Programs wont open up or they're not responding. This started happening about 3 days ago. I've run Malwarebytes scan for 4 times and it doesn't detect any viruses.
What have you done:
Honestly I have no idea how this possibly virus has come to my PC, I've only downloaded few files from sites that I deem trusted. Only have downloaded one file from Graphic designer 1 week ago.

Thank you in advance!

screen shot your processes please so I can see what all is running.

[Kimi Räikkönen]

It doesn't let me take screenshot with either windows tool or Lightshot, both not responding when starting up...

[-Hyperion]

It doesn't let me take screenshot with either windows tool or Lightshot, both not responding when starting up...

Please run rkill>tdsskiller and emsisoft in that order from https://hackforums.net/showthread.php?tid=4558828 here and post the logs.

[lawton111]

Thanks for your reply.
My Iphone 6 is jailbroken and is less than 1 year old, I have now deleted FB and Messenger off it but she still has access to the Programs through the Mac. I have now deleted temp deactivated my FB account until i get this resolved. As I mentioned she still has complete access to anything over the Internet, Skype, Imessage, Viber etc.

I have no idea what scans I should run on a Mac as I wouldnt know what to run. Really appreciate your help.

Thanks

---

Also she even joked the other day after I changed some passwords that me changing the passwords wouldnt help, so she knew that too.

[-Hyperion]

Thanks for your reply.
My Iphone 6 is jailbroken and is less than 1 year old, I have now deleted FB and Messenger off it but she still has access to the Programs through the Mac. I have now deleted temp deactivated my FB account until i get this resolved. As I mentioned she still has complete access to anything over the Internet, Skype, Imessage, Viber etc.

I have no idea what scans I should run on a Mac as I wouldnt know what to run. Really appreciate your help.

Thanks

---

Also she even joked the other day after I changed some passwords that me changing the passwords wouldnt help, so she knew that too.

run this to start https://itunes.apple.com/us/app/bitdefen...4009?mt=12 I will look tomorrow

[Kimi Räikkönen]

http://prntscr.com/8a7uyr

That's screenshot of my processes, atiedxx.exe cannot be stopped and can't locate it at all.

[lawton111]

Hello,
Well i ran Bitdefender first scanning critical locations - it ran for 65minutes but declared my Mac clean of Malware. I then ran Deep system clean and again after 20 minutes it declared my Mac clean. I hope you dont think I am making this up but today she texted me to report on something else I had done on Facebook!
Many thanks in advance

[-Hyperion]

http://prntscr.com/8a7uyr

That's screenshot of my processes, atiedxx.exe cannot be stopped and can't locate it at all.

run this
http://www.bleepingcomputer.com/download/roguekiller/
Quit all running programs
Wait until the pre-scan is completed.
Accept the EULA and click Scan.
A report will be generated after the scan (you can publish it on the appropriate forum).
Click Remove.
also that is part of your graphics driver suite

---

Hello,
Well i ran Bitdefender first scanning critical locations - it ran for 65minutes but declared my Mac clean of Malware. I then ran Deep system clean and again after 20 minutes it declared my Mac clean. I hope you dont think I am making this up but today she texted me to report on something else I had done on Facebook!
Many thanks in advance

something you had done private or something she could have seen public?
please follow these instructions http://www.cnet.com/how-to/how-to-use-fa...p-feature/ and setup 2FA if you have not.