[Henning B]

Both my Netflix and Amazon account got compromised, I only use one computer for those two services.

Should I post my journalctl log and systemd services?

[Annointed]

Get some logs so that people can see what's wrong. Here are the recommended programs from ProtectNull:

Download Farbar Recovery Scan Tool and save it to your Desktop.

Farbar Recovery Scanning Tool

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  


• Press Scan button.
  


• It will produce a log called FRST.txt in the same directory the tool is run from.
  


• Please copy and paste the log back here
  


• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
  

TDSSKiller

• Please download TDSSKiller and save the file to your Desktop.
  


• Right-Click TDSSKiller.exe and select Run as Administrator
  


• Click Change parameters. Place a checkmark next to Detect TDLFS file system and Verify file digital signatures.
  


• Click Start Scan. Do not use the computer during the scan.
  


• If objects are found, change the action to skip.
  


• Click Continue and close the window.
  


• A log will be created and saved to the root directory (usually C:\). Paste the file contents to pastebin.com and post the link in your next reply.
  

[ProtectNull™]

Get some logs so that people can see what's wrong. Here are the recommended programs from ProtectNull:

Download Farbar Recovery Scan Tool and save it to your Desktop.

Farbar Recovery Scanning Tool

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  


• Press Scan button.
  


• It will produce a log called FRST.txt in the same directory the tool is run from.
  


• Please copy and paste the log back here
  


• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
  

TDSSKiller

• Please download TDSSKiller and save the file to your Desktop.
  


• Right-Click TDSSKiller.exe and select Run as Administrator
  


• Click Change parameters. Place a checkmark next to Detect TDLFS file system and Verify file digital signatures.
  


• Click Start Scan. Do not use the computer during the scan.
  


• If objects are found, change the action to skip.
  


• Click Continue and close the window.
  


• A log will be created and saved to the root directory (usually C:\). Paste the file contents to pastebin.com and post the link in your next reply.
  

Yes, do this an I will assist you too. 🤝

[Henning B]

Yes, do this an I will assist you too. 🤝

YEAH, ill do that on my linux box.

I said I could give you journalctl logs: (warning huge)
http://paste.fedoraproject.org/360191/62367146/

[ProtectNull™]

YEAH, ill do that on my linux box.

I said I could give you journalctl logs: (warning huge)
http://paste.fedoraproject.org/360191/62367146/

Are you just using the normal Linux Distro or other distro such as Ubuntu, CentOS etc?

[Henning B]

Are you just using the normal Linux Distro or other distro such as Ubuntu, CentOS etc?

It is running arch linux.

[ProtectNull™]

It is running arch linux.

Reserved, will assist soon.

---

Hello, I'm going to check if you have a rootkit

Please open terminal and type

• 1) sudo apt-get install chkrootkit
  


• 2) sudo chkrootkit
  


• 3) sudo chkrootkit -x | less
  

Please let me know if it finds any RK, if it does not.

Go back into terminal;

• 1) sudo apt-get install rkhunter
  


• 2) sudo rkhunter --check
  

And it it finds anything let me know.

[Henning B]

Reserved, will assist soon.

---

Hello, I'm going to check if you have a rootkit

Please open terminal and type

• 1) sudo apt-get install chkrootkit
  


• 2) sudo chkrootkit
  


• 3) sudo chkrootkit -x | less
  

Please let me know if it finds any RK, if it does not.

Go back into terminal;

• 1) sudo apt-get install rkhunter
  


• 2) sudo rkhunter --check
  

And it it finds anything let me know.

Do you know Linux at all?

[ProtectNull™]

Do you know Linux at all?

I use CentOS and Kali Linux and Ubuntu.

[Henning B]

I use CentOS and Kali Linux and Ubuntu.

Aptitude is only for debian based distros, I'll run the program, but you can't run those commands on anything but debian.

[ProtectNull™]

Aptitude is only for debian based distros, I'll run the program, but you can't run those commands on anything but debian.

So is your one yum install?

[Henning B]

So is your one yum install?

Arch: 'pacman -S firefox'

[ProtectNull™]

Arch: 'pacman -S firefox'

Oh alright. 🤝

[Henning B]

None of the tools found anything

[ProtectNull™]

None of the tools found anything

Are your passwords easy to crack?