DO NOT DEAL WITH THIS MEMBER
Jun 4, 2017 11:17 AM
(This post was last modified: Jun 4, 2017 01:51 PM by SecurityCult.)
Hey, I torrent a lot of things so i wouldn't be surprised if I've been infected I'm worried because I've received a text about my coinbase password being changed and about 5 attempts of someone trying to use 2FA so i think my credit cards may be safe for now but then again I've done lots of online shopping so maybe not
I've already used farbar to save time
Deleted because: Issues been resolved
(Jun 4, 2017 11:17 AM)SecurityCult Wrote: Hey, I torrent a lot of things so i wouldn't be surprised if I've been infected I'm worried because I've received a text about my coinbase password being changed and about 5 attempts of someone trying to use 2FA so i think my credit cards may be safe for now but then again I've done lots of online shopping so maybe not
I've already used farbar to save time
FRST.txt
Addition.txt
Uhhhh well if your 2fa was set off and your pass was reset thats a pretty sure sign your account is comprimised... I would reset your pass and 2fa asap
DO NOT DEAL WITH THIS MEMBER
(Jun 4, 2017 11:18 AM)Տnow Wrote: Uhhhh well if your 2fa was set off and your pass was reset thats a pretty sure sign your account is comprimised... I would reset your pass and 2fa asap
You can easily change the password via email without verifying 2FA in order to login you need 2fa i 100% know my account has been compromised but I don't know if its because of my home pc or because of a DB leak who knows which is why i posted in here
(Jun 4, 2017 11:22 AM)SecurityCult Wrote: You can easily change the password via email without verifying 2FA in order to login you need 2fa i 100% know my account has been compromised but I don't know if its because of my home pc or because of a DB leak who knows which is why i posted in here
Ah, well thats where I check out. Good luck with this
DO NOT DEAL WITH THIS MEMBER
(Jun 4, 2017 11:23 AM)Տnow Wrote: Ah, well thats where I check out. Good luck with this
All good, now can someone that knows how to make a fixlist or one of those guys posting about farbar all the time please come save my pcs life <3
Jun 4, 2017 11:34 AM
(This post was last modified: Jun 4, 2017 11:36 AM by 5chn4pp.)
I'd blame it on either your proxy, Hola or adware extensions. EDIT: It's Hola.
Download fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
---------
Please download RogueKiller and save it to your desktop. - Quit all running programs.
- Right-click on the program and select Run as Administrator to start and when prompted allow it to run.
- Read and accept the EULA (End User License Agreement)
- Click Scan to scan the system.
- When the scan completes select "Report", a log will open. Close the program > Don't Fix anything!
- Post the contents of the log in your next reply.
DO NOT DEAL WITH THIS MEMBER
Jun 4, 2017 12:57 PM
(This post was last modified: Jun 4, 2017 01:51 PM by SecurityCult.)
(Jun 4, 2017 11:34 AM)5chn4pp Wrote: I'd blame it on either your proxy, Hola or adware extensions. EDIT: It's Hola.
Download fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
---------
Please download RogueKiller and save it to your desktop.- Quit all running programs.
- Right-click on the program and select Run as Administrator to start and when prompted allow it to run.
- Read and accept the EULA (End User License Agreement)
- Click Scan to scan the system.
- When the scan completes select "Report", a log will open. Close the program > Don't Fix anything!
- Post the contents of the log in your next reply.
deleted
Here is my fixlog moving on to running the other program you suggested to run
will report back
deleted
Uninstall Hola using control panel, then remove these:
C:\Users\Blake\AppData\Roaming\Hola
C:\Users\Blake\AppData\Local\bvxvbxvd
C:\Users\Blake\AppData\Local\Hola
C:\Users\Blake\AppData\Local\SearchProtect
C:\Users\Blake\AppData\Local\YSearchUtil
C:\Program Files (x86)\SearchProtect
DO NOT DEAL WITH THIS MEMBER
(Jun 4, 2017 01:10 PM)5chn4pp Wrote: Uninstall Hola using control panel, then remove these:
C:\Users\Blake\AppData\Roaming\Hola
C:\Users\Blake\AppData\Local\bvxvbxvd
C:\Users\Blake\AppData\Local\Hola
C:\Users\Blake\AppData\Local\SearchProtect
C:\Users\Blake\AppData\Local\YSearchUtil
C:\Program Files (x86)\SearchProtect
Thanks a lot for all the help really appreciate it 🤝
You should be in the clear now, but just because we can, run this last scan:
Junkware Removal Tool - Please download Junkware Removal Tool to your desktop.
- Shut down your protection software now to avoid potential conflicts.
- Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
- The tool will open and start scanning your system.
- Please be patient as this can take a while to complete depending on your system's specifications.
- On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
- Post the contents of JRT.txt into your next message.
DO NOT DEAL WITH THIS MEMBER
I think we're all good now thanks again for all the help bro <3
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Education x64
Ran by HxC (Administrator) on Sun 06/04/2017 at 16:41:52.71
File System: 4
Successfully deleted: C:\end (File)
Successfully deleted: C:\Users\Blake\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gkojfkhlekighikafcpjkiklfbnlmeio (Folder)
Successfully deleted: C:\WINDOWS\apppatch\apppatch64\vcldr64.dll (File)
Successfully deleted: C:\WINDOWS\apppatch\custom\custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb (File)
Registry: 0
Scan was completed on Sun 06/04/2017 at 16:45:53.82
End of JRT log
|
