Computer Support Forum

GMAIL account hacked

Question: GMAIL account hacked

Sorry if i am posting in the wrong topic...i had my gmail account hacked last night.I got phone number changed,and verification email change...completed a recovery gmail form,but i keep geting mails back that i need to provide more info.I provide all the info they asked...i always log from same IP(HOME)and work also,but usualy same IPs for some years now.They can check easily that i only log from same country....city....has anyone had any experience with this?Can you give me some ideeas on how to recover my email back..
any ideeas are apreciated.
thanks

Relevance 100%
Preferred Solution: GMAIL account hacked

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: GMAIL account hacked

That's awful .....was your pw very simple? How did they get in? Was your chrome account still safe? That would be a huge problem

5 more replies
Relevance 77.9%

Hey,

About six weeks ago, both my Gmail and WoW accounts were hacked. I recovered my accounts and changed my passwords on a clean computer, and ran Avast, Malwarebytes, and Microsoft Security Essentials. They found a few viruses and they were deleted, and I received no more trouble.

However, just a few days ago my Gmail and WoW account were hacked again. I once again recovered my accounts, changed my passwords on a clean computer, and ran the same three anti-viruses. This time, however, they didn't find any viruses.

I very strongly doubt that someone got a hold of my passwords because a) no one knows my passwords, and I change them regularly, and b) the accounts were accessed from China both times (and I live in Canada). Both times, the hacker changed my passwords, and despite having access to a lot of other information, only used my WoW account to sell in-game items.

I would greatly appreciate any assistance in helping me find what I assume is some sort of keylogger. Thanks!


DDS (Ver_10-12-12.02) - NTFSx86
Run by Windows at 23:07:12.10 on Mon 02/21/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_16
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.355 [GMT -5:00]

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

============== Running Processes ===============

C:\WINDOWS\system32\... Read more

Answer:Gmail and WoW Account Hacked

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

A guide and tutorial on using ComboFix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

Please re-enable your antivirus before posting the ComboFix.txt log.

------------------------------------------------------

9 more replies
Relevance 77.9%

Hey,
I noticed that somebody else besides me has logged into my gmail account. When I went to log in activity yesterday it told me that someone log in with ip address 216.194.62.45(metconnect) which is Brooklyn and I live in the Bronx. I changed my password and today someone has logged in with ip 216.194.62.206(metconnect) which is Staten Island. The strange thing that has also happened is that I couldn?t log in today with the new password that I made yesterday. The password was changed backed to the old one.

Any ideas on what might be going on and what can I do?
Thanks

Answer:My gmail account hacked?

Contact Google about it. Only they can help you out. If changing the password didnt help.

1 more replies
Relevance 77.9%

Hi

I logged on to my Gmail account this morning, and found that the vacation setting was on. I thought this was strange, as I hadn't set it, so I opened the settings and found that it was set to send some dodgy mail to anyone who wrote to me, inviting them to meet online and sending a link to some pics (obviously, I didn't click this link).

Then I checked my sent messages to see how many people it had been sent to, and found that not only had it been sent to people who wrote to me during the night, but also that a different mail had been sent to a whole list of people whose addresses were all very similar:
pers-(then some letters and numbers)@craigslist.org

The mail said only "heyy, i think we can fill each others ad " - with no link. One person actually replied to this wanting to meet up!!!

The subjects headings were replies, like "Re: Fun witty guy Looking - 26 (Central Point)" or "Re: anyone real? - 19", suggesting that they might be replies to dating posts.

I do not look at Craigslist.org, and have not looked at any dating posts anywhere.

How has this happened from my email address, and how safe am I now? It seems to be back to normal now.....

Thanks for any advice you can give.

Guy
 

Answer:Has my Gmail account been hacked??

To read: http://tech.yahoo.com/blogs/null/586...B4eB3JLpcFLZA5

E-mail spoofing

A feature of the protocol that email is based upon is that the email message itself has a number of spaces (data fields) for information like the "intended recipient", "sender's email address" and the "return email address", "CC", "BCC", etc etc. within the email datagram (think of email like a picture postcard with spaces for the sender name and address as well as name and address of the person it is being sent to).

What someone has done (or rather set up a piece of software to do) is send a spam email to so many million email addresses with the sender's FROM email address set to be the same as the "intended recipient's" TO email address. This is done for two main reasons, partly to try to get past email spam filters that filter on known spammer's FROM addresses (or email domains) and partly to hook your interest in getting an email from yourself - which it achieved.

So the spammer is not sending spam email from your email account (that is - they are not hacking into your account and typing messages), but simply using your email address to send spam email to you. Just as if you had got a picture postcard through the post addressed to you with the offer of cheap Viagra but was signed with your name.
You can also try a program like MailWasher.
 

1 more replies
Relevance 77.9%

I was unfortunate enough to have my personal Google gmail account hacked this morning by one of these spammers that resets your password and then sends an email to everyone in the address book that you've been robbed in London and need the recipient to wire money so you can make it home. I haven't been able to access the account and I guess it is gone for good because Google keeps rejecting my account recovery pages. So far, apart from the damage to my pride, nothing seems amiss. I have some annoyed and some amused customers contacting me but my main concern is is the damage limited solely to Google? I don't have a keylogger or anything like that do I? How would I know? Is there any way I can get back into that account without Google's help? I've been changing passwords and usernames all day but I'm paranoid that I've forgotten something. As an extra precaution I reset my computer to a clean restore point before all of this happened. Any help/encouragement is definitely appreciated.

Answer:Gmail account hacked...

Never mind guys. I've sorted it.

3 more replies
Relevance 77.08%

I had the worst problem ever with a GMAIL account. Not only did the hackers change my GMAIL account password, but they setup 2-step verification so I can't get it back.    I don't care if I ever use this account again, but I want to close it so that when associates email this account they will get a bad address notification.
 
Does anyone have any advice?

Answer:I want to close my hacked GMAIL account

Contact the provider/host of said account.
 
Louis

3 more replies
Relevance 76.26%

Every time I sign out of gmail and sign back in I get the following message 'account open in 1 other location '.
The new location has the same IP.I sign out of the other session and try again, the same message.
 
I do not use gmail anywhere accept this computer.I am using Ubuntu.
I get the same message if using  other OS's such as Fedora on a Pen drive
or Windows 7 on another Home machine,though I only use my Ubuntu
machine.
 
I did the following.
 
1.Formatted the PC and reinstalled Ubuntu.
2.Changed ISP's ,one ISP goes through my Home phone/LInksys router the other ISP i use is wireless dongle
   mobile networks,[ had caught the ISP admin doing something naughty some Years ago and warned him].
   I get the same message.
3.Tried Fedora on a pen drive.Get the same message.
4.Created a VPN using zenvpn and than TOR, This showed open in two locations in a newly created gmail account...!!?
   All new locations have the same IP.
 
Any suggestions would be very helpful.

Answer:Suspected MiTM,gmail account hacked.

"The new location has the same IP.I sign out of the other session and try again, the same message."
 
Are you signing out of the session you just logged into or the one "... in the other location"?
 
The message about the other location, it has the IP of where it is, is it the same IP as where you are just logging in from?
 
You sure there is nothing running in the background that may be automatically logging in (like google apps, drive, etc?)

0 more replies
Relevance 76.26%

A couple of weeks ago I found out that someone was asking sellers questions posing as me on Ebay. They changed my Ebay password and so I was locked out. I managed to verify my identity through Ebay's sytem and change my Ebay password.Around the same time I received an e-mail to myself advertising Viagra and upon logging into Gmail via the web saw that a group e-mail to all my contacts had been sent. I also found out later that they had been forwarding a copy of all my mail to a French e-mail address and sending the original mails to my Trash. I removed the forwarding and changed my Gmail password.Under Last account activity on Gmail it showed that my account had been accessed by a couple of rogue IP addresses abroad.I thought that would be that but it seems that there have been a couple more attempts (according to Gmail's IP address log) since over the last week.I am running Comodo Internet Security and scans have shown nothing.I just ran Panda's online scan and it reported that I had the following:W32/Gaobot.OXI.wormBck/Tdss.ALTrj/CI.AAll of which it says are not disinfectable. All three are located in files downloaded from a Newsgroup andare located on a partition (not C: drive).I had reinstalled Vista just a month ago. My partition was untouched by the reinstall. The three files which supposedly contain virus's have not been executed for over 6 months so could they still be the culprits? I have deleted the files in question but I guess that's not done a... Read more

Answer:Gmail hacked twice and Ebay Account too - Malware? Help!

hi BritishBeef,your log is a few days old. If you still need help post back.

1 more replies
Relevance 76.26%

A couple of weeks ago I found out that someone was asking sellers questions posing as me on Ebay. They changed my Ebay password and so I was locked out. I managed to verify my identity through Ebay's sytem and change my Ebay password.
Around the same time I received an e-mail to myself advertising Viagra and upon logging into Gmail via the web saw that a group e-mail to all my contacts had been sent. I also found out later that they had been forwarding a copy of all my mail to a French e-mail address and sending the original mails to my Trash. I removed the forwarding and changed my Gmail password.

Under Last account activity on Gmail it showed that my account had been accessed by a couple of rogue IP addresses abroad.

I thought that would be that but it seems that there have been a couple more attempts (according to Gmail's IP address log) since over the last week.

I am running Comodo Internet Security and scans have shown nothing.

I just ran Panda's online scan and it reported that I had the following:

W32/Gaobot.OXI.worm

Bck/Tdss.AL

Trj/CI.A

All of which it says are not disinfectable. All three are located in files downloaded from a Newsgroup andare located on a partition (not C: drive).

I had reinstalled Vista just a month ago. My partition was untouched by the reinstall. The three files which supposedly contain virus's have not been executed for over 6 months so could they still be the culprits? I have deleted the files in question but I gues... Read more

Answer:Gmail hacked twice and Ebay Account too - Malware?

14 more replies
Relevance 75.44%

I would like help to ensure my computer is free of any malware, spyware etc. my gmail account was hacked and bank account used fraudulently in the last few days. I have been using avast & rapport for security. Ive already changed passwords, locked online banking etc.
Thanks guys
Black-hawk 147

Answer:Gmail account hacked / fraudulent bank payments

... still requiring help when available
 
Thanks
 
Blackhawk147

12 more replies
Relevance 59.45%

Hi I ve just had a couple of rejections when trying to share files on onedrive.
The recipient has a gmail account and I have been able to share with them previously

More replies
Relevance 58.63%

Gmail Customer Service Support for solving Gmail account not working , Internal Microphone not working in GMail Voice-Solved, Gmail Notifier not working? Email forwarding to Gmail not working, Fixing Mac OS X 10.10 Yosemite Gmail Bug, Use Gmail? Not working with Outlook?
 

More replies
Relevance 57.81%

In the past I made the mistake to use my Gmail account to create a new Microsoft account (previously known as Microsoft Passport). At that moment everything worked like a charm. Reading mails on my WP8 was easy and worked as expected.
Then Google decided to boycott Microsoft. They made sure that it was almost impossible to connection to a Gmail account from a WP device. Luckily MS gave us a way to connect your Gmail to a Outlook.com account (as described here http://windows.microsoft.com/en-us/outlook/gmail). Because my MS account used the same login (ex. [email protected]) as my Gmail account, this was a very easy way to fix things. I immediately did this and at first it did what it had to.
After a while I found it frustrating that my emails were now synced on 2 mailboxes using the same login. On my desktop (where I use Outlook 2015) I connect directly to the Gmail account and on my phone (now WM10) I can only connect to the Outlook.com one. This is annoying because when I read mails on my phone, they are still unread on my PC.
I read that it is now possible again to connect directly to Gmail on WM10. So I tried to add my Gmail account again. I then found out that this wasn't possible because there was already an account with the same login ([email protected]). Normally you can just delete the old account (Outlook.com) before adding the new one. But since my [email protected] is also known as my MS account, I can't delete it. It is tied to the account and will always connect to... Read more

More replies
Relevance 57.4%

My WoW account was recently hacked into. After dealing with blizzard i had my password changed and my account restored. The hacker then hacked my account again and this time changed my Battle.net address along with the password. He also attempted to steal my hotmail at this point in time. I then began to look for keyloggers and viruses with hijackthis and various virus programs including Spybot, Kaspersky, Microsoft Security Essentials, and MalwareBytes. I deleted a bunch of toolbars using hijackthis and am stumbling across various files that i am unsure of. I do not want to mess up my new computer so i am going to stop deleting things until further notice.

Answer:My WoW account was hacked along with my email. am i still hacked?

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

1 more replies
Relevance 56.58%

My windows 8.1 mail app always gave me an option to add additional google/gmail accounts. It gives option to add Outlook and exchanger sever and "add other" but not gmail or google account. When I choose other and put in address it can not find
t.  I now have to go in thru google browser to open that account. Anybody no what happened here?

More replies
Relevance 56.58%

Hi;

I have created a new account in Gmail. When i enable the system to import mails from old yahoo account, system accepts the user name but for password of Yahoo, it shows an error of password missmatch of that account while i daily logs in with same user name and password of Yahoo. I changed my password of Yahoo but results are the same. Please help.
 

More replies
Relevance 56.58%

hello
How do i move my email with all my runs from a GMAIL account to a OUTLOOK.COM account?
thanks in advance

Answer:How do I move my email with all my runs from a GMAIL account to a OUTLOOK.COM account?

Hi... I think we need more details. Could you join the site so you can reply in this thread?
What App was used to capture the runs? What device did the tracking?
Where are you trying to view the runs? What output (Google Maps, App "X", printout maps)???
On the surface it looks like you are asking about an email... Which you could forward. I think what you really want is how to move a service to a new email address as the reporting default without loosing all your stored data, yes?
So more details are critical.

2 more replies
Relevance 56.17%
Question: Gmail Hacked

My Gmail account was hacked recently. I think it was a cross site request forgery method was used but apparently thats been fixed http://www.gnucitizen.org/blog/googl...ack-technique/. Any other know reasons. Below is what happenedi received an email from warez-bb.org saying please confirm your registration but i though it was a mistake and thought nothing of it. i then received an email saying i was banned from warez-bb forums for a certain post so out of curiosity i decided to have a look as to why i was banned from a site i never registered or posted on. turns out i couldn't log on using the user name and password they had previously sent me because i was blocked.I decided I'd check my gmail log on history to see if i could find anything. Turns out i was logged in from 121.96.217.98 and was logged in at 3:30am when i was sound asleep in bed. Somebody hacked my account, they were chating to a friend in the states too. First thing i did was change the password to something even stronger than the previous and change the secret question, changed the hotmail one too as they linked and other passwords too. Restricted pop and imap access and disabled a few google labs gadgets.My first thought was because my email address was all over recruitment sites with my C.V. but not my password obviously, i thought they might have got the email address and cracked the secret question or something. Next thing i thought was that linked in was hacked and as its the only website i ever let conn... Read more

Answer:Gmail Hacked

Don't know how your email was hacked, but I will offer some advice from personal experience:Check all of your online activity -- especially anything associated with financials like your banking and credit card accounts. Immediately change the password to your online bank account and credit card access and inform them that you may be a victim of identity theft.If you are in the United States, you can easily put a 90 day fraud alert on your social security number. You may think this is being a bit melodramatic and over the top, but I assure you that if someone accessed your email and it was linked to recruitment sites, whoever did this could possibly have access to all that is needed to steal your identity.Go to: Experian. At the bottom of the page under the Additional Products & Services section - Credit Report Assistance, click on Fraud Alert. This will bring you to a page where your first option will be to click on Initial Security Alert (90 days). Click on that link. It's a secure site. Once you fill out that information, your information will be provided to TransUnion and Equifax (the other two credit bureaus). You can then print out a credit report if you wish. This 90 day alert can be renewed every 90 days forever if you desire.Be proactive. If someone has accessed any of your personal information, don't let them walk away with any more of it. You may think I'm an alarmist, but ask anyone who has had their identity stolen and they'll tell you that it all ... Read more

1 more replies
Relevance 56.17%
Question: Gmail hacked

Hello, I hope I am just being paranoid but on Aug. 1st I couldn't access my gmail account for three days. And when I finally was able I got a meesage saying my account may have been comprimised. I scolled down to the bottom of the Gmail page where you can see past ip addy's your account has been accessed from and one or two were unknown to me and google. I immediately changed all my passwords and thought I was ok.
Well, a few minutes ago my wireless printer turned itself on and really freaked me out. I ran the tcp view and notice a lot of red highlighted entries. I have included the log as requested.

Windows 7 Home Prem. 64 bit
356 HDD
4 gig memory
Dell studio laptop.
Any other info you may need is available if told to do so. Thank you in advance.
 tcpview.txt   7.38KB
  15 downloads

Answer:Gmail hacked

Tcpview log looks clean. Red highlighted entries are just connections that are being closed. They do not necessarily indicate anything bad.

If you go onto your Gmail account and look at the Sent folder, do you see emails that you did not personally send?

1 more replies
Relevance 56.17%
Question: Gmail Hacked?

My Gmail account was temporarily disabled after a "suspicious" login occurred. The login was through a Windows computer, which I don't have, so evidently something was wrong. I changed my password after re-activating th account. However, my email address is no longer displayed at [email protected] but [email protected] with no period separating. Also, when I send emails the address that I am sending from (and what people see) says "Match.com". I have absolutely no idea how to fix this short of deleting my whole account (which I don't really want to do).
 

Answer:Gmail Hacked?

6 more replies
Relevance 56.17%
Question: Gmail Hacked

My Gmail account was hacked recently. I think it was a cross site request forgery method was used but apparently thats been fixed http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/. Any other know reasons. Below is what happened

i received an email from warez-bb.org saying please confirm your registration but i though it was a mistake and thought nothing of it. i then received an email saying i was banned from warez-bb forums for a certain post so out of curiosity i decided to have a look as to why i was banned from a site i never registered or posted on. turns out i couldn't log on using the user name and password they had previously sent me because i was blocked.

I decided I'd check my gmail log on history to see if i could find anything. Turns out i was logged in from 121.96.217.98 and was logged in at 3:30am when i was sound asleep in bed. Somebody hacked my account, they were chating to a friend in the states too. First thing i did was change the password to something even stronger than the previous and change the secret question, changed the hotmail one too as they linked and other passwords too. Restricted pop and imap access and disabled a few google labs gadgets.

My first thought was because my email address was all over recruitment sites with my C.V. but not my password obviously, i thought they might have got the email address and cracked the secret question or something. Next thing i thought was that linked in was hacked and as its t... Read more

More replies
Relevance 56.17%
Question: hacked gmail

If I have posed this in the wrong place, advice as to where to post it is welcome.

My gmail account was hacked. I advised gmail they cancelled it, I went through the process to get back the account name with a new password. Today, gmail returned an email that I never wrote as undeliverable leading me to believe that my account is still being used by someone. The gmail account is attached to many things including my blog, so I would like to keep the name.

However, it seems I still have the problem and don't know what to do.

Can anyone offer advice?

Answer:hacked gmail

This does not necessarily mean someone has hacked into your account. You can log in to Gmail and go to sent items and see if that specific email was sent from your account (although this is not a foolproof method). You can also see at the bottom of the Gmail screen when your last activity was.
For interest sake anybody can set up their email account but use your Gmail address as the "reply to" address. In fact this is what a lot of spammers and bots do. The spammer can then send unsolicited email to people and the recipients think the emails come from you.

6 more replies
Relevance 55.76%

I have just changed third-party Internet Providers for another company. I lost my email addresses in the transaction. It was a very small company so I could not transfer my email addresses to new account. So I won't have to go through that hassel again I opened gmail accounts.

My question is can I set up my gmail accounts as our default email accounts we access through Outlook? If I can, how do I do that? I have never even set up email on my new laptop, I just went through IP's server which was a hassel. I usually use one account on one computer and my husband uses one on another computer. I hate having to go to the gmail page. No I don't want all the bells and whistles Google is offering. I just want to turn on my computer, click on a link and open my email in a program I know how to use? I can't find any help through Gmail. Everything I found cost me. That leads to a second question. Does Google have a technical support phone number? One that does not cost?

Anyway, my computer OS is Windows 7 and I am using Outlook from Office 2003 on one computer the other computer uses Windows XP and Outlook from Office 2003.
 

Answer:Solved: Setting up Gmail account as default account

6 more replies
Relevance 55.76%

I use Googlemail for my email address. Today I received an email from myself but copied to practically everybody in my address book. Presumably this means that my email account has been hacked so I have immediately changed the password. However, as my password was already a mixture of numbers, lower case letters, upper case letters and symbols, whoever got hold of it is unlikely to have just had a lucky guess. Is it possible that a batch of passwords has been stolen or have I just been unlucky?

Answer:Have Gmail passwords been hacked?

I doubt that your Gmail password was hacked by brute force because it's very strong and Gmail should have blocked your account after multiple failed login attempts.
The most prevalent method to harvest login credentials is via an email supposedly sent to you from a friend or colleague who has already been hacked. You receive an email and assume it was sent by them and the email has a link that says something like "click here to view the photos/documents". You click on it and it asks for your email address and password. Because you know and trust the person who sent the email you happily enter those details.

1 more replies
Relevance 55.76%

Someone has managed to access all my contacts on googlemail and my Facebook account. They are sending messages from a site called NETLOG asking people to view my photo's. Everyone is receiving this message. I do not belong to NETLOG. I also received invitations from friends to join NETLOG, and on enquiring, none of these friends had even heard of netlog. How has this happened? I thought having a MAC prevented this type of thing. As you can guess, I am not very IT savvy! Any suggestions and advice would be greatly appreciated! Thanks, Kim

Answer:Someone has hacked all contacts on Gmail and

Hacking Internet email accounts has nothing to do with your PC or type of machine. Opening emails from unknown sources is potentially dangerous to anyone. Chances are someone has either guessed or found your passwords to these sites. Logging on and changing the passwords may re-secure those accounts. If they have changed the password, you may need to send lots of emails to prove you're the original owner. Worse case, you have to create new accounts. " I do not belong to NETLOG" ...your account does, now....If you run into a problem, post it. Someone will give you insight to the problem.

3 more replies
Relevance 55.76%

well my gmail got hacked, so a lil piece of advice...dont store passwords anywhere but on a piece of paper on your desk.
it's been fine for months and months, even years, but finally i guess i had it comin...they changed the password on it...so now im scrambling to change all my forum passwords and emails...watch it.
 

More replies
Relevance 55.76%

So, one of my friend's gmail account was hacked. Dont know how that hacker did it but that good for nothing chickenwuss has now added the security layer like phone verification as well.

What can i do to recover that account. Is there some gmail support number so that I can talk to. I have few infos like the activities that my friend performed through his account. Like where he signed up and send mails and what was his previous recover email and phone numbers.

Any help or suggestion is highly appreciated...
 

Answer:Gmail Hacked any solution

You will need to contact Google's Technical Support Team for further assistance with this. We have no access to Google's servers. You will need to tell them what happened and they will let you know of your options.
 

1 more replies
Relevance 55.76%

I was wondering if you would mind helping me (I am very anxious for my problem)Today on a computer (without any especial AntiVirus) which is in a public place for everyone I checked my Gmail account by IE and I received a bunch of strange emails. by opening of one of them I was diverted to another person's email and then when I tried to sign in with my username, gmail said you are trying to use your old password. you password has been changed for 33 days. So I was frustrated because even I did not know the security questions; I could not sign in for around 2-3 hours and after that when I tried my password (This time in my personal Computer with ESET Smart security) I could sin in; once I signed in, I changed my password and now I would like to know whether this email address is safe anymore or not? Can I still use this email address knowing I have changed my password? Also I would like to know whether there is a risk of getting a keylogger after being hacked? Is keylogger installed on the system or email? When I got hacked I was with a public computer, so this means that if any keyloggers have been installed, they have been installed in that public computer? Right?and Now that I'm using the email address in my personal computer there is no risk of having a keylogger? Am I right?In general, also could you please let me know whether using this email is safe or nor?Also, could you please confirm whether ESET Smart security is anti keylogger as well or not?Thank you very muchI lo... Read more

Answer:Gmail hacked, returned and now...

U can make your e-mail safe again by using google's Two step verification process which makes ur account very secure even in public places as it generates random numbers and sends SMS to ur regestered mobile no.Now getting to antivirus ESET is one of the best available in market but if u want more security then it would be better to for BIT defender or Norton 360 .

2 more replies
Relevance 55.76%

This past summer in May, I had my Battle.net account hacked and they had also gotten the registered e-mail information and kept changing the password. I contacted Blizzard and had the email changed and password changed and then ran AVG antivirus (free) as well as Malware Bytes. It found quite a bit and removed everything but it seems it has happened again. My gmail account was hacked and this morning woke up to a changed password and mass spamming of all my contacts with an email advertising something. I ran Malware again and it found 1 file and AVG found nothing. I also per recommendation downloaded Comodo Firewall. Just wanted to get some "professional" help to make sure I'm clean and what I can do in the future to prevent this. Thanks for your help!

EDIT: Running Windows 7 Home Premium

Answer:Gmail/Battle.net/Aol Hacked

I'm sorry for the bump...but it just got a bit more serious. Whoever is doing this got into my college stuff this morning and changed my name and have tried to do stuff with my classes. I just got off the phone with the school and told them to basically freeze any activity until I clear my computer up. Can someone point me in the right direction please??

2 more replies
Relevance 55.76%

Hi!
My android phone suddenly lost all network connection.
When I came home in two hours time and tried to log into my gmail, I got message: your password has been changed. I managed to log in and change password to a new one.
I saw the recovery email was changed to some unknown to me; which I briefly changed back.
I also saw that this activity was from somewhere London (I live near London, but for my activity gmail shows my town).
No emails in inbox and in sent folder, but in trash bin I saw two emails from Vodafone: (1) we got your call that you lost your phone and we blocked your phone (2) we got your call for swapping your SIM card.
I called Vodavone and cancelled all this.
Once I got my SIM unblocked, I change gmail authentication to 2-step.
I realize that my gmail was hacked because I use it for about 10 years without changing password and I used same password very long ago on some other sites :( I also find my email was leaked when LinkedIn was hacked and my home address and phone could be available to hackers.
My question is what to expect next?
It is very difficult to find any information on my gmail, because first, I write to myself tons of very long emails and if I search words like 'bank' it brings hundreds pages of results; second, I try to keep all sensible information using hints known only to myself.
But could the hackers manage to copy all my gmail box during those two hours? As far as I remember, Google showed there was a login to gmail from Internet Explore... Read more

More replies
Relevance 55.76%

Solved please remove

Answer:How to add secondary gmail account to my gmail?

Hi
You missed an email address on the top if you'd like to remove and edit the image
How To Combine All Your Email Addresses into One Gmail Inbox

1 more replies
Relevance 54.94%

This can be moved if its inthe wrong area.

My friend has a problem and I think its gonna cause him to kill his computer with a hammer. LOL He has called me for weeks about someone hacking his account.

Gmail was accessed by this IP addy: 24.129.121.183

The Perp goes in and changes his PW, in the Gmail, Yahoo and FB applications. I went over with my Malwarebytes and Rkill and this is on a SD card, restarted computer F8 and went to safe mode, uploaded and Ran rkill first, then full system scan with Malwarebytes... NADA. Nothing... Im lost.

How in the heck can they continually and I mean within minutes of him changing it they hack and change it LOL Its driving him crazy, hes driving me crazy so I felt that a post here might help.

The IP shows up on 5 Blacklists. How can he stop this from occurring over and over.

Thanks guys,
Steve:confused

PS.... I dont have any issues!
 

Answer:Hacked Gmail, Yahoo and FB accts

Could be someone is piggybacking on his router or there is a key logger installed. He needs to use a different computer to change all his passwords. Then he needs to come and join MG's and go through the Read and Run First instructions.
 

3 more replies
Relevance 54.94%

My gmail account got hacked. Offenders changed my pw, alternate email address, and deleted my contacts. They sent email out to all the contacts saying that I was stranded in the UK without money and asking for contacts to respond to arrange to send $2000.00. Offenders changed settings so that response email would be forwarded to their account. Friends who got these fraudulent emails called and alerted me and I contacted gmail and reset the alternate email address so they could send me a link to reset pw. Upon regaining access I discovered the extent of compromise.
I also rec'd email from facebook that my account with them has been breached. I still have not regained access to that.
I had Norton360 v 3.0 running on my computer the whole time. I have scanned my computer with it then with Norton 360 v 4.0 and with Trend Micro and no virus or malware is detectable. How did my account get hacked?????
 

Answer:gmail and facebook accounts hacked

Norton is mainly an antivirus product, maybe they include anti-spyware too now, not sure. There are many ways to steal access to your gmail. One of the ways is to install a keylogger on your pc, and steal username and passwords as you type them. But if you have accessed your gmail from another computer, like at university; public library, your friend's PC etc, then it may be that those computers are infected and not yours. Also, it may not be a technical attack. Simply being able to look over your shoulder as you enter the passwords will get you hacked just as easily. Then, there are whats called brute force attacks, where a program simply points to a login page, and tries each combination in sequence till it hits the right one. Gmail may not fall to brute force attacks, but if you use the same password on multiple sites, then there is a chance that they hacked that account first and tried to use the same password on gmail. Then there may have been phishing attempts made at your account and you mistakenly entered your password into a web site that only looks like Gmail. There should be more ways to steal your gmail, but I am not a hacker.

If you are running Trend Micro along with Norton, you might end up with them interferring with each other. You cannot run multiple real-time antivirus products together.

When you reset your Gmail, use a complex passphrase that is easy to remember. Eg. The phrase "Kirk is the rightful captain of the USS Enterprise" can be tr... Read more

3 more replies
Relevance 54.94%

Hi,

My computer was recently infected by a virus known as MFC32DLL.dll.vbs and the IE bar stated it was hacked by [email protected] when i was backing up files from my flash drive to my pc's D-drive but i didnt had any anti-virus software installed. Each time i tried to open any of my drives it would deny me by stating "Can not find script file "C:\MFC32DLL.dll.vbs"

Then i scanned my whole pc with kaspersky internet security and it had removed the virus. I can open both my C and D drives by double clicking them now. But my IE bar still states: "Hacked by [email protected]"

eg: Tech Support Forum - Post New Thread - Hacked by [email protected]
-----------------
Here is my Hijack Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:51:53 PM, on 7/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Taha\Desktop\HiJackThis.exe

R1 - HKCU\... Read more

Answer:IE bar states Hacked By [email protected]

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 54.94%

My Myspace, Facebook, and email accounts are all hacked. The passwords are all changed and I cant recover them because my email is hacked as well. OMG I really dont know what to do now. Ive noticed svchost.exe taking up 99% CPU usage recently and wonder if this has something to do with it. Im really facking scared. I run scans with Avira and MBAM regularly and so far have come up clean.

Answer:Myspace, Facebook and Gmail hacked

Please download RootRepeal Rootkit Detector and save it to your Desktop. * Close all programs and temporarily disable your anti-virus, Firewall and any anti-malware real-time protection before performing a scan. * Click this link to see a list of such programs and how to disable them. * Create a new folder on your hard drive called RootRepeal (C:\RootRepeal) and extract (unzip) RootRepeal.zip. (click here if you're not sure how to do this. Vista users refer to this link.) * Open the folder and double-click on RootRepeal.exe to launch it. If using Vista, right-click and Run as Administrator... * Click on the Files tab, then click the Scan button. * In the Select Drives, dialog Please select drives to scan: select all drives showing, then click OK. * When the scan has completed, a list of files will be generated in the RootRepeal window. * Click on the Save Report button and save it as rootrepeal.txt to your desktop or the same location where you ran the tool from. * Open rootrepeal.txt in Notepad and copy/paste its contents in your next reply. * Exit RootRepeal and be sure to re-enable your anti-virus, Firewall and any other security programs you had disabled.Note: If RootRepeal cannot complete a scan and results in a crash report, try repeating the scan in "Safe Mode".

2 more replies
Relevance 54.53%

Exploits allowing hackers to break into Gmail accounts are likely to occur, if they're not already circulating, after security researchers released details of a hole that Google has reportedly declined to patch....Make sure you have a strong password Many PC users select weak passwords that consist of common names or dictionary words, leaving them susceptible to brute-force discovery and configure Gmail to use SSL by default:To benefit from encryption when accessing Gmail, you should configure the service to use SSL by default. To do so, click Settings in the top-right corner of the main Gmail window, select Always use https in the "Browser connection" section at the bottom of the General tab, and click Save Changes.http://windowssecrets.com/comp/090423/

Answer:Gmail accounts hacked via unpatched hole

Or you can stop using a browser for accessing Gmail and start using Thunderbird for having all your emails delivered to your desktop.

1 more replies
Relevance 54.53%

Hello,
My gmail was hacked yesterday and a lot of emails were sent out in the space of half an hour (I found out it had happened when I checked my mail during that half hour) which were all - it appears - returned as spam. The person changed the sender name when he sent them out. I managed to change my security, making it much tighter, but I am somewhat paranoid about the mails (which looked to be encrypted to me, but not sure) to to nearly two thousand email addresses ending in .ru.
I considered that my email password was strong, but someone still managed to get in.
My big worry is that information about my credit card accounts, etc., was gathered, though there were no passwords or anything like that in my email account. I am in the process of changing passwords all over the place. Just very paranoid, and such a horrible feeling of someone getting into my account. Paranoid about all the encryption too.
Any suggestions as to what I should still do which I have not yet done (I have removed all the strange contacts, done two-step notification passwords, made a new account for banking only, told friends not to click on any strange links from me, and that's about it) will be much appreciated.
StarGazers

Answer:Gmail hacked - over 1800 emails sent out to Russia

I would do some general scans, and post a HJT log etc to the malware removal forum to check if you're infected with some kind of RAT / Keylogger. Change all passwords from a DIFFERENT computer if possible, try to make sure it's clean. Other than this I can't think of anything else you can do. Your mail was used to send emails that could be used for any purpose. I'd also create a new mail account, just incase.
 
- Agglomerate

1 more replies
Relevance 54.53%

Check if Your Gmail is Hacked with Activity Monitor.

-- Tom
 

Answer:Check if Your Gmail is Hacked with Activity Monitor

7 more replies
Relevance 54.53%

Hey all, new to the forum Summary of problem: my Hotmail and/or Gmail password keeps getting hacked even though basic anti-malware scanners say I'm clean.Background: Couple of months ago my Hotmail and Gmail accounts were hacked. I scanned using half a dozen of different programs (PrevX, Spybot, Malwarebytes, etc.) but didn't find anything. As I was still using shared passwords at the time and my Hotmail and Gmail were linked to each other as security backup addresses, I figured one of them must have been leaked. I switched to unique passwords, cleaned out all the emails' security options and carefully declared myself 'safe' again.Until this morning when my Hotmail/Gmail were hacked in the exact same fashion (the fake 'security email address' added was similar and they once again went after my World of Warcraft account). Scans once again show nothing, but an hour later after changing passwords there was still evidence of them having limited access.Question: Is there any way to more thoroughly check my system? Thanks in advance Edit: I run Windows Vista, 32-bit.

More replies
Relevance 54.53%

Gmail accounts hacked via unpatched hole

By Scott Spanbauer

Exploits allowing hackers to break into Gmail accounts are likely to occur, if they're not already circulating, after security researchers released details of a hole that Google has reportedly declined to patch.

There are steps you can take to reduce the risk of using a webmail account, but it appears that the usual tricks won't solve the Gmail problem until Google fixes the software.

The weakness that researchers say afflicts Gmail, a free e-mail service hosted by Google, belongs to a class of attacks known as cross-site request forgery (CSRF, pronounced "sea surf").

Besides Gmail, CSRF holes affecting YouTube, Netflix, and NYTimes.com have also been found and repaired in the past. CSRF attacks use security flaws in cookies, password requests, and other interactive Web components to intercept communications between your browser and a Web site's server.

The first report of the Gmail problem within security circles was written by Vicente Aguilera Daz of Internet Security Auditors (ISA) on July 30, 2007. The next day, ISA issued an alert and included a proof of concept illustrating how the exploit could be used to change a Gmail account password.

After more than a year during which, according to ISA, Google was repeatedly contacted privately about the problem researchers publicly released a detailed description of the exploit on March 3, 2009, according to a Secure Compu... Read more

Answer:Unpatched Hole in Gmail - Accounts Hacked

 

6 more replies
Relevance 54.53%

Exploits allowing hackers to break into Gmail accounts are likely to occur, if they're not already circulating, after security researchers released details of a hole that Google has reportedly declined to patch.Click to expand...

http://windowssecrets.com/comp/090423/
 

Answer:Gmail accounts hacked via unpatched hole

Is web mail safe, or is your mail safer when retrieved to your PC ? What is your opinion?
 

2 more replies
Relevance 53.71%

Last week I found out that my Paypal account was being used without my permission. I contacted Paypal, and they helped me back into my account changed the password and have sent out a security card, the next day I tried to log in to Paypal and found that my password and security questions had changed. I contacted Paypal again, and they found that someone had added their email address to my account so they invalidated that email address, and changed the password again. Today I tried to log in to my email address (the one linked to my paypal) and I was unable to access it, the password had been changed. I immediately checked my paypal, and was unable to log in. I called them, and all of my information had been changed including my email address and my mailing address. At this point they locked my Paypal account so that even I could not access it until my security key card arrived. I have since recovered my gmail account as well, by filling out the account recovery form. Please help! I don't know what to do.

A few notes that may or may not be helpful:

I have updated Norton Antivirus, and Parelogic Anti-Spyware, and they both found nothing.

My computer clock started acting crazy right before all of this madness happened. The date was set forward to 2016.

The paypal representatives informed me that my Paypal account was being accessed from Pakistan. (I live in California and have never been remotely close to Pakistan)

I use a wireless router.

I use an e... Read more

Answer:My laptop was hacked big time. Paypal, and gmail compromised. Please help!

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 52.89%

Hi all,
A few years ago I bought my son an Xbox and when I did I needed to create a microsoft account. At the time, the directions for xbox indicated that you could use any existing account. I had a gmail account, so I signed up for the xbox account using my gmail account.
Afterwards, I tried a windows phone 7.5 and I used the same gmail account for my microsoft account. Since then I had to switch carriers (from att to sprint) and I lost my windows phone.
It has been a few years, and I don't remember how this all works. When I log into my microsoft account using [email protected], I use a different password than what I use when I log into my gmail account. The microsoft contains all my gmail emails (unread). I am assuming I had link the MS account to the gmail account at some point, but I don't remember how I did this???
Fast forward to know, I want to try a windows 8 phone on sprint, and I don't know if I should make a new MS account or use the old gmail account?
If somebody could help me remember what the heck I did a few years ago I would appreciate. I really don't like having my gmail account tied to my MS account...
Thanks

Answer:gmail mail account is my MS account?

It looks like you need to change the e-mail address associated with your Xbox Gamertag. I needed to do the same last year. When Microsoft launched Outlook.com, I immediately signed up for an Outlook.com e-mail address. But my Gamertag was tied to my old Hotmail address. After consulting the Xbox support site, I was able to change the e-mail address associated with my Gamertag from my Hotmail address to my Outlook.com address using the following procedure:Sign up for a Microsoft e-mail address (*.outlook.com). (NOTE: Do NOT create a Gamertag for this address. If you did, you would need to delete that Gamertag and wait 30 days for the new e-mail address to be able to accept another Gamertag.)Start the Xbox and let it log into your old account.Navigate the Xbox settings to find the option to change the e-mail address of your Xbox account. Select that option.When prompted, provide the new e-mail address (*.outlook.com) and corresponding password.
After I did that procedure, all my purchased apps, games and music transferred to my Outlook.com account.

2 more replies
Relevance 52.89%

I recently changed from gMail to a email client. Why is my email being sent to the email address I want it to, then immediately after to literally my gMail (<name>@gmail.com) account, is there any way to prevent this ?

Answer:To my email account - to gMail account ?

Very confusing post...please explain in more detail, as specific as you can. What email client are you using?

5 more replies
Relevance 52.48%

Over the past 3 weeks my battle.net and gmail accounts have been hacked on 2 major occasions. The first time the hacker seemed to always know my passwords after i changed them and i was engaged in a 30 minute battle of change-the-password before the hacker attached an authenticator to my account and locked me out. I then had to contact Blizzard to restore my account. After that i installed AVG and removed 4 infections and thought myself safe but last week i got hacked again when i was out, i didn't leave my pc on so he must have gotten my passwords earlier.I tried running DDS but it just quits and doesn't give me the logs. Tried GMER twice but both times my pc BSOD'd. All i have is a HijackThis log, hope its enough.(PS: PSMAntiKeyLogger was only installed minutes prior to this post as i only just found out about it, it was not running when i got hacked)Logfile of Trend Micro HijackThis v2.0.4Scan saved at 1:31:15 PM, on 7/13/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.21020)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9 ... Read more

Answer:Suspect Trojan and/or Keylogger - Battle.net and gmail accounts repeatedly hacked

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.We need to create an OTL report,Please download OT... Read more

2 more replies
Relevance 51.25%
Question: account hacked

my email account was hacked and i want to make sure i don't have a virus or anything on my computer that avg isnt catching.

Answer:account hacked

Hello please run these.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.Before you save it rename it to say zztoy.exe alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan ... Read more

2 more replies
Relevance 51.25%
Question: Wow account hacked

Hi there.

Similar to the other thread below this, I have also had my Wow/Battle.net acccount hacked, and followed the advice given by blizzard.
Nothing else appears to have been compromised so far, but obviously it is hard to tell.

I would really appreciate it if someone could look through the info below, as I don't know enough to be able to interpret the data myself.

I am running windows 7, which I installed last weekend, and have installed all the updates that have been made available for it via windows update. Please let me know if you need any more info.

I have run:

ATF cleaner.
AVG Free Edition.
Microsoft Security Essentials (the one that comes with Windows 7)
Ad-aware.
Spybot.
MalwareBytes.
Hijackthis.

Everything came up blank apart from Malware Bytes which found one item, which ive shown below:
Malwarebytes' Anti-Malware 1.41
Database version: 3057
Windows 6.1.7600

29/10/2009 22:06:09
mbam-log-2009-10-29 (22-06-09).txt

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 190517
Time elapsed: 34 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
... Read more

Answer:Wow account hacked

This has been solved, please close this thread. Thanks!
 

1 more replies
Relevance 51.25%

So my world of warcraft has been hacked or keylogged or something. i dont know much about computers but a forum said i should link my Hijackthis log and another so here it is. Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:39:32, on 10.06.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.... Read more

Answer:wow account been hacked

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 51.25%

Hi Alla few weeks ago, my ebay account was hijacked and ebay put a block on my site for a day or two until it was sorted, i obviously went thru all the procedures changing my password for ebay and my email account etc.The Bugger had sent about 40 emails from ebay regarding expensive jewelry, ebay for now seems fine, but i received over 100 emails today 'notification of failure ' to my email account, has this guy still got access to my email , i'm a bit confused here.Thanks for any help

Answer:someone hacked onto my account

Hi Marg7Thanks for your reply, most of the returned emails all seem to relate to some sort of Jewellery, but my 'sent items' folder is empty on my account, i will change password again to make sure.Thank you for your help

1 more replies
Relevance 51.25%
Question: my account hacked

i'm a MMORPG player and my account was hacked. my antivirus system has detected a thread named by C:\fbak.exe - Win32/PSW.OnLineGames.OJM trojan...... my system has deleted it but i'm not sure that. can anyone tell me how can i sure removed this trojan from my pc? thanks.
 

Answer:my account hacked

You need to follow these instructions and post your logs when finished in the malware forum.

READ & RUN ME FIRST. Malware Removal Guide
 

1 more replies
Relevance 51.25%
Question: WoW account hacked

Hello everyone, I'm coming here to see if everything is now ok with my pc.
01/11/09 I realized my msn and wow accounts were hacked and after I contacted Blizzard I suddnely started all the scans they suggested.
Everything seems ok now, had some cookies only as threats but with a low risk, and deleted them annyway now.

Here are my HJT log and MBMA log to check, if possible ofc:

HJT:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13.39.34, on 05/11/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\SoundMAX.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Lavasoft\... Read more

More replies
Relevance 51.25%
Question: hacked WoW account

So I got hacked my World of Warcraft account. Blizzard sent me new password so its fine now but I shouldnt use it until I wont remove virus/keylogger so I need help with this.
Thanks in advance
Here is my log.:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:01:45, on 26.2.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\Intel\AMT\atchk.exe
H:\Program Files\DrayTek\Vigor318 ADSL\CnxDslTb.exe
H:\Program Files\HP\HP Officejet Pro K550 Series\Toolbox\HPWUTBX.exe
H:\Program Files\Java\jre6\bin\jusched.exe
H:\WINDOWS\system32\rundll32.exe
H:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
H:\WINDOWS\system32\RUNDLL32.EXE
H:\WINDOWS\FixCamera.exe
H:\WINDOWS\tsnp325.exe
H:\WINDOWS\vsnp325.exe
H:\WINDOWS\RTHDCPL.EXE
H:\WINDOWS\system32\ctfmon.exe
H:\Program Files\Logitech\SetPoint\SetPoint.exe
H:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
H:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
H:\Program Files\Intel\AMT\atchksrv.exe
H:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
H:\Program Files\Java\jre6\bin\jqs.exe
H:\Program Files\Intel\AMT\LMS.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\W... Read more

More replies
Relevance 51.25%
Question: wow account hacked

Hi there. I recently had my WoW account hacked and was advised to follow the instructions on this forum http://forums.wow-europe.com/thread.html?topicId=5383442401&sid=1.
So, so far I have run ATF Cleaner, Ad-aware, Spybot S&D, MBAM, AVG anti-virus scan and an online scan from pandasoftware.com. All of which have come up with nothing. Could you have a wee look at these hijackthis logfiles and do whatever it is you can do to help? Thanks a lot in advance!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:31, on 06/01/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18349)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Hp\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\AVG\AVG8\avgtray.... Read more

More replies
Relevance 51.25%
Question: wow account hacked

Hi there. I have been advised to have my hijackthis and MBAM logs checked after having my WoW account hacked. Could you please have a look at these log files and provide any possible help? Thanks in advance.
Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 04:10:19, on 09/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe
C:\Users\Public\TrendMicro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet E... Read more

More replies
Relevance 51.25%

Hi there, how r ya?

I had problems for about a half hour tryin to sign into one of my AOL accounts. I was getting a wrong password message even though I checked this and re-typed my user name and password several times. My second account had no problems signing in and out. Now there is a good reason why someone would want to read my e-mails, so is there any way to find out if someone logged into my account?

Hope you can help, thanks very much
 

Answer:How to tell if my account was hacked

Hi. When you say AOL accounts, do you mean you have two separate accounts...or more than one AOL screen name?

If you do have more than one full account, which I don't think you have...then each would have a Primary Master screen name that as you probably know, cannot be changed- the password to each can be changed by you, or AOL at your request> I think if you are suspecting any intrusion to either account that you do contact AOL and have them reset both passwords. You should do this also if you only have 1 AOL account, but more than one screen name.

You can then sign on with the new password they give you and then change it to suit yourself. Your secondary screen names can be changed but again, you probably know what a pain that can be, finding some that are not being used...you have to be creative and put in some numbers as most plain words or names are already used.

Trojans and such can indeed send passwords out...so do change them officially with AOL tech support first, then change them yourself afterward.

You could also post a Hijackthis log for experts here to review just in case there is something lurking.

Download it here:

http://tools.radiosplace.com/HijackThis.exe

It's a direct download so be ready with the folder for it.

Basically, you create a new folder, the desktop is OK provided you make a folder, name it something like HJT, and download TO that folder, run hijackthis.exe from there.
You can make the folder in Program Files, My Documents... Read more

1 more replies
Relevance 51.25%
Question: Hacked account

Found myself with a hacked account on a game I play today, and I just couldn't find the reason for it. Found no keyloggers etc although malwarebyte found one trojan in my registry. It's removed etc & now I just want to make sure everything's back to normal.
Here's the hijack log, would be awesome if someone could check it through quickly & give response.
Thanks in advance.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:21:57, on 2009-11-13
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915) (Not using though, I'm using Chrome)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\xampp\apache\bin\httpd.exe
C:\Program\Bonjour\mDNSResponder.exe
C:\Program\Java\jre6\bin\jqs.exe
C:\Program\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\Program\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\xampp\apache\bin\httpd.exe
C:\Program\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\devldr32.exe
C:\Program\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\system32\CTHEL... Read more

More replies
Relevance 51.25%

I have Windows 7 on my computer.
My wowaccount got hacked and I got this Link from Blizzard to clean my computer.
I have followed all the steps there and is posting my Hijackthislog here to see if U can find anything else.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:18:44, on 2010-05-07
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\soundman.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Users\leif\AppData\Local\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10e.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
D:\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54... Read more

More replies
Relevance 51.25%

wow account was hacked this morning, went through account recovery on another computer, while running several scans on this one, found a few java viruses, cleaned them, combofix found and removed something, everything else came back clean. thought we were ok, even tried to add the 'dial in' authenticator to the account, and it said everything went fine, and then around midnight the account started logging in on it's own, went to stop it, and found out that they had changed the email address, after the 'dial in' authenticator was added. one, or both machines have a major security issue, and I really need some help here... I've spent the entire day on this BS only to have it start up again

I'm including the combofix log, SuperAntiSpyware log, and the Avira log, and going to bed before I hurt myself, this is insane

someone please help
 

Answer:wow account re-hacked, need help

If you have run the full procedures:

READ & RUN ME FIRST. Malware Removal Guide Then you will see that you should have also attached logs from Malware Bytes, RootRepeal, and MGTools. Your version of SUPERantisptware is out of date so the below will need to be done.

Important Notice: A new version of SUPERAntiSpyware is available.

Please uninstall your current version (this is necessary).
Then download this SUPERAntiSpyware
Install this new version. It may tell you that you need to reboot to complete the installation. You must reboot at this time.
After the reboot, run SUPERAntiSpyware and immediately click the Check for Updates button to get more updates for the database.
Now run a new full scan of your system. And attach this log later.

You should also take a look at this:

WoW Account Hacked?
 

15 more replies
Relevance 51.25%

hey, thought id post this to see if there is anything wrong in this log

ive used AVG anti virus and advanced system care free, after the first "hack" then again after that i got hacked into again

Answer:WoW account hacked twice in one day..

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 51.25%

Hello to you all, i am not very computer 'savvy' when it comes to things like this anyway so i will try and describe my problem the best i can to enhance the chances of there being help for me.

It all started on the 8th of March 2010 the day after i changed faction from Horde to Alliance (which is rather frustrating). I got an email when i got in from work saying my password had been reset and initially i just thought it was one of them stupid emails sayin "type ur old password bla bla bla" but then looking at a few more emails from blizzard telling me my aco**** had been suspended i thought i might have made a boo boo when buying the faction change but subsequently realised if so, my character would still be Horde if i didn't do it the official way so that was possibility of how it occured removed.

I eventually got the suspension lifted and all my gear back quickly (with lots of ore they grinded on my alt lol) and then followed the steps blizzard reccomend in this post "http://forums.wow-europe.com/thread.html?topicId=5383442401&sid=1" but thought hopefully it did the trick without needing to post anything on a forum. I did all the installs and scans and then set about changing all my passwords to everything, not just WoW. Then this morning before i set off to work . . . i get the same few emails sayin my PW was changed and account now suspended.

I then got a friend to go on his computer, after i changed the password back so i could... Read more

More replies
Relevance 51.25%
Question: Wow account hacked

My World of warcraft account got hacked the other day and i searched my computer for trojans and stuff but couldnt find any.

Im posting my hijacklog here and hope someone can tell me if there is something there that i have to remove.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:25:49, on 2010-03-08
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Robert\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\... Read more

More replies
Relevance 51.25%

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:08:58 PM, on 11/29/2009
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ltmoh\ltmoh.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
C:\Program Files\TOSHIBA\TECO\TEco.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\windows\system32\taskmgr.exe
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\windows\system32\taskhost.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Interne... Read more

Answer:Account was hacked and here is my HJT log

Can somebody help me please???
 

1 more replies
Relevance 51.25%

My isp account was recently hacked. I tried logging onto my at&t email, and it said that the account was suspended by my main email account. Later that day, my internet stopped working, and it was redirecting me to a web page saying that their was a problem with my internet account. Finally I called my service provider, and they reset my password and I was able to log on. The first thing I did was check to see my account setting, and my name was changed. Also, three of my email accounts where supspended, and three new email accounts where created by the hijacker. Is there a virus or a trojan that can give someone my information? Does anyone have any ideas of how this could have happened? I hardly ever give out my email addresses, but was my computer hijacked? Can someone please check my HijackThis Log File to see if anything looks suspicious?Thanks for any help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:38:01 PM, on 9/7/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEc:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\Dell\DellDock\DellDock.exeC:\Program Files\DellTPad\Apoint.exeC:\Program Files\IDT\WDM\sttray.exeC:\Windows\System32\igfxtray.exeC:\Wi... Read more

Answer:ISP Account was hacked

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 51.25%
Question: Account hacked

Hi

I did get a gameaccount hacked, I havent got any weird pop-ups or errors/messages in windows. Have done som cleaning now and hopefully removed all trojans etc etc.

But i post my hijacklog so u guys can check if u find anyhing weird in it, i also post removed items from a Ad-aware scanlog.

Greets
Peter
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:55:17, on 2009-11-08
Platform: Unknown Windows (WinNT 6.01.3004)
MSIE: Internet Explorer v8.00 (8.00.7100.0000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Users\wAez\Program Files (x86)\DNA\btdna.exe
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Program Files (x86)\Personal\bin\Personal.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Pag... Read more

More replies
Relevance 51.25%
Question: Hacked WoW Account

Dear friends!

Two days ago my World of Warcraft-account was hacked. I have now cleaned my computer from all viruses and trojans but just want to be sure that there are nothing left after the scannings. Therefore I post my log here and asking for your help with this.

Mats
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:48:09, on 2009-01-10
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
C:\Program\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\AGI\common\win32\PythonService.exe
C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\Smartscaps.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\Stardock\SDMCP.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NVATray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\iid.exe
C:\Program\Java\jre6\bin\jusched.exe
C:\Program\QuickTime\qttask.exe
C:... Read more

More replies
Relevance 51.25%
Question: Hacked WoW account

Ok, yesterday i found myself the victim of one of the many account hacks in the World of Warcraft, leading me to check up on my chracters, finding the usual stuff had happened to it ei. in-game gear/gold/other items have been sold or removed. As a part of the security strategy promted by Blizzard i have run several viral scans (Ad-Aware, AVG, Spybot S&D, Malawarebyte's Anti-Malware and Hijackthis). With Ad-Aware comming up with its usual amount of TAC 3, level threats, Spybot finding three things it corrected, AVG came up blank except for a broken digital signature thats been there for months and Malaware comming up with 1 trojan, which it removed (hopefully), I did the usual of rebooting and proceeded to download Hijackthis and run a scan, which i hope you guys can help me with checking out, in advance thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:51:16, on 12-04-2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\schtasks.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Arc... Read more

Answer:Hacked WoW account

bump
 

1 more replies
Relevance 51.25%
Question: account hacked

hi, i m a new member of this forum. i had a problem whit my wow account. the blizzard team send me an e-mail that sayed:"that my wow account was hacked and that my computer was infected by a troian or keylogger... I made the scansion whit hijackthis and this is the result:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13.01.33, on 21/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\TVersity\Media Server\MediaServer.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\Spybot - Se... Read more

Answer:account hacked

BUMP I need your help!!!
 

1 more replies
Relevance 51.25%
Question: WoW account hacked

Hello

My Wow account got hacked (keyloger or someting). i did exactly the steps that i got from a blizzard support page :

http://forums.wow-europe.com/thread....83442401&sid=1

So, here is the log file after doing everything. Am i safe yet? :)


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:22:56, on 17.05.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\AVerTV\QuickTV.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Common File... Read more

Answer:WoW account hacked

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 51.25%
Question: Account hacked

Hi,

My Wow account was hacked and after I changed password it was hacked again.

I have run
1. AFT cleaner
2. Ad-aware
3. Spybot S&D
4. MalwareBytes' Anti-Malware (MBAM)
5. BitDefender Virus scan
and finally Hijackthis.

I really would appreciate if you can take a look at the log file and se if what's wrong.

Thank's

Janne
----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:27:50, on 2009-07-28
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe
C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe
C:\Program\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program\Delade filer\Symantec Shared\ccApp.exe
C:\Program\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program\Java\jre6\bin\jusched.exe
C:\Program\Net iD\iid.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Delade filer\Nero\Nero BackItUp 4\NBCore.exe
C:\Program\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program\Personal\bin\Personal.exe
C:\Program\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\Program\Symantec AntiVirus\DefWatch.exe
C:\Program\Java... Read more

More replies
Relevance 51.25%
Question: Account hacked

I believe my account may have been hacked on a social networking site. A friend of a friend of mine told me that after doing some techie magic tricks, she found that my account had been accessed by another IP address at a specific time. I would like to know how she did it (I do not have access to this techie person). She also said that I can log out of my account, extract the IP address and block it from accessing my account, but she did not give very precise instructions on how to do this. I am computer savvy, but have never known how to find another persons IP address or how to see what IP addresses have accessed my accounts. Any helpful information would be appreciated. Thank you.

Answer:Account hacked

I'd like to know that trick too. If she really did what she said, why didn't she give you the other IP or block it for you. Something doesn't sound right.How do you know when a politician is lying? His mouth is moving.

3 more replies
Relevance 51.25%

I just thought I should let you folks know that my Aol account was hacked into at 6 this morning. I wasn't even on my computer! They managed to send 10 emails to people I don't even know. If anybody has had any similair experiences please let me know. I am changing to BtOpenWorld tomorrow. For all those using Aol - you have been warned!

Answer:Somebody Hacked Into My Aol Account!

I had a problem with my AOL account. A few months ago, instead of my usual 5.95 bill I was faced with 200+ !!!When I contacted them I was told that the next month's bill was already at 150+. I told them that there was no way I had accumulated such an account and they furnished me with details. Many of the times were when the house was empty. They tried to say that my husband could be accessing it from work but as he drives a van all day & is a complete novice on computers I disputed that vehemently!!They sent me a declaration form which I had to fill in with every line of billing and I had to declare that I had not used AOL at these times. They accepted my statement and I was eventually cleared of the bills but it was a lot of work to get there!! You have my sympathies. They admitted that it looked as if someone had definitely hacked my account...or as they put it...The account had been compromised.Good luck!!

3 more replies
Relevance 51.25%
Question: Hacked WoW account

Hello, I recently had my WoW account hacked and scanned through my computer with various anti-spyware and antivirus software. My avast! antivirus found a Trojan which I deleted.

Was wondering if you could be so kind to look through this HijackThis logfile to see if there is anything suspicious looking in there. This log is from after I scanned my computer and deleted the trojan.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:12:20, on 2009-05-09
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Hem\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox... Read more

More replies
Relevance 51.25%
Question: WoW Account Hacked

My World of Warcraft account was recently hacked and I can't figure out how. I scanned my system with ESET (local) and Kaspersky's online scanner. I also scanned my system with Spybot Search & Destroy and Ad-Aware. Nothing was found by any of these scans. I try to keep my system clean all the time, and all the scans I've done have told me that it is clean, however someone was able to get my login info for my WoW account. There were a few times I used Firefox without the firewall on because I was gaming. I have since quit turning my firewall off EVER. There have also been a few times that my son played my account on his computer. That will NOT happen again. I tried to use your DDS script, however it won't run on Vista 64bit. Here is the log from HiJackThis. Thanks for your time.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:32:00 AM, on 3/16/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:C:\Program Files (x86)\MagicDisc\MagicDisc.exeC:\Program Files (x86)\Java\jre6\bin\jusched.exeC:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exeC:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exeC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Interne... Read more

Answer:WoW Account Hacked

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any scri... Read more

9 more replies
Relevance 51.25%
Question: Account hacked

Hi, i'm a world of warcraft player, my account has recently been hacked and i suspect it was done via malicious software on my computer, now i'm trying to take counter measures. i did some system checks with numerous software including spybot, MalwareBytes' Anti-Malware, avast, only spybot found and deleted few items. Could you please check my HiJackThis log and warm me if there's anything wrong. Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:12:12, on 18.09.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\UMonit.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\lacin\AppData\Roaming\Google\Google Talk\googletalk.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Ventrilo\Ventrilo.exe
C:\Users\lacin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\sy... Read more

More replies
Relevance 51.25%
Question: Wow Account Hacked

here is my hijack this files.Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Comodo\Firewall\cmdagent.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Comodo\Firewall\cfp.exeC:\Program Files\Mozilla Firefox 3 Beta 4\firefox.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dllO4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\cfp.exe" -sO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.08\RivaTuner.exe" /SO9 - Extra button: (no... Read more

Answer:Wow Account Hacked

well its been a week with no response.

3 more replies
Relevance 51.25%
Question: WoW account hacked

Hi guys,

I had my WoW account hacked yesterday and have followed a guide to clear my computer and was recommended this site to post my reports on to see what to delete. How this make sense to some of you.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:24:33, on 24/09/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Virgin Broadband Wireless\Wireless Manager.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Andy\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files\AIM\aim.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Users\Andy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\Andy\AppData\Local\Google\Chrome\Application\chrome.exe... Read more

More replies
Relevance 51.25%

Apparently my World of Warcraft has been hacked into twice. Everythign else on my PC is running fine... it has been a bit slow but nothing else seems to be playing up. I've scanned using everythign reccomended in an e-mail from blizzard and this is my Hijackthis log after all my scans

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:23:10, on 29/04/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Kontiki\KHost.exe
C:\Program Files (x86)\Intel\inteldh\ManageAgent\bin\AgentMonitor.exe
C:\Program Files (x86)\Napster\napster.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Samantha... Read more

More replies
Relevance 51.25%

Hello, about 6 months ago I got my WOW account hacked 3-4 times within a few day period(had to wait for authenticator to come) Anyways, I want to make sure that I am not still affected because I dont want a spy snooping on my finacials and stealing that account information! I took a look through this and I have nub eyes when it comes to this. Can someone see anything odd in it?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:29:08 PM, on 11/6/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Users\Patrick Tibai\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Wireless LAN\WlanUtil.exe
C:\Program Files (x86)\Stardock\Impulse\Now\ImpulseNow.exe
C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files (x86)\Logitech\Video\LogiTray.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Ideazon\ZEngine\Zboard.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG\AVG10\avgtray.exe
C:\Program Files (x86)\Logitech\Video\FxSvr2.exe
C:\Program Files (x86)\AVG\AVG10\Id... Read more

More replies
Relevance 51.25%
Question: Hacked WoW Account

I cant seem to find the keylogger on my computer. I have run TrendMicros housecall and KL Detector and cant seem to find the problem.
Here are a few logs. I am running Malwarebytes at the moment

TCP
[System Process] 0 TCP 192.168.0.101 2226 74.125.224.28 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2252 208.43.87.4 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2254 216.34.207.177 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2250 216.34.207.177 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2225 74.125.224.28 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2235 24.143.207.10 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2227 74.125.224.28 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2228 74.125.224.28 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2239 24.143.207.112 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2240 24.143.207.112 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2237 24.143.207.112 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2241 24.143.207.112 80 TIME_WAIT
[System Process] 0 TCP 192.168.0.101 2238 24.143.207.112 80 TIME_WAIT
alg.exe 1280 TCP 127.0.0.1 1046 0.0.0.0 0 LISTENING
DivXUpdate.exe 1812 UDP 127.0.0.1 1036 * *
firefox.exe 2884 TCP 127.0.0.1 2038 127.0.0.1 2037 ESTABLISHED 10 10
firefox.exe 2884 TCP 127.0.0.1 2039 127.0.0.1 2040 ESTABLISHED
fi... Read more

Answer:Hacked WoW Account

Sorry for posting in here i did see the notice that said dont put logs but i though i was in the hacked topic. If a moderator could move that would be appreciated.
I did a KL log and got this

KL-Detector has found some suspicious files:
C:\Program Files\World of Warcraft\Logs\Downloader.log
C:\Program Files\World of Warcraft\Logs\Sound.log
C:\Program Files\World of Warcraft\Logs\connection.log

Please check; someone might have installed a keylogger on your computer!
You MAY want to take a look at:
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Blizzard Installer Temporary Data - 8fbc8c9c\
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\
C:\Program Files\World of Warcraft\Logs\
C:\Documents and Settings\Administrator\
C:\WINDOWS\system32\config\

1 more replies
Relevance 51.25%
Question: Wow account hacked

Hello i play a game called wow and i recently got hacked so i scanned my comp, changed my pass and it seemed to be back to normal. then the next day i got hacked again so i did the same thing again and then it just keep happening over and over again and it has been a week now since i first got hacked and im still searching for viruses up to this day with no luck, so i decided to post my proplem here and see if one of you could help in some way .
 

Answer:Wow account hacked

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:18:23, on 21.4.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Turbine\Turbine Download Manager\TurbineDownloadManagerIcon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Users\Kjartan Freyr\AppData\Local\Apps\2.0\N73BAREC.AX6\537YWQLQ.5KG\curs..tion_eee711038731a406_0004.0000_152ef8e82e8f5a48\CurseClient.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Kjartan Freyr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kjartan Freyr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kjartan Freyr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kjartan Freyr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kjartan Freyr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kjartan Freyr\Documents\Downloads\avg_iswt_stb_all_9_114.exe
C:\Users\KJARTA~1\AppData\Loca... Read more

1 more replies
Relevance 51.25%
Question: WOW account hacked

Hi there,

I have been reading through the posts and it seems I am in the same boat as a lot of people on here. My boyfriend's WOW account was hacked a week ago. I ran an AVG scan today on his computer and came up with a few tracking cookies which I removed. I also ran Malwarebytes as well as Superantispyware and neither of those came up with anything.

Upon searching through files that came up with last weeks date (around the same time he was hacked), I found an instance of a program called Carbonite (online backup tool) http://www.carbonite.com/ that had been installed. I've encountered this program before in my line of work, and I am not a fan of it at all. I uninstalled the program and rebooted the machine.

Also, via msconfig there was something in start up I am not familiar with:
Startup item- Cyberlink brs
Manufacturer- Cyberlink
Command- "c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe"
Location- HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

The above mentioned Carbonite was also in the startup. I disabled both of these. I cannot locate the brs.exe file mentioned above and upon searching other forums on the web, I found that it may or may not be harmful.

At this point I would like some reassurance that the computer is clean and we will not have any other issues. Thank you in advance for your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:46:18 PM, on 4/24/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)... Read more

More replies
Relevance 51.25%

Steam was recently hacked, and I have an account on Steam, so I think my account was hacked. I tried to log in earlier this morning and it wouldn't let me. So I reset my password and used my username. Then it let me in. I'm scanning with my AV right now to see if I have any viruses.

Answer:I think my account might've been hacked.

Hello, also post this...Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List last 10 Event Viewer log List Installed Programs List Users, Partitions and Memory size. List Minidump FilesClick Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

8 more replies
Relevance 51.25%

Hi,

My World of Warcraft account has been hacked, ironically it happened within a couple of hours going on to Battle.net to suspend my account as I no longer wished to play. My biggest concern is that there is still something sitting on my PC that could get more sensitive information.

I have done many scans with McAfee, Ad-Ware, Spybot - Search & Destroy, Malwarebytes etc...

Here is my Hijackthis and Malwarebytes log file, am I possibly safe now?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:53:03, on 27/04/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
c:\PROGRA~2\mcafee.com\agent\mcagent.exe
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files\ASUS\TurboV\TurboV.exe
C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
C:\Program Files\ASUS\Ai Suite\QFan3\QFanHelp.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/we... Read more

More replies
Relevance 50.84%

Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz, Intel64 Family 6 Model 37 Stepping 5
Processor Count: 4
RAM: 7988 Mb
Graphics Card: Intel(R) HD Graphics, -325 Mb
Hard Drives: C: 902 GB (411 GB Free);
Motherboard: Dell Inc., 021CN3
Antivirus: Malwarebytes, Enabled and Updated

I frequently receive messages from Facebook indicating that my Facebook account has been accessed from Shangahi, China and from "near San Miguel de Allende, Mexico." Several times after receiving these notifications, I have followed Facebook's process for securing my computer including changing my Facebook Password but I continue to receive these notifications. Today, when I received one of these notifications indicating that my account was logged-into by someone "Near San Miguel de Allende, Mexico," I noticed "Share_platform_default" at the bottom of the notice. (Please see below for a copy of the notification.)

"Your account was recently logged into from an unrecognized browser or device. Was this you?

New Login

July 16, 2017 at 11:05am

Near San Miguel de Allende, Mexico

Share_platform_default"

I am wondering if the "Share_plaform_default" means that I am sharing my Facebook account with someone else? (I need to include in this thread that I use a VPN - StrongVPN - and that yesterday I contacted a tech at St... Read more

More replies
Relevance 50.84%

I constantly get failed message delivery notices from postmaster on my live account. All the solutions i have found just block that address, seems to me that is just masking the problem. As i would still be sending the stupid emails asking my address book if they want to buy Viagra.
I thought i might have had my account hacked so i changed my password. It is still happening, every so often the virus/hacker forgets to delete the sent messages and i can see them in my out box, which leads me to think its an actual person not a virus. Either way its getting annoying. Please help,
Rick
 

Answer:Account hacked or infected

That is a very common way of getting SPAM into peoples' mail boxes. You are not really sending out any emails. They just make it look that way so they can get the non-delivery notice to your box and get you to see it. Block the address.
 

3 more replies
Relevance 50.84%

hey, i just checked my older hotmail account and found about 100 notices that sends were unsuccessful. none of the target addresses are in my address book, and apparently my mom got some spam from me. i changed my password on the account a while ago, but now its happening again. is there any way to tell microsoft? or is the account pretty much dead?

Answer:Hotmail account hacked?

Bubba,
It happened to me so I closed the account and contacted MS.
Then moved to g-mail and yahoo. First I copied all contacts and saved them.

9 more replies
Relevance 50.84%

Hi Guys,I recently had my WOW account hacked and Blizzard say's its because I have a key logger. I don't think its on my end but I wanted to make sure. This is really the only problem I have. The computer is running fine because I only use this computer for gaming most of the time. I have posted a up to date Hijack This Log below.Thanks for any help, CoreyLogfile of Trend Micro HijackThis v2.0.4Scan saved at 9:13:11 AM, on 6/12/2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16876)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\brsvc01a.exeC:\WINDOWS\system32\brss01a.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\PnkBstrA.exeC:\W... Read more

Answer:WOW Account Hacked Possible Key Logger

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.We need to create an OTL report,Please download OT... Read more

17 more replies
Relevance 50.84%

Recently some dodgy people from china??? hacked into my yahoo email and sent emails to all my contacts RE electronic equipment.What I am wondering is do I have anything to worry about on my computer?I scanned with malwarebytes and no infections.Any tips???Thanks in advance to any helpers.

Answer:Hacked email account.

the only risk potentially to your pc that i can think of is, if you log into your "hacked" email account, and you read any emails they may of sent, or infact others you receive - be wary. your best bet (sound like you still have access to the yahoo) is to log in, and close the account.once its been compromised, theres no telling when it could happen again.also make sure you have no sensitive data in your emails, invoices, passwords etc etc..

3 more replies
Relevance 50.84%

Hi My wow account was banned via a keylogger, I got banned but got my account back after contacting blizzard and they believed it was a keylogger, so I have been scanning and cleaning my computer using several anti-virus and spyware programs.
So heres my Hijackthis log, hope you can help me if the threat is not deleted from my system.

--

Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:55:44, on 18-02-2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Ideazon\ZEngine\Zboard.exe
C:\Program Files\Saitek\SD6\Software\ProfilerU.exe
C:\Program Files\Saitek\SD6\Software\SaiMfd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Me... Read more

More replies
Relevance 50.84%

About two months ago I got an email telling me to change my password on my world of warcraft account due to "security issues." Despite this suspicious email being from an anonymous sender, I panicked and did what the email said. Since then I have not been able to access my account, and have recieved multiple emails from blizzard telling me that my account is compromised, someone is trying to sell my account, and I will recieve a permanent suspension if I do not stop "violating terms and conditions." Anyway, I decided enough was enough and looked up a solution to getting rid of keyloggers on the blizzard forum. I found this : http://forums.wow-europe.com/thread....83442401&sid=1. I followed every step, and each time the virus scanners kept coming up with nothing. I also ran a virus scan in safe mode as I hear this way it is able to dig deeper into the drives and files to search for trojans. However still, nothing was found. Nevertheless I am convinced my computer must contain some sort of trojan because my problem persists, I can't get into my account and I still recieve emails regarding "violating terms of use" etc. So here's the hijackthis log file I got today, I would very much appreciate a little feedback.

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 22:16:12, on 23/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal
Running processes:
C:\Window... Read more

More replies
Relevance 50.84%

I recently had my WoW account hacked, and the prime suspect is a keylogger, which I suspect I got from following a fake adress to a wow related webpage.

At the time I lost the password I had Norman security suite and Lavasoft AdAware installed.

I am running Windows Vista home premium, Service pack 2.

After I detected that my account was hacked, I ran full scans of Norman and AAW, and also installed and ran full scans with Spybot Search & Destroy, and COMODO internet security.
This found and removed some malware, and I also manually hunted down and removed the file downloaded by the fake webpage.

Below is my HJT log, made after the above mentioned steps had been taken. If anyone would be kind enough to go over it and look for keyloggers or other dangerous malware, I'd be very gratefull.

Thanks in advance

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:50:42, on 29.12.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\ACER\Preload\Autorun\DRV\FUJI Keyboard\ABoard.exe
C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
C:\ACER\Preload\Autorun\DRV\FUJI Keyboard\AOSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Norman\Npm\Bin\Zlh.exe
C... Read more

More replies