Assistance needed please

mooset · Jan 22, 2009

Hi there,
I was accidentally hanging around a shopping website and realized I had been hacked in to as soon as I came home. The virus was the "ISpyNow" fake security alert. I know the date if that has any relevance. I have done all of the "readme first" post, and think I have gotten most of it, but not positive I have all of it removed. The reason I don't think it is all removed is because after I had done all of the steps I had another "guest" login on my windows. I had not been connected to the internet since the removal so I think there is still something running that shouldn't be on my machine.
I appreciate all of your great information on this site, it's giving me a piece of mind after my obvious stupidity.rolleyes

Thanks in advance for any assistance you can provide!

View attachment ComboFix.txt

View attachment saslog.txt

View attachment MGlogs.zip

mooset · Jan 22, 2009

Part 2 of logs:
View attachment mbam-log-2009-01-03 (17-58-35).txt

mooset · Jan 22, 2009

One other quick question:
Is there ANY way that I can tell what files were compromised on my machine? I know packets went out, but is there a way that I can track WHAT files?
Thanks again!

chaslang · Jan 25, 2009

Welcome to Major Geeks!

mooset said: ↑

Is there ANY way that I can tell what files were compromised on my machine?
Click to expand...

Simply put.... no!

You are out of date with your version of SUPERAntiSpyware.

Please uninstall your current version (this is necessary).

Then download this SUPERAntiSpyware

Install this new version. It may tell you that you need to reboot to complete the installation. You must reboot at this time.

After the reboot, run SUPERAntiSpyware and immediately click the Check for Updates button to get more updates for the database.

Now run a new full scan of your system. And attach this new log.

Now run Malwarebytes and click the Update tab. Then click the Check for Updates button so you update to the current version of the program and database. Then run a new scan with it too. Attach the new log.

These new scans may not find anything but it is best to be safe and use the current versions to be sure.

Why are you running your PC with NO PROTECTION?? You have no antivirus, no antispyware and no real software firewall. When you drive your car somewhere to go shopping, do you leave the doors unlocked, the keys in the ignition and the car runnning? Well how you are running your PC is the same thing!!

Log in or Sign up

Assistance needed please

mooset Private E-2

mooset Private E-2

mooset Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member