computer is hijacked

Discussion in 'Malware Help (A Specialist Will Reply)' started by wedidlewe, May 30, 2015.

  1. wedidlewe

    wedidlewe Private E-2

    computer is hijacked by a computer in Hephzibah Georgia 68.47.122.202

    tried combofix and it failed and the restore didn't work so I have messed up directories with combofix.

    browsers are hijacked I think.
    firefox
    seamonkey
     

    Attached Files:

    wedidlewe, May 30, 2015
    #1
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Re run Hitman and have it remove the below.

    You did not attach the corrcet log from Malware Bytes. Please do so.

    Has Combofix quarantined some of your folders? Do you have the DeQuarantine.txt normally found on C:\
     
    Kestrel13!, May 31, 2015
    #2
  3. wedidlewe

    wedidlewe Private E-2

    I am trying to figure out how to make a log file with malwarebytes the hijackers keep messing with my installations of hitman and malwarebytes and spybot. they have messed with the admin account I tried to log in in safe mode and change things with no luck. I made an account on major geeks and they deleted it and I had to make another one.
     
    Last edited: Jun 1, 2015
    wedidlewe, Jun 1, 2015
    #3
  4. wedidlewe

    wedidlewe Private E-2

    how do you post xml files? should I change the ext to doc and you can change it back?
     

    Attached Files:

    wedidlewe, Jun 1, 2015
    #4
  5. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You are not attaching the correct log! You are attaching a Malware Bytes protection log. It's all in the instructions here
     
    Kestrel13!, Jun 1, 2015
    #5
  6. wedidlewe

    wedidlewe Private E-2

    When I did Ipconfig I noticed there was no IP listed and it said Tunnel adaptor Area Connection*11 So I disabled IP Helper Service, Remote Desktop Service, Remote Registry, Routing and Remote Access, Remote Desktop Configeration, I found a Microsoft Fix it file Disable IPv6 on all tunnel interfaces, Microsoft Fix it 50412 and now when I use any of the ip check sites it locates me in my area now. I think I have a WOW64 infection what is the best way to remove that?
     

    Attached Files:

    wedidlewe, Jun 4, 2015
    #6
  7. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Re run Malware Bytes and let it remove what it sees. Then scan again and attach a hopefully clean log for me.

    Re run Hitman (just a scan) and attach that log too.

    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.
     
    Kestrel13!, Jun 4, 2015
    #7

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds