Had to Go to a Restore Point a Week Ago Just to Connect to Internet!

I thought it strange that Comodo firewall was having tons of updates every day, sometimes twice a day, but I figured it was because it was the holidays and the malware monkeys were getting their annual holiday jollies. I also thought it was strange when Panda antivirus kept saying it couldn't start properly on bootup, so I had to start it manually after my computer rebooted. When I couldn't connect to the Internet Friday night, I thought it was because Comcast cut me off because of all the issues I've been having with them understanding that I started a new account when I moved instead of transferring accounts.

We-e-e-e-ell...I was wrong, blind, and stupid. All those things added up to someone breaking into my computer and putting some nasty stuff on it. I know this because there's another network listed in Comodo that's got the same name as mine but with several exclamation points after it. It also has a very different IP address. I also know because when I tried to restart in safe mode, it got stuck booting up for about an hour; and then when it got unstuck, it booted up normally. It's just been doing all sorts of strange stuff like that, including giving me funky version numbers when I update MBAM.

So, I did the routine (I uninstalled and reinstalled MBAM, this time not updating it, in the hopes it would run an untainted scan), and am submitting my scan. Oh, another bad thing I did that probably will affect my results: I noticed that MGTools did some pings; and since I had my modem unplugged, I deleted the MGTools folder, plugged the modem in, and ran MGTools again. It used to be it wouldn't run at all, so I tried uninstalling Panda, and that did the trick.

Thanks for your help, guys. It's acting better, but it was still asking for permission to open that network first thing when I booted up. This time I said no, and at first it said a network had been unplugged (in an attempt to make me panic, I'm sure), but I waited and, sure enough, the real one came up as connected.

Okay, blah, blah, blah. I've attached my logs. I hope they can tell you what all the jerk put on my computer to make it act so weird.

Oh, and I don't know if you remember: RootRepeal always freezes on my computer. I have stopped bothering with it anymore.

 

Wow! Thanks for the prompt reply! Going to work right now. *smoochies*

 

Okay, I ran both. Attached are my logs. Again, I appreciate the speed with which you responded. I wasn't expecting anything so soon, it being the holidays! :wave

 

Things seem to be acting okay...except there's still a card-carrying member of the asholee tribe hooking a network into my computer. His IP address is 192.168.100.10. I just blocked him in Comodo firewall, and I'm hoping that will do the trick. I also switched to using the secure DNS servers Comodo offers, and he hasn't switched those; I found when I went to enter them that he had put in his own server addresses. This guy is GOOD.

Oh, my router still doesn't work...but according to the local Comcast lady, that's because the serial number isn't even registered with Comcast; only the serial number of "the router used in your former apartment," which never existed because I carried this one from the old apartment with my own two hands, is registered, and they have on record that I "never returned the equipment" from that account. Yay.

 

Oh, geez. So, that's why my router hasn't been working? I blocked it?rolleyes
'Cuz my router is still out of commission. Everything else has been working fine. I'll see if this fixes the router problem and get back to you.

Thank you for the info! I wish I'd known this! Oh, I have a tip for you guys about post-Combofix Windows update, but I'll do that later where I think it belongs. Right now, I'm going to see about unblocking my router (I hope)! If that doesn't do the trick, I'll just have to go with Comcast's story and disconnect the wire again. (The name escapes me at present, dammit. I do know it, but my mind is being a brat.)