Infected with RAT/Trojan/whatever

Vagrantone · Sep 19, 2011

Hey all,

I've been battling this infection over the past few days. It seems to be redirecting my web traffic, google searches, has spread thought my LAN (and beyond to my logmein computers), and even seems to have access to my iPhone and iPad. I'm baffled to the point that I don't even want to connect my modem to upload logs because this has probably been recording audio (covered the camera) and don't want the logs produced while offline sent. I've reformatted, raan the read me (which I think downloads were redirected) combo fix does seem to run from dropping the notepad exe and the combos fix root folder has a 3XE file named cf26813 and an en-us folder.

Any ideas? Am i being overly paranoid or does this sound reasonable?

TimW · Sep 19, 2011

Please follow these instructions:
READ & RUN ME FIRST. Malware Removal Guide

If you have already done this, please attach the logs to your next reply.

Vagrantone · Sep 21, 2011

Here are logs from one of my computers. Please let me know what you think.

Thanks

TimW · Sep 22, 2011

I am not finding any malware in your logs. Tell me exactly what issues you are having with this computer.

( If you want to check another computer, please start a new thread for that one. )

Log in or Sign up

Infected with RAT/Trojan/whatever

Vagrantone Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Vagrantone Private E-2

Attached Files:

SASlog.txt

MBRCheck_09.21.11_20.00.38.txt

ComboFix.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Log in or Sign up

Infected with RAT/Trojan/whatever

Vagrantone Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Vagrantone Private E-2

Attached Files:

SASlog.txt

MBRCheck_09.21.11_20.00.38.txt

ComboFix.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches