messenger hacking and such

Discussion in 'Malware Help (A Specialist Will Reply)' started by amandakp23, Dec 12, 2005.

  1. amandakp23

    amandakp23 Private E-2

    I have found a folder on my computer that is used to hack in and read the conversations on msn messenger. I know who is doing it, and he had it hidden under a folder from the Game TA Kingdoms and has it under saved games and his name, etc. I cant find the actual file on my computer, and deleted those folders does no good. I have reset my passwords and removed messenger and re-downloaded it. Here is my hijackthis scan. Please help!

    Edit by chaslang: Cleaning steps not followed. Incomplete, inline log removed
     
    Last edited by a moderator: Dec 12, 2005
    amandakp23, Dec 12, 2005
    #1
  2. amandakp23

    amandakp23 Private E-2

    This is also the message log track I found but cannot get rid of it



    <?xml version="1.0" ?>
    - <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
    - <!-- localized strings
    -->
    <xsl:variable name="ColumnHeader_Date">Date</xsl:variable>
    <xsl:variable name="ColumnHeader_Time">Time</xsl:variable>
    <xsl:variable name="ColumnHeader_From">From</xsl:variable>
    <xsl:variable name="ColumnHeader_To">To</xsl:variable>
    <xsl:variable name="ColumnHeader_Message">Message</xsl:variable>
    - <!-- variables
    -->
    <xsl:variable name="Debug">0</xsl:variable>
    <xsl:variable name="TableStyle">font-family:Verdana; font-size:67%; text-align:left; vertical-align:top; table-layout:fixed</xsl:variable>
    <xsl:variable name="GutterStyle">width:2ex</xsl:variable>
    <xsl:variable name="HeaderStyle">border-bottom:1 solid black</xsl:variable>
    <xsl:variable name="UseZebraStripe">1</xsl:variable>
    <xsl:variable name="ZebraStripeStyle">background-color:#e0edff</xsl:variable>
    <xsl:variable name="MostRecentSessionFirst">0</xsl:variable>
    - <xsl:template match="Log">
    - <html dir="ltr">
    - <head>
    - <title>
    Message Log for
    <xsl:value-of select="@LogonName" />
    <xsl:if test="$Debug = 1">(Debug)</xsl:if>
    </title>
    - <xsl:if test="$Debug = 1">
    <span style="font-family:trebuchet ms; font-size:120%">Debug Version</span>
    <hr />
    </xsl:if>
    </head>
    - <body style="margin:0">
    - <table id="BodyTable" style="{$TableStyle}" cellspacing="0">
    - <xsl:if test="$Debug = 1">
    <col style="vertical-align:top; width:5ex;" />
    <col style="{$GutterStyle}" />
    </xsl:if>
    <col style="width:16ex;" />
    <col style="{$GutterStyle}" />
    <col style="width:16ex;" />
    <col style="{$GutterStyle}" />
    <col style="width:21ex;" />
    <col style="{$GutterStyle}" />
    <col style="width:21ex;" />
    <col style="{$GutterStyle}" />
    <col style="width:70ex;" />
    - <thead>
    - <tr>
    - <xsl:if test="$Debug = 1">
    <th style="{$HeaderStyle}">SID</th>
    <th />
    </xsl:if>
    - <th style="{$HeaderStyle}">
    <xsl:value-of select="$ColumnHeader_Date" />
    </th>
    <th />
    - <th style="{$HeaderStyle}">
    <xsl:value-of select="$ColumnHeader_Time" />
    </th>
    <th />
    - <th style="{$HeaderStyle}">
    <xsl:value-of select="$ColumnHeader_From" />
    </th>
    <th />
    - <th style="{$HeaderStyle}">
    <xsl:value-of select="$ColumnHeader_To" />
    </th>
    <th />
    - <th style="{$HeaderStyle}">
    <xsl:value-of select="$ColumnHeader_Message" />
    </th>
    </tr>
    </thead>
    - <tbody style="vertical-align:top">
    - <xsl:choose>
    - <!-- newest session first
    -->
    - <xsl:when test="$MostRecentSessionFirst = 1">
    - <xsl:apply-templates>
    <xsl:sort select="@SessionID" order="descending" data-type="number" />
    <xsl:sort select="@DateTime" order="ascending" />
    </xsl:apply-templates>
    </xsl:when>
    - <!-- oldest session first
    -->
    - <xsl:eek:therwise>
    - <xsl:apply-templates>
    <xsl:sort select="@SessionID" order="ascending" data-type="number" />
    <xsl:sort select="@DateTime" order="ascending" />
    </xsl:apply-templates>
    </xsl:eek:therwise>
    </xsl:choose>
    </tbody>
    </table>
    </body>
    </html>
    </xsl:template>
    - <xsl:template match="Message">
    - <tr>
    <xsl:call-template name="CommonMessageProcessing" />
    - <td>
    <xsl:apply-templates select="From/User" />
    </td>
    <td />
    - <td>
    <xsl:apply-templates select="To/User" />
    </td>
    <td />
    - <td>
    - <span>
    - <xsl:attribute name="style">
    <xsl:value-of select="Text/@Style" />
    </xsl:attribute>
    <xsl:value-of select="Text" />
    </span>
    </td>
    </tr>
    </xsl:template>
    - <xsl:template match="Invitation|InvitationResponse|Join|Leave">
    - <tr>
    <xsl:call-template name="CommonMessageProcessing" />
    <td />
    - <!-- From
    -->
    <td />
    <td />
    - <!-- To
    -->
    <td />
    - <td>
    - <span>
    - <xsl:attribute name="style">
    <xsl:value-of select="Text/@Style" />
    </xsl:attribute>
    <xsl:value-of select="Text" />
    </span>
    </td>
    </tr>
    </xsl:template>
    - <xsl:template match="User">
    - <!-- add a comma before all but the first user
    -->
    <xsl:if test="position() != 1">,</xsl:if>
    <xsl:value-of select="@FriendlyName" />
    </xsl:template>
    - <xsl:template name="CommonMessageProcessing">
    - <!-- zebra-stripe the sessions
    -->
    - <xsl:if test="$UseZebraStripe = 1">
    - <xsl:if test="(@SessionID mod 2) = 1">
    - <xsl:attribute name="style">
    <xsl:value-of select="$ZebraStripeStyle" />
    </xsl:attribute>
    </xsl:if>
    </xsl:if>
    - <xsl:if test="$Debug = 1">
    - <td>
    <xsl:value-of select="@SessionID" />
    </td>
    <td />
    </xsl:if>
    - <td>
    <xsl:value-of select="@Date" />
    </td>
    <td />
    - <td>
    <xsl:value-of select="@Time" />
    </td>
    <td />
    </xsl:template>
    </xsl:stylesheet>
     
    Last edited by a moderator: Dec 12, 2005
    amandakp23, Dec 12, 2005
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read the sticky threads here and do not post logs inline, especially HijackThis logs. I don't know what you think you found related to MSN Messenger but you have more serious problems. You have a Virtumonde infection. You need to run the steps in the below thread:

    Running Spy Sweeper

    And then after running the above and posting the log from SpySweeper continue onto the below if you still have problems.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     
    chaslang, Dec 12, 2005
    #3

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds