16 replies to this topic

[arthritis]

recently, i've lost 3 + 2 aged accounts, as their passwords have just been changed suddenly, without any warning.

Is there anyway to find out how my account passwords are being leaked out? cause this is really starting to irritate me.

I've scanned my computer multiple times, and found some funny stuff, and was successfully able to remove them. But everytime i scan, it's always the same stuff coming back. I've no idea whether this comes from the sites i visit (no porn -.- ), or there's a dirty program somewhere in my desktop.

Anyone can help me figure this out?

Another question is, when i scan my computer using Ad-aware, am i able to find out where the detections came from?

Thanks!

Here're some stuff. Is anyone able to spot anything fishy here? =/





N.B my Ad-Aware previous scans indicated that i had Tracking Cookie, MRU Object and Alexa, with 527, 11, and 1 items found respectively.

Edited by arthritis, 21 November 2007 - 06:15 AM.

[Neo]

The easiest way if you're worried is to download HijackThis, then paste or upload the log file here http://hijackthis.de/ and it'll tell you if anything nasty is there.

And don't worry about tracking cookies like that, just empty the cookies every now and then if you don't like them.

[arthritis]

thanks for the speedy reply!

is there any program similar to hijackthis that can scan my computer? cause i've quite a number of programs, and it'll not really be efficient if i were to screen them one by one (in addition to the fact that i've no clue to which one may be malicious)

thanks!

EDIT: Sorry, misread ^.^

Edited by arthritis, 21 November 2007 - 06:28 AM.

[Oaken]

I figured I would do what you suggested Neo/Kai just in case I was in a similar situation to Arthritis.....Anyone know what I can do about these results?

[Bão]

I figured I would do what you suggested Neo/Kai just in case I was in a similar situation to Arthritis.....Anyone know what I can do about these results?

Err, you could fix them.

1. Back up important files and registry
2. Open HiJackThis and scan your computer, do not close the program
3. Copy and paste your log at: http://hijackthis.de/
4. Submit the log and you should come up with your log that's been analyzed
5. Where you see the "x's" is what you may need to fix
6. Go back to HiJackThis and carefully tick the files that was in the log
7. Check over what you ticked making sure you didn't tick something you shouldn't have
8. Click "Fix Selected"
9. Reboot
10. Scan with an adware/spyware program

Most of the problem should be fixed then.

[Oaken]

Err, you could fix them.

1. Back up important files and registry
2. Open HiJackThis and scan your computer, do not close the program
3. Copy and paste your log at: http://hijackthis.de/
4. Submit the log and you should come up with your log that's been analyzed
5. Where you see the "x's" is what you may need to fix
6. Go back to HiJackThis and carefully tick the files that was in the log
7. Check over what you ticked making sure you didn't tick something you shouldn't have
8. Click "Fix Selected"
9. Reboot
10. Scan with an adware/spyware program

Most of the problem should be fixed then.

hehe what I meant to say was 'do they need fixing'?

I'm not sure whether playing around with them would be the right thing to do you see as it says that not everything it picks up is actually harmful.

[arthritis]

Bao, any clue if my problems are the same?


hmm, i've already posted the log on their website, and it shows some stuff like these.

Visitor's assessment Analyzerdetails
O1 - Hosts: 209.190.85.230 maplesea.com

Kind


Must be fixed!
Visitor's assessment Analyzerdetails
O1 - Hosts: 209.190.85.230 mapleglobal.com

Kind


Must be fixed!



and Visitor's assessment Analyzerdetails Unknown
O17 - HKLM\System\CCS\Services\Tcpip\..\{1864C259-2984-4724-BC4B-25B3033B227D}: NameServer = 202.156.1.68,202.156.1.48

Kind


Do you know the IP or Domain '202.156.1.68,202.156.1.48'? If not, fix this entry.


how am i able to fix these? thanks!

[Bão]

hehe what I meant to say was 'do they need fixing'?

I'm not sure whether playing around with them would be the right thing to do you see as it says that not everything it picks up is actually harmful.

Well, the items posted in the image you posted is basically spyware. If you're not sure on what to delete, google each one then fix each item one by one.

Bao, any clue if my problems are the same?

I doubt the MapleGlobal items are doing any harm. Post a full log, I'm not a HiJackThis expert, but I'll see what I can do.

[arthritis]

I've PMed you the log, in case i might post some private stuff here =X

thanks!

[Bão]

I've PMed you the log, in case i might post some private stuff here =X

thanks!

It's been fifteen minutes, where's the PM?

[arthritis]

hmm? i sent it already!

no worries, going to try again.

[moonscorch(thnx nox4 tag)]

you got somthing i forgot what its called but it remains itself and screws u up big time. i had one and tracked it down and deleted it then it came back. had to restore my computer.

[Clapham]

Packet sniff all your neopet programs there might be something in them.

[Sweeney]

you got somthing i forgot what its called but it remains itself and screws u up big time. i had one and tracked it down and deleted it then it came back. had to restore my computer.

Really useful

[Teddy]

This is alarming What programs have you downloaded lately?

[ShadowLink64]

If you want to look for opened ports to possibly find trojans, you could go to http://www.grc.com and use the SheildsUP thing.

Really useful

I've also had a thing (forget what its called) where the thing would screw up my computer and I had to do a restore. Really useful stuff.

[ZERO]

If you want to look for opened ports to possibly find trojans, you could go to http://www.grc.com and use the SheildsUP thing.
I've also had a thing (forget what its called) where the thing would screw up my computer and I had to do a restore. Really useful stuff.

Rootkit?

In that case...Even restoring doesn't work..For me anyway. If it is a rootkit that keeps things coming back, google has a couple good free rootkit removers - just be careful..

I haven't had to deal with any sort of adware/spyware in a long time...Macs pwn.

What kind of AV are you running?