WiredWX Christian Hobby Weather Tools
Would you like to react to this message? Create an account in a few clicks or log in to continue.

WiredWX Christian Hobby Weather ToolsLog in

 


descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
# AdwCleaner v2.306 - Logfile created 07/21/2013 at 20:40:46
# Updated 19/07/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Boyd - BOYD-PC
# Boot Mode : Normal
# Running from : C:\Users\Boyd\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\END
File Deleted : C:\Users\Boyd\AppData\Roaming\Mozilla\Firefox\Profiles\6zgcfiat.default\searchplugins\Conduit.xml
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\TornTV.com
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Users\Boyd\AppData\Local\Conduit
Folder Deleted : C:\Users\Boyd\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\Boyd\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Boyd\AppData\Local\Temp\CT3289847
Folder Deleted : C:\Users\Boyd\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Boyd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Users\Boyd\AppData\Roaming\Mozilla\Firefox\Profiles\6zgcfiat.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}
Folder Deleted : C:\Users\Boyd\AppData\Roaming\Mozilla\Firefox\Profiles\6zgcfiat.default\jetpack

***** [Registry] *****

Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3290229
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstallerStub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstallerStub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16635

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&CUI=UN36034886262435820&UM=2&ctid=CT3290229 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Users\Boyd\AppData\Roaming\Mozilla\Firefox\Profiles\6zgcfiat.default\prefs.js

C:\Users\Boyd\AppData\Roaming\Mozilla\Firefox\Profiles\6zgcfiat.default\user.js ... Deleted !

Deleted : user_pref("CT3289847.FF19Solved", "true");
Deleted : user_pref("CT3289847.UserID", "UN17700663809544121");
Deleted : user_pref("CT3289847.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3289847.installDate", "6/4/2013 20:08:06");
Deleted : user_pref("CT3289847.installerVersion", "1.3.7.3");
Deleted : user_pref("CT3289847.keyword", "true");
Deleted : user_pref("CT3289847.smartbar.homepage", "true");
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Deleted : user_pref("browser.search.defaultthis.engineName", "WhiteSmoke New Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289847&CUI[...]
Deleted : user_pref("browser.search.selectedEngine", "WhiteSmoke New Customized Web Search");
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289847&SearchSource=2&CU[...]
Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289847&CUI=UN177006638[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.originalHomepage", "about:home");
Deleted : user_pref("smartbar.originalSearchAddressUrl", "");
Deleted : user_pref("smartbar.originalSearchEngine", "");

*************************

AdwCleaner[S1].txt - [5070 octets] - [21/07/2013 20:40:46]

########## EOF - C:\AdwCleaner[S1].txt - [5130 octets] ##########

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
thats the only log file i could find, Adware Cleaner [SI]

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the i think my e-mail account is hacked--help - Page 1 EsetOnline button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

  • Click on i think my e-mail account is hacked--help - Page 1 EsetSmartInstall to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the i think my e-mail account is hacked--help - Page 1 EsetSmartInstallDesktopIcon-1 icon on your desktop.

•Check i think my e-mail account is hacked--help - Page 1 EsetAcceptTerms
•Click the i think my e-mail account is hacked--help - Page 1 EsetStart button.
•Accept any security warnings from your browser.

  • Leave the check mark next to Remove found threats.

•Check i think my e-mail account is hacked--help - Page 1 EsetScanArchives
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push i think my e-mail account is hacked--help - Page 1 EsetListThreats
•Push i think my e-mail account is hacked--help - Page 1 EsetExport, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the i think my e-mail account is hacked--help - Page 1 EsetBack button.
•Push i think my e-mail account is hacked--help - Page 1 EsetFinish
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
C:\$Recycle.Bin\S-1-5-21-776468156-1697017053-570795564-1000\$RJ1H3MX.exe Win32/Adware.1ClickDownload.W application cleaned by deleting - quarantined
C:\Atemega for Dish\wicked loader 5\WickedAtmegaLoaderV5.0.rar a variant of Win32/Packed.MultiPacked.K trojan deleted - quarantined
C:\Atemega for Dish\wicked loader 5\Wicked 3m V5.0\Wicked_Atmega_Loader_v5.1a.zip a variant of Win32/Packed.MultiPacked.K trojan deleted - quarantined
C:\Users\Boyd\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1P1ILTGR\yontoosetup[1].exe multiple threats cleaned by deleting - quarantined
C:\Users\Boyd\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\216bd74a-2deebf09 Java/Exploit.Agent.NEF trojan cleaned by deleting - quarantined
C:\Users\Boyd\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\b405839-15719d0b Java/Agent.FI trojan cleaned by deleting - quarantined

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
Your computer is clean. E-mail hackers don't infect your computer. They work at the site where you have your e-mail and hack your password.

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
thanks for the help Dave

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
You're welcome. I will lock this thread. If you need it re-opened, please send me a pm.

descriptioni think my e-mail account is hacked--help - Page 1 EmptyRe: i think my e-mail account is hacked--help

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum