GeekPolice
Would you like to react to this message? Create an account in a few clicks or log in to continue.

GeekPoliceLog in

 


descriptionViagra email sending to contacts in Yahoo mail EmptyViagra email sending to contacts in Yahoo mail

more_horiz
Help!

Somehow, someone got into my Yahoo account, probably from my iTouch! Mulitple emails went out to nearly everyone in my contact list with a link to Viagra.

I've done the scan and here is my log file. Can anyone tell me what to do from here?

Kindly REMOVE this log file after review to protect any sensitive information.

Thanks
~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Hello.
Can you attach the logs?

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
OTL logfile created on: 9/22/2010 10:17:04 PM - Run 1~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
thank you

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Should I run the Quick Fix in OTL?

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
No, please post both logs for now and I'll review them.

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Thank you. Here are the 2 logs.

~[Filtered]~



~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Filtered, weird.
Can you attach the logs instead?

descriptionViagra email sending to contacts in Yahoo mail Emptylog file 1

more_horiz
~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyLog file 2 (OTL.txt)

more_horiz
I'm attaching log file OTL.txt

descriptionViagra email sending to contacts in Yahoo mail Emptydid you get it?

more_horiz
I hope you get the attachments. I browsed for the files and hit "submit query" but I get an error "uploaded file is not valid"

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Hello.
In that case, can you upload the logs somewhere? like Rapidshare for example.

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Ok here are the files for download. Thank you very much for your help.

~[Filtered]~

http://rapidshare.com/files/421466878/OTL.Txt

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
looks like the first file was filtered. here it is again.

~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
ok, I'll try it with before the .txt spaces, just take the spaces out. let's see if that works

~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
~[Filtered]~
add the http
~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
ok that didn't work either. try rapidshare with the following file name

421466600/Extras and dot txt

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
whew. hopefully you can download the files. thanks again ~[Filtered]~

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
No malicious files were found

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4703

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/27/2010 8:24:43 AM
mbam-log-2010-09-27 (08-24-43).txt

Scan type: Quick scan
Objects scanned: 157856
Time elapsed: 20 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
Hello.

  • Download combofix from here
    Link 1
    Link 2

    1. If you are using Firefox, make sure that your download settings are as follows:

    * Tools->Options->Main tab
    * Set to "Always ask me where to Save the files".

    2. During the download, rename Combofix to Combo-Fix as follows:

    Viagra email sending to contacts in Yahoo mail CF_download_FF

    Viagra email sending to contacts in Yahoo mail CF_download_rename

    3. It is important you rename Combofix during the download, but not after.
    4. Please do not rename Combofix to other names, but only to the one indicated.
    5. Close any open browsers.
    6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

  • We need to disable your local AV (Anti-virus) before running Combofix.
  • See HERE for how to disable your AV.
  • Double click on ComboFix.exe.
  • Follow the prompts. NOTE:
  • ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
    ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.


  • The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.

    Viagra email sending to contacts in Yahoo mail Cf410

  • Allow ComboFix to download the Recovery Console.
  • Accept the End-User License Agreement.
  • The Recovery Console will be installed.
  • You will then get this next prompt that asks if you want to continue the malware scan, select yes

    Viagra email sending to contacts in Yahoo mail Cf510

  • Allow combofix to run
  • Post C:\combofix.txt back here.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

descriptionViagra email sending to contacts in Yahoo mail EmptyRe: Viagra email sending to contacts in Yahoo mail

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum