Log In

Your email is not your username

Register

If you were a member of the old Bodybuilding.com forums and would like to reuse your previous username, you can request it below. We use your email only for registration and do not store it. For more information, please see our Privacy Policy.

Confirm your email

A registration code was sent to your email. Enter it here.

Welcome

You have successfully setup your account.

Sign in

Quick Navigation Bottom Misc
Forum
ยป Brahs...I think I may have a remote hacker accessing my laptop..(REPS!)
  1. Results 61 to 90 of 120
  2. First
  3. 1
  4. 2
  5. 3
  6. 4
  7. Last
post 1655894163 02-09-2022, 01:05 PM
-
#61
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By MyBaddBrah
The real question is..why do you have all these malicious files if you WIPED the system? You did something to get them on there. Did you FORMAT ALL the drives?

Did you download a bad copy of Windows 11?


https://www.pcmag.com/news/hacker-ci...tYMnYQVXfi679I
If it is in my router then it can keep infected my laptop since it is connected
(these are my opinions i am not a licensed broker by trade)
post 1655894183 02-09-2022, 01:06 PM
-
#62
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By MyBaddBrah
The real question is..why do you have all these malicious files if you WIPED the system? You did something to get them on there. Did you FORMAT ALL the drives?

Did you download a bad copy of Windows 11?



https://www.pcmag.com/news/hacker-ci...tYMnYQVXfi679I
he either ran a malicous backup(didnt do a good fresh) or his phone most likely reinfected the pc or it is really a rootkit. or what you suggest The trojan re-infected his fresh instal.


OP: Do you have A HP,DELL laptop? where there is the factory made fresh install of windows?

There are malware which infect the factory fresh install of those.
post 1655894293 02-09-2022, 01:07 PM
-
#63
  1. MyBaddBrah
  2. u wot m8
  1. MyBaddBrah
  2. u wot m8
  3. Join Date: Apr 2013
  4. Posts: 19,318
  5. Rep Power: 61930
Originally Posted By olemo
There are rootkits in the wild nowadays. they been popping up since 2017.

Although most likely OP just has malware.
Most rootkits get WIPED with a PROPER reinstall. It's extremely unlikely someone put the effort in, or that there was enough holes in his security to infect his FIRMWARE or HARDWARE.
*Hole is Life Crew*
*Meditation Crew*
post 1655894463 02-09-2022, 01:10 PM
-
#64
  1. MyBaddBrah
  2. u wot m8
  1. MyBaddBrah
  2. u wot m8
  3. Join Date: Apr 2013
  4. Posts: 19,318
  5. Rep Power: 61930
Originally Posted By VegasLifter26
If it is in my router then it can keep infected my laptop since it is connected
1. Why would a hacker want to infect YOUR router?

2. Does it have enough holes that it would hacked? If it's from T-Mobile, they're UPDATING their chit. They don't want to be held liable.
*Hole is Life Crew*
*Meditation Crew*
post 1655894523 02-09-2022, 01:11 PM
-
#65
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By MyBaddBrah
Most rootkits get WIPED with a PROPER reinstall. It's extremely unlikely someone put the effort in, or that there was enough holes in his security to infect his FIRMWARE or HARDWARE.
Happend to me once, my motherboard was infected. it is bascily the point of a Rootkit to re-infect the person after a fresh install.

they also tend to be in the BIOS.
post 1655894803 02-09-2022, 01:14 PM
-
#66
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
If it is in my router then it can keep infected my laptop since it is connected
How did you do your Fresh install OP? Did you use your factory made settings of a OEM Factory fresh windows made by the producer( Hp,Dell)
or did you run a fresh install through USB?

If the first, that is most likely the reason of your re-infection which is caused by malware.

Anyways keep running the hitman pro for now, Run the anti rootkits and the CAT tool, ADW cleaner afterwards
post 1655895083 02-09-2022, 01:19 PM
-
#67
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Brahs, when I restarted my PC the f8 button actually worked and allowed me to restart in safe mode (yesterday it didnt) and also on the login screen it shows the time and i have to swipe up to log in, whereas before it didnt do that
(these are my opinions i am not a licensed broker by trade)
post 1655895243 02-09-2022, 01:21 PM
-
#68
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
How did you do your Fresh install OP? Did you use your factory made settings of a OEM Factory fresh windows made by the producer( Hp,Dell)
or did you run a fresh install through USB?

If the first, that is most likely the reason of your re-infection which is caused by malware.

Anyways keep running the hitman pro for now, Run the anti rootkits and the CAT tool, ADW cleaner afterwards
I downloaded windows 11 to a USB drive from this laptop on a different network (mcdonalds) and reinstalled it and only used 1 partition. I have an SSD and 1TB HHD but now im only using the SSD.. I also did a clean wipe on all the drives using the command prompt
(these are my opinions i am not a licensed broker by trade)
post 1655895393 02-09-2022, 01:23 PM
-
#69
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
I downloaded windows 11 to a USB drive from this laptop on a different network (mcdonalds) and reinstalled it and only used 1 partition. I have an SSD and 1TB HHD but now im only using the SSD.. I also did a clean wipe on all the drives using the command prompt
There Could been a usb infection. can't be outruled. Since you're saying you have a feeling your phone is infected aswell and it has been connected.

However, i would just keep going, if all the tools don't solve it, try A fresh install (with A NEW USB) from a clean laptop, run the tools.( see if they catch anything) and check if you're still infected by then.

you've already deleted one trojan. did you catch anything else?
post 1655895513 02-09-2022, 01:25 PM
-
#70
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
There Could been a usb infection. can't be outruled. Since you're saying you have a feeling your phone is infected aswell and it has been connected.

However, i would just keep going, if all the tools don't solve it, try A fresh install from a clean laptop, run the tools.( see if they catch anything) and check if you're still infected by then.
do you see the photo in page 1 with that black face on the left side of my google search? It doesnt appear anymore on my phone when i search..it must have meant someone was on the background

is there a way to scan my iphone 7 for infections? I already did a clean install and I am not connected to this network Im using cellular data
(these are my opinions i am not a licensed broker by trade)
post 1655895673 02-09-2022, 01:28 PM
-
#71
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
do you see the photo in page 1 with that black face on the left side of my google search? It doesnt appear anymore

is there a way to scan my iphone 7 for infections? I already did a clean install and I am not connected to this network Im using cellular data
oh my bad, overlooked the fact you have an iphone.

it is really hard to catch an virus on a iphone, i doubt you do have one. Well not really since they are not .EXE files or an iphone.

considering you an iphone, i wouldn't be too worried if you already did a clean install, i would proceed with getting your laptop safe.
post 1655895773 02-09-2022, 01:29 PM
-
#72
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
oh my bad, overlooked the fact you have an iphone.

it is really hard to catch an virus on a iphone, i doubt you do have one
yea im playing around with my laptop. Event the startup app windows looks different. Before I couldnt stop spotify from opening on startup now I can..should I change my pin ? Also how can I set up fingerprint sign on when hello face folder has been removed from system32 if you dont mind me asking...I have a fingerprint reader but in the setting for windows hello it says unavailable
(these are my opinions i am not a licensed broker by trade)
post 1655895903 02-09-2022, 01:31 PM
-
#73
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
yea im playing around with my laptop. Event the startup app windows looks different. Before I couldnt stop spotify from opening on startup now I can..should I change my pin ? Also how can I set up fingerprint sign on when hello face folder has been removed from system32 if you dont mind me asking...I have a fingerprint reader but in the setting for windows hello it says unavailable
Results of hitman?
Did you run the rootkit tools?

http://www.gmer.net/?m=0
https://www.sophos.com/en-us/product...s-anti-rootkit
post 1655896033 02-09-2022, 01:33 PM
-
#74
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
the gmer.net site says "not secure" to the left of the url..is it legit?

sophos, rogue, kaspersky all clean now...did u give me the rootkit version or regular?

there were lik 6 partitians
(these are my opinions i am not a licensed broker by trade)
post 1655896153 02-09-2022, 01:35 PM
-
#75
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
the gmer.net site says "not secure" to the left of the url..is it legit?

sophos, rogue, kaspersky all clean now
YEs gmer is legit, it even changes .exe names when you DL everytime So malware wont auto remove it.

Dont be scared if you see a random .exe name for it.

not sure if it supports WINDOWS 11 though.

it is extremly well written but older rootkit removal.

Edit: when you did a fresh wipe, did you have single drive(SSD HDD) in it? was it completly wiped?

So you didn't just wipe one of them, and proceed the fresh instal?
post 1655896313 02-09-2022, 01:38 PM
-
#76
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
YEs gmer is legit, it even changes .exe names when you DL everytime So malware wont auto remove it.

Dont be scared if you see a random .exe name for it.

not sure if it supports WINDOWS 11 though.

it is extremly well written but older rootkit removal.

Edit: when you did a fresh wipe, did you have single drive(SSD HDD) in it? was it completly wiped?

So you didn't just wipe one of them, and proceed the fresh instal?
gmer doesnt launch from zip, now trying the download button
(these are my opinions i am not a licensed broker by trade)
post 1655896483 02-09-2022, 01:41 PM
-
#77
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
gmer

(these are my opinions i am not a licensed broker by trade)
post 1655896503 02-09-2022, 01:42 PM
-
#78
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
gmer doesnt launch from zip, now trying the download button
it sometimes auto closes, just run it twice. then u should be good to go even if you dont see results.

RUN quick scan first, then C and D included

Edit:

Hitmanpro and adw cleaner, clean too? ( those are vital)
post 1655896833 02-09-2022, 01:47 PM
-
#79
  1. jimbob007
  2. Keep The Red Flag Flying
  1. jimbob007
  2. Keep The Red Flag Flying
  3. Join Date: Mar 2007
  4. Location: From Anywhere He Darn Well Pleases, United Kingdom (Great Britain)
  5. Posts: 99,476
  6. Rep Power: 275015
Use Keyscrambler.
post 1655897033 02-09-2022, 01:49 PM
-
#80
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
it sometimes auto closes, just run it twice. then u should be good to go even if you dont see results.

RUN quick scan first, then C and D included

Edit:

Hitmanpro and adw cleaner, clean too? ( those are vital)
Yes I ran hitmanpro just the regular version tho not sure if theres a rootkit version. Gonna do adw cleaner now

Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
(these are my opinions i am not a licensed broker by trade)
post 1655897133 02-09-2022, 01:51 PM
-
#81
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
Yes I ran hitmanpro just the regular version tho not sure if theres a rootkit version. Gonna do adw cleaner now

Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
U already done the rootkit version it is sophamonos.

when you run ADW CLEANER, after running it , turn this on optionshttps://ibb.co/9cLxvqg
then do standard repair.
post 1655897263 02-09-2022, 01:53 PM
-
#82
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
Yes I ran hitmanpro just the regular version tho not sure if theres a rootkit version. Gonna do adw cleaner now

Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
yes. run it twice. if anything pops up it will let you know.

If nothing else pop ups, i think you should be fine.

Considering you removed one trojan, And some spyware.

Run the spyware progam also if you haven't already.

you could make a forum post on here.

https://www.bleepingcomputer.com/for...-removal-help/

the helpers will ask you to do a run of their progam so they can see any werid processes, that i don't have an eye for.
post 1655898213 02-09-2022, 02:09 PM
-
#83
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
yes. run it twice. if anything pops up it will let you know.

If nothing else pop ups, i think you should be fine.

Considering you removed one trojan, And some spyware.

Run the spyware progam also if you haven't already.

you could make a forum post on here.

https://www.bleepingcomputer.com/for...-removal-help/

the helpers will ask you to do a run of their progam so they can see any werid processes, that i don't have an eye for.
thanks brah. running now. Ill try to make a screen cap of me downloading a file so you can see chrome flash up at the start menu then disappear real quick..also just downloaded the keylogger software
(these are my opinions i am not a licensed broker by trade)
post 1655898643 02-09-2022, 02:14 PM
-
#84
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
thanks brah. running now. Ill try to make a screen cap of me downloading a file so you can see chrome flash up at the start menu then disappear real quick..also just downloaded the keylogger software
Farbar Recovery Scan Tool (FRST)

--------------------
Download Farbar Recover Scan Tool for either 32 bit or 64 bit systems and save it to your Desktop. <<< Important
Right click on the icon and select Run as administrator
Note: If you receive any warning about the download it is a false positive and you can ignore it
Click Yes to the disclaimer
Click Scan and allow the program to run
Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen
2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows
================================================== =

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
FRST.txt
Addition.txt

https://www.bleepingcomputer.com/dow...an-tool/dl/82/(64bit version tool)

Post the results on the forum i send u, Just to be sure let them check. so u can sleep better at night lol

If everything is fine, i would press the button on your router for a hard Reset( Not factory reset button) you will need a needle most often to press this buton on your router.

then you could do a fresh wipe on your iphone and i wouldn't have any worries.
post 1655898983 02-09-2022, 02:20 PM
-
#85
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Ha, what do you ya..the keyscrambler just stopped working. Ill have to keep an eye on it to see if it was an accident on my end or if it was on purpose
(these are my opinions i am not a licensed broker by trade)
post 1655899133 02-09-2022, 02:21 PM
-
#86
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
Ha, what do you ya..the keyscrambler just stopped working. Ill have to keep an eye on it to see if it was an accident on my end or if it was on purpose
Thats worrysome. im gonna run it aswell see if i experience any problems.
post 1655899253 02-09-2022, 02:22 PM
-
#87
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo
Farbar Recovery Scan Tool (FRST)

--------------------
Download Farbar Recover Scan Tool for either 32 bit or 64 bit systems and save it to your Desktop. <<< Important
Right click on the icon and select Run as administrator
Note: If you receive any warning about the download it is a false positive and you can ignore it
Click Yes to the disclaimer
Click Scan and allow the program to run
Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen
2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows
================================================== =

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
FRST.txt
Addition.txt

https://www.bleepingcomputer.com/dow...an-tool/dl/82/(64bit version tool)

Post the results on the forum i send u, Just to be sure let them check. so u can sleep better at night lol

If everything is fine, i would press the button on your router for a hard Reset( Not factory reset button) you will need a needle most often to press this buton on your router.

then you could do a fresh wipe on your iphone and i wouldn't have any worries.
Microsoft protected your PC

Microsoft Defense Smartscreen prevented an unrecognized appp from running

Only 1 option (DOnt Run)
(these are my opinions i am not a licensed broker by trade)
post 1655899313 02-09-2022, 02:23 PM
-
#88
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26
Microsoft protected your PC

Microsoft Defense Smartscreen prevented an unrecognized appp from running

Only 1 option (DOnt Run)
Run the progam with admin rights.

some ANTI viruses can Block certain progams. i think thats most likely what is happening right now.

hold on.
post 1655899333 02-09-2022, 02:24 PM
-
#89
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
I did manage to run Farber

(these are my opinions i am not a licensed broker by trade)
post 1655899433 02-09-2022, 02:25 PM
-
#90
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
ok you have to to turn it off.

https://ibb.co/fQq2wsj

turn it off for the download and running

it is at your windows security settings.
Quick Navigation Top Misc
Bookmarks
Digg.com
Digg
del.icio.us
del.icio.us
Stumbleupon.com
StumbleUpon
Google.com
Google
Facebook.com
Facebook
Posting Permissions
  1. You may not post new threads
  2. You may not post replies
  3. You may not post attachments
  4. You may not edit your posts