Forum
ยป
Brahs...I think I may have a remote hacker accessing my laptop..(REPS!)
02-09-2022, 01:05 PM
-
#61
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By MyBaddBrah⏩
If it is in my router then it can keep infected my laptop since it is connectedThe real question is..why do you have all these malicious files if you WIPED the system? You did something to get them on there. Did you FORMAT ALL the drives?
Did you download a bad copy of Windows 11?
https://www.pcmag.com/news/hacker-ci...tYMnYQVXfi679I
Did you download a bad copy of Windows 11?
https://www.pcmag.com/news/hacker-ci...tYMnYQVXfi679I
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:06 PM
-
#62
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By MyBaddBrah⏩
he either ran a malicous backup(didnt do a good fresh) or his phone most likely reinfected the pc or it is really a rootkit. or what you suggest The trojan re-infected his fresh instal.The real question is..why do you have all these malicious files if you WIPED the system? You did something to get them on there. Did you FORMAT ALL the drives?
Did you download a bad copy of Windows 11?
https://www.pcmag.com/news/hacker-ci...tYMnYQVXfi679I
Did you download a bad copy of Windows 11?
https://www.pcmag.com/news/hacker-ci...tYMnYQVXfi679I
OP: Do you have A HP,DELL laptop? where there is the factory made fresh install of windows?
There are malware which infect the factory fresh install of those.
02-09-2022, 01:07 PM
-
#63
- MyBaddBrah
- u wot m8
-
- MyBaddBrah
- u wot m8
- Join Date: Apr 2013
- Posts: 19,318
- Rep Power: 61930
-
-
Originally Posted By olemo⏩
Most rootkits get WIPED with a PROPER reinstall. It's extremely unlikely someone put the effort in, or that there was enough holes in his security to infect his FIRMWARE or HARDWARE.There are rootkits in the wild nowadays. they been popping up since 2017.
Although most likely OP just has malware.
Although most likely OP just has malware.
*Hole is Life Crew*
*Meditation Crew*
02-09-2022, 01:10 PM
-
#64
- MyBaddBrah
- u wot m8
-
- MyBaddBrah
- u wot m8
- Join Date: Apr 2013
- Posts: 19,318
- Rep Power: 61930
-
-
Originally Posted By VegasLifter26⏩
1. Why would a hacker want to infect YOUR router?If it is in my router then it can keep infected my laptop since it is connected
2. Does it have enough holes that it would hacked? If it's from T-Mobile, they're UPDATING their chit. They don't want to be held liable.
*Hole is Life Crew*
*Meditation Crew*
02-09-2022, 01:11 PM
-
#65
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By MyBaddBrah⏩
Happend to me once, my motherboard was infected. it is bascily the point of a Rootkit to re-infect the person after a fresh install.Most rootkits get WIPED with a PROPER reinstall. It's extremely unlikely someone put the effort in, or that there was enough holes in his security to infect his FIRMWARE or HARDWARE.
they also tend to be in the BIOS.
02-09-2022, 01:14 PM
-
#66
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
How did you do your Fresh install OP? Did you use your factory made settings of a OEM Factory fresh windows made by the producer( Hp,Dell)If it is in my router then it can keep infected my laptop since it is connected
or did you run a fresh install through USB?
If the first, that is most likely the reason of your re-infection which is caused by malware.
Anyways keep running the hitman pro for now, Run the anti rootkits and the CAT tool, ADW cleaner afterwards
02-09-2022, 01:19 PM
-
#67
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Brahs, when I restarted my PC the f8 button actually worked and allowed me to restart in safe mode (yesterday it didnt) and also on the login screen it shows the time and i have to swipe up to log in, whereas before it didnt do that
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:21 PM
-
#68
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
I downloaded windows 11 to a USB drive from this laptop on a different network (mcdonalds) and reinstalled it and only used 1 partition. I have an SSD and 1TB HHD but now im only using the SSD.. I also did a clean wipe on all the drives using the command promptHow did you do your Fresh install OP? Did you use your factory made settings of a OEM Factory fresh windows made by the producer( Hp,Dell)
or did you run a fresh install through USB?
If the first, that is most likely the reason of your re-infection which is caused by malware.
Anyways keep running the hitman pro for now, Run the anti rootkits and the CAT tool, ADW cleaner afterwards
or did you run a fresh install through USB?
If the first, that is most likely the reason of your re-infection which is caused by malware.
Anyways keep running the hitman pro for now, Run the anti rootkits and the CAT tool, ADW cleaner afterwards
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:23 PM
-
#69
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
There Could been a usb infection. can't be outruled. Since you're saying you have a feeling your phone is infected aswell and it has been connected.I downloaded windows 11 to a USB drive from this laptop on a different network (mcdonalds) and reinstalled it and only used 1 partition. I have an SSD and 1TB HHD but now im only using the SSD.. I also did a clean wipe on all the drives using the command prompt
However, i would just keep going, if all the tools don't solve it, try A fresh install (with A NEW USB) from a clean laptop, run the tools.( see if they catch anything) and check if you're still infected by then.
you've already deleted one trojan. did you catch anything else?
02-09-2022, 01:25 PM
-
#70
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
do you see the photo in page 1 with that black face on the left side of my google search? It doesnt appear anymore on my phone when i search..it must have meant someone was on the backgroundThere Could been a usb infection. can't be outruled. Since you're saying you have a feeling your phone is infected aswell and it has been connected.
However, i would just keep going, if all the tools don't solve it, try A fresh install from a clean laptop, run the tools.( see if they catch anything) and check if you're still infected by then.
However, i would just keep going, if all the tools don't solve it, try A fresh install from a clean laptop, run the tools.( see if they catch anything) and check if you're still infected by then.
is there a way to scan my iphone 7 for infections? I already did a clean install and I am not connected to this network Im using cellular data
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:28 PM
-
#71
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
oh my bad, overlooked the fact you have an iphone.do you see the photo in page 1 with that black face on the left side of my google search? It doesnt appear anymore
is there a way to scan my iphone 7 for infections? I already did a clean install and I am not connected to this network Im using cellular data
is there a way to scan my iphone 7 for infections? I already did a clean install and I am not connected to this network Im using cellular data
it is really hard to catch an virus on a iphone, i doubt you do have one. Well not really since they are not .EXE files or an iphone.
considering you an iphone, i wouldn't be too worried if you already did a clean install, i would proceed with getting your laptop safe.
02-09-2022, 01:29 PM
-
#72
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
yea im playing around with my laptop. Event the startup app windows looks different. Before I couldnt stop spotify from opening on startup now I can..should I change my pin ? Also how can I set up fingerprint sign on when hello face folder has been removed from system32 if you dont mind me asking...I have a fingerprint reader but in the setting for windows hello it says unavailableoh my bad, overlooked the fact you have an iphone.
it is really hard to catch an virus on a iphone, i doubt you do have one
it is really hard to catch an virus on a iphone, i doubt you do have one
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:31 PM
-
#73
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
Results of hitman?yea im playing around with my laptop. Event the startup app windows looks different. Before I couldnt stop spotify from opening on startup now I can..should I change my pin ? Also how can I set up fingerprint sign on when hello face folder has been removed from system32 if you dont mind me asking...I have a fingerprint reader but in the setting for windows hello it says unavailable
Did you run the rootkit tools?
http://www.gmer.net/?m=0
https://www.sophos.com/en-us/product...s-anti-rootkit
02-09-2022, 01:33 PM
-
#74
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
the gmer.net site says "not secure" to the left of the url..is it legit?Results of hitman?
Did you run the rootkit tools?
http://www.gmer.net/?m=0
https://www.sophos.com/en-us/product...s-anti-rootkit
Did you run the rootkit tools?
http://www.gmer.net/?m=0
https://www.sophos.com/en-us/product...s-anti-rootkit
sophos, rogue, kaspersky all clean now...did u give me the rootkit version or regular?
there were lik 6 partitians
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:35 PM
-
#75
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
YEs gmer is legit, it even changes .exe names when you DL everytime So malware wont auto remove it.the gmer.net site says "not secure" to the left of the url..is it legit?
sophos, rogue, kaspersky all clean now
sophos, rogue, kaspersky all clean now
Dont be scared if you see a random .exe name for it.
not sure if it supports WINDOWS 11 though.
it is extremly well written but older rootkit removal.
Edit: when you did a fresh wipe, did you have single drive(SSD HDD) in it? was it completly wiped?
So you didn't just wipe one of them, and proceed the fresh instal?
02-09-2022, 01:38 PM
-
#76
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
gmer doesnt launch from zip, now trying the download buttonYEs gmer is legit, it even changes .exe names when you DL everytime So malware wont auto remove it.
Dont be scared if you see a random .exe name for it.
not sure if it supports WINDOWS 11 though.
it is extremly well written but older rootkit removal.
Edit: when you did a fresh wipe, did you have single drive(SSD HDD) in it? was it completly wiped?
So you didn't just wipe one of them, and proceed the fresh instal?
Dont be scared if you see a random .exe name for it.
not sure if it supports WINDOWS 11 though.
it is extremly well written but older rootkit removal.
Edit: when you did a fresh wipe, did you have single drive(SSD HDD) in it? was it completly wiped?
So you didn't just wipe one of them, and proceed the fresh instal?
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:41 PM
-
#77
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
02-09-2022, 01:42 PM
-
#78
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
it sometimes auto closes, just run it twice. then u should be good to go even if you dont see results.gmer doesnt launch from zip, now trying the download button
RUN quick scan first, then C and D included
Edit:
Hitmanpro and adw cleaner, clean too? ( those are vital)
02-09-2022, 01:47 PM
-
#79
02-09-2022, 01:49 PM
-
#80
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
Yes I ran hitmanpro just the regular version tho not sure if theres a rootkit version. Gonna do adw cleaner nowit sometimes auto closes, just run it twice. then u should be good to go even if you dont see results.
RUN quick scan first, then C and D included
Edit:
Hitmanpro and adw cleaner, clean too? ( those are vital)
RUN quick scan first, then C and D included
Edit:
Hitmanpro and adw cleaner, clean too? ( those are vital)
Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 01:51 PM
-
#81
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
U already done the rootkit version it is sophamonos.Yes I ran hitmanpro just the regular version tho not sure if theres a rootkit version. Gonna do adw cleaner now
Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
when you run ADW CLEANER, after running it , turn this on optionshttps://ibb.co/9cLxvqg
then do standard repair.
02-09-2022, 01:53 PM
-
#82
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
yes. run it twice. if anything pops up it will let you know.Yes I ran hitmanpro just the regular version tho not sure if theres a rootkit version. Gonna do adw cleaner now
Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
Just finished GMER on the C;// drive...it auto shut off after scan, that normal?
If nothing else pop ups, i think you should be fine.
Considering you removed one trojan, And some spyware.
Run the spyware progam also if you haven't already.
you could make a forum post on here.
https://www.bleepingcomputer.com/for...-removal-help/
the helpers will ask you to do a run of their progam so they can see any werid processes, that i don't have an eye for.
02-09-2022, 02:09 PM
-
#83
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
thanks brah. running now. Ill try to make a screen cap of me downloading a file so you can see chrome flash up at the start menu then disappear real quick..also just downloaded the keylogger softwareyes. run it twice. if anything pops up it will let you know.
If nothing else pop ups, i think you should be fine.
Considering you removed one trojan, And some spyware.
Run the spyware progam also if you haven't already.
you could make a forum post on here.
https://www.bleepingcomputer.com/for...-removal-help/
the helpers will ask you to do a run of their progam so they can see any werid processes, that i don't have an eye for.
If nothing else pop ups, i think you should be fine.
Considering you removed one trojan, And some spyware.
Run the spyware progam also if you haven't already.
you could make a forum post on here.
https://www.bleepingcomputer.com/for...-removal-help/
the helpers will ask you to do a run of their progam so they can see any werid processes, that i don't have an eye for.
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 02:14 PM
-
#84
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
Farbar Recovery Scan Tool (FRST)thanks brah. running now. Ill try to make a screen cap of me downloading a file so you can see chrome flash up at the start menu then disappear real quick..also just downloaded the keylogger software
--------------------
Download Farbar Recover Scan Tool for either 32 bit or 64 bit systems and save it to your Desktop. <<< Important
Right click on the icon and select Run as administrator
Note: If you receive any warning about the download it is a false positive and you can ignore it
Click Yes to the disclaimer
Click Scan and allow the program to run
Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen
2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows
================================================== =
Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
FRST.txt
Addition.txt
https://www.bleepingcomputer.com/dow...an-tool/dl/82/(64bit version tool)
Post the results on the forum i send u, Just to be sure let them check. so u can sleep better at night lol
If everything is fine, i would press the button on your router for a hard Reset( Not factory reset button) you will need a needle most often to press this buton on your router.
then you could do a fresh wipe on your iphone and i wouldn't have any worries.
02-09-2022, 02:20 PM
-
#85
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Ha, what do you ya..the keyscrambler just stopped working. Ill have to keep an eye on it to see if it was an accident on my end or if it was on purpose
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 02:21 PM
-
#86
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
Thats worrysome. im gonna run it aswell see if i experience any problems.Ha, what do you ya..the keyscrambler just stopped working. Ill have to keep an eye on it to see if it was an accident on my end or if it was on purpose
02-09-2022, 02:22 PM
-
#87
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
Originally Posted By olemo⏩
Microsoft protected your PCFarbar Recovery Scan Tool (FRST)
--------------------
Download Farbar Recover Scan Tool for either 32 bit or 64 bit systems and save it to your Desktop. <<< Important
Right click on the icon and select Run as administrator
Note: If you receive any warning about the download it is a false positive and you can ignore it
Click Yes to the disclaimer
Click Scan and allow the program to run
Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen
2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows
================================================== =
Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
FRST.txt
Addition.txt
https://www.bleepingcomputer.com/dow...an-tool/dl/82/(64bit version tool)
Post the results on the forum i send u, Just to be sure let them check. so u can sleep better at night lol
If everything is fine, i would press the button on your router for a hard Reset( Not factory reset button) you will need a needle most often to press this buton on your router.
then you could do a fresh wipe on your iphone and i wouldn't have any worries.
--------------------
Download Farbar Recover Scan Tool for either 32 bit or 64 bit systems and save it to your Desktop. <<< Important
Right click on the icon and select Run as administrator
Note: If you receive any warning about the download it is a false positive and you can ignore it
Click Yes to the disclaimer
Click Scan and allow the program to run
Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen
2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows
================================================== =
Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
FRST.txt
Addition.txt
https://www.bleepingcomputer.com/dow...an-tool/dl/82/(64bit version tool)
Post the results on the forum i send u, Just to be sure let them check. so u can sleep better at night lol
If everything is fine, i would press the button on your router for a hard Reset( Not factory reset button) you will need a needle most often to press this buton on your router.
then you could do a fresh wipe on your iphone and i wouldn't have any worries.
Microsoft Defense Smartscreen prevented an unrecognized appp from running
Only 1 option (DOnt Run)
(these are my opinions i am not a licensed broker by trade)
02-09-2022, 02:23 PM
-
#88
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
Originally Posted By VegasLifter26⏩
Run the progam with admin rights.Microsoft protected your PC
Microsoft Defense Smartscreen prevented an unrecognized appp from running
Only 1 option (DOnt Run)
Microsoft Defense Smartscreen prevented an unrecognized appp from running
Only 1 option (DOnt Run)
some ANTI viruses can Block certain progams. i think thats most likely what is happening right now.
hold on.
02-09-2022, 02:24 PM
-
#89
- VegasLifter26
- MAGA
-
- VegasLifter26
- MAGA
- Join Date: Mar 2017
- Posts: 9,040
- Rep Power: 27280
-
-
02-09-2022, 02:25 PM
-
#90
- olemo
- Registered User
-
- olemo
- Registered User
- Join Date: Dec 2013
- Age: 32
- Posts: 3,179
- Rep Power: 8054
-
-
ok you have to to turn it off.
https://ibb.co/fQq2wsj
turn it off for the download and running
it is at your windows security settings.
https://ibb.co/fQq2wsj
turn it off for the download and running
it is at your windows security settings.
Bookmarks
-
- Digg
-
- del.icio.us
-

- StumbleUpon
-
-
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts

