Log In

Your email is not your username

Register

If you were a member of the old Bodybuilding.com forums and would like to reuse your previous username, you can request it below. We use your email only for registration and do not store it. For more information, please see our Privacy Policy.

Confirm your email

A registration code was sent to your email. Enter it here.

Welcome

You have successfully setup your account.

Sign in

Quick Navigation Bottom Misc
Forum ยป Brahs...I think I may have a remote hacker accessing my laptop..(REPS!)
  1. Results 91 to 120 of 120
  2. Page 4 of 4
  3. First
  5. 2
  6. 3
  7. 4

Thread: Brahs...I think I may have a remote hacker accessing my laptop..(REPS!)

post 1655899503 02-09-2022, 02:27 PM
-
#91
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Farber - showing I have many accounts..I only have 2 Set up .. my name and Admin

Administrator (S-1-5-21-288750638-3556096952-1608071079-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-288750638-3556096952-1608071079-503 - Limited - Disabled)
Guest (S-1-5-21-288750638-3556096952-1608071079-501 - Limited - Disabled)
scott (S-1-5-21-288750638-3556096952-1608071079-1001 - Administrator - Enabled) => C:\Users\scott
WDAGUtilityAccount (S-1-5-21-288750638-3556096952-1608071079-504 - Limited - Disabled)
(these are my opinions i am not a licensed broker by trade)
post 1655899703 02-09-2022, 02:29 PM
-
#92
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26⏩
Farber - showing I have many accounts..I only have 2 Set up .. my name and Admin

Administrator (S-1-5-21-288750638-3556096952-1608071079-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-288750638-3556096952-1608071079-503 - Limited - Disabled)
Guest (S-1-5-21-288750638-3556096952-1608071079-501 - Limited - Disabled)
scott (S-1-5-21-288750638-3556096952-1608071079-1001 - Administrator - Enabled) => C:\Users\scott
WDAGUtilityAccount (S-1-5-21-288750638-3556096952-1608071079-504 - Limited - Disabled)
No you have those, you just dont see them.

the last one is windows. this is not strange.
no need to worry about this, do post the results on forum if you have time.


Keyscramble:

https://ibb.co/fQq2wsj( the pic is cropped, turn the setting belows off:blocking apps and downloads)
:turn the windows setting off, so you can download the keyscramble progam and(run)
since we defaulted the settings on adwcleaner, windows is preventing any dangerous progams to be run.
(bascily most settings are put on safe mode)
post 1655900123 02-09-2022, 02:36 PM
-
#93
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
not sure what to make of this text log on Farber

Keyscrambler still works well
(these are my opinions i am not a licensed broker by trade)
post 1655900253 02-09-2022, 02:38 PM
-
#94
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26⏩
not sure what to make of this text log on Farber
The accounts on the farber log everyone has, you just dont see them when you login , they are build in automatic)

im assuimg scot is your personal?

the default account has no admin rights, neither does the guest.

when you have a remote hack, they most likely had admin rights.
post 1655900423 02-09-2022, 02:41 PM
-
#95
  1. DrugsToGetBig
  2. So it begins
  1. DrugsToGetBig
  2. So it begins
  3. Join Date: Jun 2012
  4. Location: New Jersey, United States
  5. Age: 33
  6. Height: 6'1"
  7. Weight: 220 lbs
  8. Posts: 38,551
  9. Subscribers: 5
  10. Rep Power: 415851
vegas i'm not trying to hijack your thread boyo but it got me curious and i downloaded roguekiller and it says it found 3 registry subkeys

is that worrisome?
*Forever Alone Crew*
*Neg FireofAss Crew on SIGHT Crew*
post 1655900953 02-09-2022, 02:48 PM
-
#96
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By DrugsToGetBig⏩
vegas i'm not trying to hijack your thread boyo but it got me curious and i downloaded roguekiller and it says it found 3 registry subkeys

is that worrisome?
not super tech savvy but if you follow all the steps Olemo paved for us you should be good.
(these are my opinions i am not a licensed broker by trade)
post 1655901163 02-09-2022, 02:53 PM
-
#97
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
You should get hitman pro alert that should protect you against any remote acces hacking even if youre infected Unless they are in the deeplayers of your system and you have a very nasty rootkit. but then i would just get a new laptop or figure out what parts are infected and replace them.( this only happens if you piss off a very knowlegde hacker lmao)
post 1655901483 02-09-2022, 02:59 PM
-
#98
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
hacker must have redownloaded his crap

Also, how do you get sophos hitman pro to keep running in the background...it isnt active for me
(these are my opinions i am not a licensed broker by trade)
post 1655901533 02-09-2022, 03:00 PM
-
#99
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26⏩
hacker must have redownloaded his crap

99.50% sure those are the gmer.exe files i told you about that changes names ( Anti virus picked it up as a virus but it is not)
(it is also in your download map so i am 100% sure those are the gmer rootkit download set up)
You are most likely clean.

to test, download gmer again and see if it pops up on your hitman with a name on the .exe file looking like those.

i remember from using gmer root kit remover, that the name tend to be like those on your screenshot.

anti viruses often see other anti malware removers as viruses. this is very common.

So what happend now is hitman pro thought your gmer file( that changes name) was a virus.

you should be safe op

if this is all your hitman scans, you should be safe,

do download the hitman pro alert for some real time protection against remote acces hacking and other exploits.
post 1655902603 02-09-2022, 03:14 PM
-
#100
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26⏩
Also, how do you get sophos hitman pro to keep running in the background...it isnt active for me
it is only a malware removal,( it only removes) it doesnt give real time protection, you need hitman pro alert for that.

hitman pro alert should give you very good protection( even if you're infected) Unless you have a big nasty rootkit.
post 1655902933 02-09-2022, 03:17 PM
-
#101
  1. MyBaddBrah
  2. u wot m8
  1. MyBaddBrah
  2. u wot m8
  3. Join Date: Apr 2013
  4. Posts: 19,318
  5. Rep Power: 61930
All this finding files with a microscope is RETARDED. Nobody actually does this in business. Want to know how to delete everything and replace it with known good ones? WIPE IT.

It comes back? IT'S SOMETHING ELSE.

Firmware rootkit? DELETING THESE WON'T DO CHIT, BECAUSE THEY'RE on the OPERATING SYSTEM.


FFS
*Hole is Life Crew*
*Meditation Crew*
post 1655903263 02-09-2022, 03:23 PM
-
#102
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By MyBaddBrah⏩
All this finding files with a microscope is RETARDED. Nobody actually does this in business. Want to know how to delete everything? WIPE IT.

It comes back? IT'S SOMETHING ELSE.
I rather find out how i've been infected, so i would know what else possibily is infected and what you been dealing with.
post 1655903323 02-09-2022, 03:24 PM
-
#103
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
well well well
(these are my opinions i am not a licensed broker by trade)
post 1655903353 02-09-2022, 03:26 PM
-
#104
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
when i right click and try to run as admin


wastebasket emojis
(these are my opinions i am not a licensed broker by trade)
post 1655903763 02-09-2022, 03:33 PM
-
#105
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26⏩
when i right click and try to run as admin


wastebasket emojis
good,If you think you're infected again, wipe it. if the problem still consist, it most likely a rootkit and youre kinda ****ed.

In the meantime get a two factor aucthention on your mail if you dont have one.
post 1655903893 02-09-2022, 03:35 PM
-
#106
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By olemo⏩
If you think you're infected again, wipe it. if the problem still consist, it most likely a rootkit and youre kinda ****ed.

In the meantime get a two factor aucthention on your mail if you dont have one.
so 2 factor authenticiation on banks and emails right?
(these are my opinions i am not a licensed broker by trade)
post 1655903933 02-09-2022, 03:35 PM
-
#107
  1. olemo
  2. Registered User
  1. olemo
  2. Registered User
  3. Join Date: Dec 2013
  4. Age: 32
  5. Posts: 3,179
  6. Rep Power: 8054
Originally Posted By VegasLifter26⏩
so 2 factor authenticiation on banks and emails right?
Yeah those are the most important ones.

and/or one on your social media accounts.
post 1655934553 02-10-2022, 06:29 AM
-
#108
  1. JPF82
  2. Registered User
  1. JPF82
  2. Registered User
  3. Join Date: Nov 2012
  4. Location: South Carolina, United States
  5. Posts: 19,869
  6. Rep Power: 63172
Originally Posted By olemo⏩
There are rootkits in the wild nowadays. they been popping up since 2017.

Although most likely OP just has malware.
I don't mess around with the public sector like that anymore. I am gooberment/private sector......root kits are a thing we don't even discuss nor see at all.......Maybe once long ago in the marine corp I saw it...but wasn't really a root kit just credential creeping to root level. I don't own a personal laptop.
post 1655934723 02-10-2022, 06:33 AM
-
#109
  1. JPF82
  2. Registered User
  1. JPF82
  2. Registered User
  3. Join Date: Nov 2012
  4. Location: South Carolina, United States
  5. Posts: 19,869
  6. Rep Power: 63172
Originally Posted By MyBaddBrah⏩
All this finding files with a microscope is RETARDED. Nobody actually does this in business. Want to know how to delete everything and replace it with known good ones? WIPE IT.

It comes back? IT'S SOMETHING ELSE.

Firmware rootkit? DELETING THESE WON'T DO CHIT, BECAUSE THEY'RE on the OPERATING SYSTEM.


FFS
You have got to be one of the biggest idiots ITT and thats saying a lot cause look at OP


I work in incident response/handling, digital forensics, threat hunt, threat intel for gooberment.......you best believe we microscope chit all fuking day.....even if its just a get request to some stupid ass vacation website to sign up to.

Now, if you mean that in regards to personal devices, yeah I can wipe and reload my laptop in a matter of 20 minutes.....wipe to DOD standards, and fresh clone install of a golden image.

But you said business, so I gotta call you a moron for believing that to be true.
post 1655936563 02-10-2022, 07:11 AM
-
#110
  1. elterrible987
  2. Banned
  1. elterrible987
  2. Banned
  3. Join Date: Jan 2010
  4. Posts: 51,859
  5. Rep Power: 0
Originally Posted By VegasLifter26⏩
theres jsut weird chit going on that normally doesnt happen, like when I typed in weather it took me to a different location. Or when I am using chrome with adblocker I can still see ads
use google to find a site to tell you your IP address.

if you have no vpn or anything on, it should show up local. if you got some foreign country then you have some chit going on. and that would explain the weather site defaulting to some odd location.


i would take the computer offline and use a diff computer until you figure out whats up
post 1655981893 02-10-2022, 08:54 PM
-
#111
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Not sure what Wifi evil twin alert means?

(these are my opinions i am not a licensed broker by trade)
post 1655982623 02-10-2022, 09:16 PM
-
#112
  1. Dogkrack
  2. Banned
  1. Dogkrack
  2. Banned
  3. Join Date: Jun 2019
  4. Posts: 14,820
  5. Rep Power: 0
get linux bootable iso
wipe disk
re-install windows
post 1655986223 02-10-2022, 10:55 PM
-
#113
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By Dogkrack⏩
get linux bootable iso
wipe disk
re-install windows
linux would be dope. would a windows reinstall work if the router has been infected tho

also, i think my iphone was hacked as well...any way to check that
(these are my opinions i am not a licensed broker by trade)
post 1655986753 02-10-2022, 11:09 PM
-
#114
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
also, when i clicked the find my ip locator on google the ip4 address is shows me is not the same as the ip when i click on settings -> network - > wifi -> properties
(these are my opinions i am not a licensed broker by trade)
post 1655987773 02-10-2022, 11:44 PM
-
#115
  1. JeepBruh
  2. Platinum
  1. JeepBruh
  2. Platinum
  3. Join Date: Aug 2019
  4. Posts: 12,140
  5. Subscribers: 2
  6. Rep Power: 146252
Originally Posted By VegasLifter26⏩
also, when i clicked the find my ip locator on google the ip4 address is shows me is not the same as the ip when i click on settings -> network - > wifi -> properties
That's because you don't know how networking works.

Not trying to be a jerk here, and I understand your paranoia, but you have limited computer knowledge. I've read your responses and there have been a few times you freaked out about stuff that was related to normal computer settings.

Follow the advice of what olemo said throughout this thread and you should be fine. He's given great tips, some of which I hadn't heard of. You absolutely had malware installed, but I think it has been addressed.
post 1655988673 02-11-2022, 12:19 AM
-
#116
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Originally Posted By JeepBruh⏩
That's because you don't know how networking works.

Not trying to be a jerk here, and I understand your paranoia, but you have limited computer knowledge. I've read your responses and there have been a few times you freaked out about stuff that was related to normal computer settings.

Follow the advice of what olemo said throughout this thread and you should be fine. He's given great tips, some of which I hadn't heard of. You absolutely had malware installed, but I think it has been addressed.
awesome, thank you. And im the first to admit I am a novice when it comes to computer issues. I just closed port 3389 btw it was open on my pc however remote desktop is now turned off as well. Also when I try to scan my network onhttps://pentest-tools.com/using my public IP address it is telling me that it is not the host. I wonder why...instead of a rootkit this may be broadband hacking
(these are my opinions i am not a licensed broker by trade)
post 1656001953 02-11-2022, 08:15 AM
-
#117
  1. JeepBruh
  2. Platinum
  1. JeepBruh
  2. Platinum
  3. Join Date: Aug 2019
  4. Posts: 12,140
  5. Subscribers: 2
  6. Rep Power: 146252
Originally Posted By VegasLifter26⏩
awesome, thank you. And im the first to admit I am a novice when it comes to computer issues. I just closed port 3389 btw it was open on my pc however remote desktop is now turned off as well. Also when I try to scan my network onhttps://pentest-tools.com/using my public IP address it is telling me that it is not the host. I wonder why...instead of a rootkit this may be broadband hacking
If you really want to have absolute peace of mind then return your router/networking equipment, get an entirely new PC and do factory reset on iphone and anything else that may have been connected to your network. Obviously make sure to get all the files you want off the devices first. Don't connect anything to your new network that was previously on your old one.

This is basically the nuke it option and is overkill, but the surefire way to make sure. And also keep running scans and practicing good cyber hygiene.
post 1656039003 02-11-2022, 09:06 PM
-
#118
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
Could be a DNS Spoofing attack.. these websites jsut dont look right.. The logos are too small ...also sometimes cant click on the log in profile ..can you guys go to the sites and verify if they look a bit different?


(these are my opinions i am not a licensed broker by trade)
post 1656046473 02-12-2022, 01:22 AM
-
#119
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
last post brahs, when yal type in amazon.com does it redirect towww.amazonor just stay amazon.com..mine isnt redirecting

(these are my opinions i am not a licensed broker by trade)
post 1656046863 02-12-2022, 01:44 AM
-
#120
  1. VegasLifter26
  2. MAGA
  1. VegasLifter26
  2. MAGA
  3. Join Date: Mar 2017
  4. Posts: 9,040
  5. Rep Power: 27280
is this what chase.com home page looks like?

(these are my opinions i am not a licensed broker by trade)
Quick Navigation Top Misc
Bookmarks
Digg.com
Digg
del.icio.us
del.icio.us
Stumbleupon.com
StumbleUpon
Google.com
Google
Facebook.com
Facebook
Posting Permissions
  1. You may not post new threads
  2. You may not post replies
  3. You may not post attachments
  4. You may not edit your posts