Online Game Account Compromised

Edit. So i'm a newbie and thought reinstalling OS was reformatting HD, and i've just been informed it isn't. So I've done many unnecessary steps. But none the less I'd like to play my online game without it getting stolen again.

Kirshna

Welcome to the forum, you have a clean log But yes there are nasties that can hide in memory and also your bios chip on your motherboard but it you had one it would have surfaced.

Online games You will get yourself infected real easy that way along with the Gambling sites and file sharing.

A reformat is when you wipe the hard drive clean and reinstall a fresh copy of windows, when you just install windows over the top, any nasties could still be there.

What I see wrong with your chart is that you have TWO ANTI VIRUS PROGRAMS RUNNING AND THIS IS A BIG NO NO. It will degrade system performance and cause you many problems. You need to go to your Add-Remove Programs in your Control Panel and uninstall one of them.


Run this system cleaner.
Download and Install CCleaner
If you don't want the Yahoo Toolbar, be sure to uncheck it during installation
* Click on Run Cleaner
Tutorial for CCleaner


You can run the free online Virus scanner from Panda, it could pick up something thats not showing on your log.

Run Panda's ActiveScan from here and perform a full system scan.

• Once you are on the Panda site click the "Scan your PC" button
• A new window will open…click the big "Check Now" button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Click the big Scan Now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It will take a couple minutes)
• If you are on a slow connection it will take about 15 minuites for the scanner to load.
• Click on "Local Disks" to start the scan
• Once scan is done, click "see report" then "save report"
• Save the log someplace you can find
• 12. Reboot
• Post the Panda scan results in your next reply

Let me see the Panda report and a New HJT log please.

Hey, Ken545
Just wanted to get back to you. I removed 1 of my Anti-virus programs like you said and ran CCleaner. I'll run Panda scan overnight, as at the moment it looks like it will take a very long time to scan the system.

I thought I've read that having more than one Anti-virus program was better because no one program captures all the bad things you could have on your PC. Can you explain, why does having more than one program degrade the system and should I just have one installed and run an online scan often like Panda's scan?

Online games You will get yourself infected real easy that way along with the Gambling sites and file sharing.

How does online games get us user infected real easy, If I have a secure connection to their server? Reason I ask is the Game Master tells me that it's almost impossible for the hijack to occur at their end and more likely that I have a Trojan,virus on my PC that's allowing the hijack to occur.

I will post Scan results and new Hijackthis Tomorrow evening.

Here is some info on running more than one Anti Virus program.

Read this
Smart Computing

Most anti-virus programs operate in two modes:

• Scan:the utility examines memory and files on disk for traces of malware. This involves actually examining the contents each file for things that "look like" viruses.
  
• Monitor:often referred to as "real time" monitor, the anti virus program is continually running and scans files as they are downloaded to your machine, notifying you nearly immediately if the file you just received contains something that looks like a virus.
  
• There's nothing at all wrong periodically running an anti-virus scan with more than one anti-virus program. The key here is that it's just a scan - it starts, it scans, and then it's done. There's no opportunity to come in to conflict with another anti-virus program.
  
• Real time monitoring, on the other hand, is another story. When you install most anti-virus programs they often automatically install and enable their real-time monitors. Running two or more real-time anti-virus monitors at the same time is very likely to cause a conflict. That conflict could result in error messages, crashes of the anti-virus programs, or other types of failure.
  
• So it's certainly OK to have more than one anti-virus program installed, and it can make sense to run a scan using a different program from time to time, but you must make sure you only have one real-time monitor enabled at a time.
  "Running two or more real-time anti-virus monitors at the same time is very likely to cause a conflict."
  
• Anti Virus programs are also big resource hogs, running more than one can slow down your system
  
• The simplest way to do so, is to rely on a single, good anti-virus program and make sure that its database of known viruses is continually being updated.

As far as downloading games, there are good and bad sites , if you download carelessly from sites you don't know, you could be getting more than you bargained for.

Sites like Kazaa , Limewire , BearShare are also places that you can pick up and infection. The kids love them and download willy nilly and pick up nasty stuff real easy.


Depending on your system Panda could take awhile. It won't clean malware, just viruses but the log it produces can tip us off in case something is hiding and not showing up on your log. Your log is clean, this is just a doublecheck, so proceed if you like.

If Panda comes up clean I have some free tools for you to install to help keep you secure.

Ken

Back for more. Just for clarification the game I play is World of Warcraft. I purchased it at the store and then login to their server. I've never downloaded any game. PANDA SCAN Incident Status Location Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Owner\Cookies\owner@2o7[2].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][1].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Owner\Cookies\owner@adrevolver[2].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Owner\Cookies\owner@adrevolver[3].txt Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][2].txt Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][2].txt Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Owner\Cookies\owner@apmebf[1].txt Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Owner\Cookies\owner@atwola[1].txt Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Owner\Cookies\owner@belnk[1].txt Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Owner\Cookies\owner@bluestreak[1].txt Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Owner\Cookies\owner@burstnet[2].txt Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Owner\Cookies\owner@casalemedia[2].txt Spyware:Cookie/Bridgetrack Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][1].txt Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Owner\Cookies\owner@did-it[1].txt Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][2].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Owner\Cookies\owner@go[2].txt Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Owner\Cookies\owner@overture[2].txt Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][1].txt Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Owner\Cookies\owner@questionmarket[1].txt Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Owner\Cookies\owner@realmedia[1].txt Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Owner\Cookies\owner@revenue[2].txt Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][2].txt Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][1].txt Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Owner\Cookies\owner@statcounter[1].txt Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Owner\Cookies\owner@target[2].txt Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Owner\Cookies\owner@tradedoubler[1].txt Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Owner\Cookies\owner@trafficmp[1].txt Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[2].txt Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Owner\Cookies\[removed][2].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Owner\Cookies\owner@zedo[1].txt Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Stacy Watson\Application Data\Mozilla\Firefox\Profiles\28n6xy5f.default\cookies.txt[.hitbox.com/] Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Stacy Watson\Application Data\Mozilla\Firefox\Profiles\28n6xy5f.default\cookies.txt[.ehg.hitbox.com/] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Stacy Watson\Application Data\Mozilla\Firefox\Profiles\28n6xy5f.default\cookies.txt[.247realmedia.com/] Potentially unwanted tool:Application/HideWindow.A Not disinfected C:\hp\bin\FondleWindow.exe Potentially unwanted tool:Application/KillApp.B Not disinfected C:\hp\bin\KillIt.exe Adware:Adware/PurityScan Not disinfected C:\System Volume Information\_restore{CD53596A-5812-49DB-AF84-A72B9BECDE4F}\RP110\A0009085.exe Adware:Adware/PurityScan Not disinfected C:\System Volume Information\_restore{CD53596A-5812-49DB-AF84-A72B9BECDE4F}\RP110\A0009086.exe Adware:Adware/PurityScan Not disinfected C:\System Volume Information\_restore{CD53596A-5812-49DB-AF84-A72B9BECDE4F}\RP111\A0009101.exe Adware:Adware/Sqwire Not disinfected C:\System Volume Information\_restore{CD53596A-5812-49DB-AF84-A72B9BECDE4F}\RP111\A0010124.exe

Kirshna

All Panda found were cookies and some bad entries in your System Restore program. Lets flush it out

System Restore makes regular backups of all your settings, if you ever had to use this program to restore your system to a previous date, you will be infected all over again so we need to clean out the previous Restore Points

Turn off System Restore.

• Right-click My Computer.
• Click Properties.
• Click the System Restore tab.
• Check Turn off System Restore on all Drives.
• Click Apply, and then click OK.

Reboot your System

Turn ON System Restore.

• Right-click My Computer.
• ClickProperties.
• Click the System Restore tab.
• UN-Check Turn off System Restore on all Drives.
• Click Apply, and then click OK.

Create a new Restore Point <– Very Important

• Go to Start/ Control Panel/ Performance and Maintenance/ System Restore/ Create a New Restore Point
  You can name the restore point anything you like, something that you can remember, You will have to be in Catagory View to see this

System Restore Tutorial <– If you need it



How did I get infected in the first place ? Read these links and find out how to prevent getting infected again.

• Tutorial for System Restore <– Do this first to prevent yourself from being reinfected.
• Tom Coyote
• TonyKlein CastleCops
• Grinler BleepingComputer
• Geeks To Go
• Dslreports

Here are some free programs to install, don't leave home without them

• Spybot Search and Destroy 1.4
  Check for Updates/ Immunize and run a Full System Scan on a regular basis.
  
• Ad-Aware SE Personal 1.06
  Check for Updates and run a Full System Scan on a regular basis.
  
• Spyware Blaster It will prevent most spyware from ever being installed.
  
• Spyware Guard It offers realtime protection from spyware installation attempts.
  
• Win Patrol This program will warn you when any changes are being made to your system and give you the option to deny the change.
  
• IE-Spyad
  IE-Spyad places over 4000 web sites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (cookies etc) from the sites listed, although you will still be able to connect to the sites.
  
• Firefox 2.0 It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.
  
• Zone Alarm Here is a free Firewall from Zone Labs, I wouldn't access the internet without it.

Thanks for stopping by Tom Coyote , I'm glad I was able to help you.

You may also want to read some of these links.

http://www.google.com/search?hl=en&q=w…G=Google+Search

Ken

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php