Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Aug 29th, 2008, 5:23pm
   Mischel Internet Security Forum
   Malware
   Adware, Browser Hijackers and other Malware (Moderators: Helena, Gavin_Coe, Magnus)
   Browser hijacker/hacked		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Browser hijacker/hacked  (Read 639 times)
Izha
Newbie
*





   


Posts: 3
Browser hijacker/hacked
« on: Apr 23rd, 2006, 12:51pm »		 Quote Quote  Modify Modify
Hi recently i encountered some strange problems, i suspect my computer was hacked.Cos whenever i logged into my own forum, there is always this strange guest following me around suspiciously, i can recognize him/her, as its always the same ip address, even when my forum is in maintainence mode, i feel like i am being spied.  
 
When I wrote down the ip address for tracking, its appears as  
 
Crawl-66-249-72.45.googlebot.com
 
ISP Google Inc
 
Country United States
 
Bandwidth Thief  
 
So what is happening actually? I have a Anti Virus software on my pc, plus additional anti trojan elite, kaspersky anti hacker and trojan hunter, and it seems have no problems.
I even used kaspersky anti hacker to check remote port or host trying to connect to my pc, and everything seems fine. But whenever i went to my forum, that same ip address that i mentioned above always appear?
 
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5594
Re: Browser hijacker/hacked
« Reply #1 on: Apr 23rd, 2006, 2:53pm »		 Quote Quote  Modify Modify
I suggest that you run RootkitRevealer which can be obtained from here:  
 
http://www.sysinternals.com/Utilities/RootkitRevealer.html
 
Be SURE to read the intro instructions thoroughly.
 
Also run BlackLight which can be obtained from here:
 
http://www.f-secure.com/blacklight/
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Izha
Newbie
*





   


Posts: 3
Re: Browser hijacker/hacked
« Reply #2 on: Apr 23rd, 2006, 5:45pm »		 Quote Quote  Modify Modify
Hi, thanks for the reply. But the problem is, i cant use black light, spy sweeper and trojan hunter, recently when i tried to load up all this softwares, the computer automatically closed up all the programes, and one by one all my programes are shut down, and it says the program has performed an illegal operation and will be shut down... in the end i have to restart my pc.
 
I remember that day, there was a strange message saying kernel32.dll has performed an illegal operation and will be shut down and at that time i was using a p2p software, it was a DDOS denial of service attack, but it was repulsed due to my anti hacker, but ever since, i cant use trojan hunter, spy sweeper and some other softwares, it closed up all my programes for no reason, which i believe there must be something that made them clashed.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5594
Re: Browser hijacker/hacked
« Reply #3 on: Apr 24th, 2006, 12:33am »		 Quote Quote  Modify Modify
It does sound like you have some serious problems.
 
Can you do remote scans per the link below?  Start with Kaspersky.
 
http://forum.misec.net/board/FAQ/1141894786
 
Also try removing TrojanHunter and re-installing it.  Be sure to use TH V4.5, Build 922.  If you have not upgraded already, please follow the instructions found at the link below.  It is possible that the kernel32 replaced damaged some of your already installed programs.  After you re-install, see if TH now works.  
 
http://forum.misec.net/board/FAQ/1143140682
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Izha
Newbie
*





   


Posts: 3
Re: Browser hijacker/hacked
« Reply #4 on: Apr 24th, 2006, 4:25am »		 Quote Quote  Modify Modify
I just used the kaspersky anti virus to scan my pc, but it hasnt found anything.
 
And i tried to reinstall Trojan hunter and spy sweeper, but the moment my pc restarted with TH Guard and Spy Shield, all the programs close up again...and every messages pop up and say  "the program causes an Invalid page module in unknown with some numbers at the bottom"  
 
But when TH guard is not load up, there is no problem, i just tried to scan my pc with Trojan hunter and it freezes halfway twice.
 
Also a few days ago when i scanned my pc with all the softwares, there are a few mysterious .TMP files that refused to be scan and open up. I try to delete it manually but it says it cant be deleted.
 
And just a moment ago, i used the Security Task Manager to scan my pc and check what is in the Kernal32.dll,
 
I will send the text file to you by pm,
IP Logged
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: Browser hijacker/hacked
« Reply #5 on: Apr 24th, 2006, 9:50am »		 Quote Quote  Modify Modify
What operating system are you running?  Windows 98, 98SE, ME, 2K, XP?  Also try booting into Safe Mode and renaming THSec.dll to THSec.disabled {located in your TrojanHunter program directory}.  Then reboot and see if that makes any difference; see if TH is any more stable with the THSec file disabled.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register