Was I Hacked?

[dopey]

after you place the hijack this program (icon with the dynamite) into it's own folder
have it scan once more

you should get a list of items you posted before

place a check in the box next to these:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

the f2 item was up to you if you didn't make it like that.

then close all browser windows and hit fix checked.

you should then reboot and rescan with hijack this and scan/save another log
copy and paste it here.

don't hit save until after you fixed these items and rebooted.

[TheKiler]

The problem is that whenever I hit scan I get this

€c

€
g
i

€s

€@    :
   
  
Nÿ(
(
ª        ƒ  Y  @ Р   p œ        
   R98     0100

      
           

    

  ˆ  

  �  (

   

  ô  
  D      ´ 
  ´ 
  ÿÿýÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿþÿÿÿÿÿÿÿÿ÷ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿýÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ÷ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿïÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¿ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿïÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿþÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿýÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿïÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿØÿÛ „   
  

 
!#"! &#0364,$'1'-=-167:::"*?D>8B3796
   
  




OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOÿÀ  x 
! 

ÿÄ
¢ 






       

 
 
}
 !1AQa"q2�‘¡#B±ÁRÑð$3br‚
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ„…†‡ˆ‰Š’“”•–—˜™š¢£¤¥¦§¨©ª²³´µ¶·¸¹ºÂÃÄÅÆÇÈÉÒÓÔÕÖ×ØÙÚáâãäåæçèéêñòóôõö÷øùú









     

 

w
!1AQaq"2�B‘¡±Á #3RðbrÑ

[dopey]

ok, you may have something that's interfering with the program.

In order to detect whether you are infected by HackDefender, please download this utility:

http://bagpuss.swan.ac.uk/comms/RKDetectorv0%5B1%5D.62.zip

let me know how it goes. the fixes for this trojan isn't exactly simple.

good luck.

edit: sorry forgot to post the instructions.

unzip it to your desktop.
In the RKDetector folder you unzipped you will see rkdetector.exe and tcp.dll, hold down your contol key and left click each of these files once so they both end up highlighted at the same time. Next right click one of them and choose copy.
Go to Start>Run and type %windir% and hit enter. The window that open will be the systemroot folder (windows or winnt, depending on the system). Right click an open area in that window and choose paste. You should see rkdetector.exe and tcp.dll appear on the file list there.
Once that is done go to Start>Run and type command and press enter.
In the following commands {s}=press the space bar one time
At the command prompt type the following
cd{s}desktop press enter
rkdetector.exe{s}>{s}rkdetector.txt press enter
The command window will go blank for a minute or so, when the prompt comes back type
exit and press enter.
Find the file on your desktop called rkdetector.txt and look at the last 6 lines, if they all say "Found: 0" then let us know nothing was found. If something was found then paste the entire contents of the file as a reply to this thread.

[TheKiler]

It says:

Failed to intialize in 16-bit mode. Your computer may have insufficent access.

[dopey]

ok. are you having trouble with any other programs?

if you are, it may be time to consider starting over.

since your first log (the only one that worked) showed your nod32 already disabled in some way, you probably have more things going on than I can see.

before going for the reformat, you might want to try posting your log in a help forum, such as computer cops, spyware info, maybe some new eyes looking at your log can have some idea on where to proceed from here.

i would suggest posting the log you have, along with a portion of the scans with gibberish. i know i'm not the most technically advanced person, and they might know what's causing it.

[TheKiler]

Something's happened to my security and firewall!

Zonealarm has a constant System Error: Please reboot
I tried uninstalling and reinstalling 3 times!

NOD32 is always disabled!

PANDA always displays an error!

Norton always says registry has been tampered and I can't uninstall it!

Windows has a weird boot screen! It's pirated xp?

Online scanning won't work! It always says active-x is disabled!

Spybot works half way and freezes

Ad-aware wont even start

spyware sweeper is always missing.. I keep installing it but It's alwayas missing!

System restore is constantly off!

Hijack this wont start!

Task manager is disabled? I can't even open it!

Start --> Run won't open up!!

[dopey]

that's what i was afraid of.


hacker defender is probably what you have.


you can try doing what i told you-- posting what you have in a help forum, but the easier/faster way to go would probably be a reformat. otherwise, according to some folks, some traces of this evil program might still be around.

at least this way, you will be sure.

backup programs from trusted sources and hopefully you can stay clean.

btw, your nod32 was disabled from the first hjt scan.

it may be a good idea to change your passwords, etc.

[TheKiler]

I tried formatting with the command:

Format C:

but it says "Unable to format"

I used partition magic from a super recovery dvd I made and it the hard drive didn't show up.

The hard drive is there and usable! In fact, I'm using it right now. I can't even format... oh god :helpsmile:

[infamousalbo101]

Killa It look like you just got pwned x_0 knockout

[TheKiler]

AHh.. What do I have to do??

>>This message was generated by the hax0r<<


WHAT THE?? I DIDNT PUT THAT THERE&#33;