Someone is hijacking my computer. My daughter uses AOL Instant messenger and a website called livejournal.com. Someone, we have an idea who, is finding out her passwords and usernames for both and going into delete files and leave nasty comments in the journal and using her Instant messenger screenname. Whenever she creates a new account on either with a brand new password, they do the same thing the next day. The same person is also doing it to her boyfriend. I believe that they have done it to my email as well, since I couldn't get into mine about the same time.
I have Adaware, AShampoo and McAfee Virus and Firewall. I only recently installed these when I started getting some virus' and an multitude of spyware crap. I checked the cables for a hardware "spyware" and ran the virus scans and adware programs. I've also ran hijackthis.exe but I don't want to delete anything that I shouldn't. Here's the log file for hijackthis.exe;
Logfile of HijackThis v1.98.0 Scan saved at 10:25:48 PM, on 8/14/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Hi. First of all you need to update hijackthis to version 1.98.2. Run hijackthis & go to *Config\Misc Tools\Check for update on-line*. If the site is down, go here. Remove the old version by opening the program, going to config\misc tools, then uninstall & exit. You then have to delete the file manually. Unzip the new version into the hijackthis folder.
The following could be the problem file. It is a keylogger which logs every key stroke.
Download & instal Adaware from here & update it before scanning. In settings under 'scanning,' have it set to 'scan within archives,' 'scan active processes,' 'scan registry,' 'deepscan registry' 'scan my IE Favourites for banned URL's,' 'scan my host's file.' In 'tweaks' under 'scanning engine' set it to 'unload recognised processes during scanning.' Also in 'tweaks' under 'cleaning engine' set it to 'Automatically try to unregister objects prior to deletion' & 'let Windows remove files in use at next reboot.'
Close all (browser) windows & rescan with hijackthis. When the scan is finished place a check in the box to the left of the following entries & click 'fix checked':
Run About:buster, click OK, Start, and OK again to start the scan. Let it scan and fix everything it finds.
Still in safe mode, do a full system scan with Adaware. When the scan is finished select *next* & place a check in the boxes to the left of what is found & click *next* again. Let it delete those entries.
Reboot your computer in normal mode. Rescan with hijackthis & post another log.
Wow. You're my hero. You gave me so much useful information. I did everything that you suggested. As you requested, here's the log file I did last. Hopefully all goes well at this point. If not, I no where to go. Please let me know if there is anything else below that I should take care of. I am finally a happy boy again. Thanks so much.
Logfile of HijackThis v1.98.0 Scan saved at 9:00:06 PM, on 8/18/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)