Messages

1

Malware removal help / Re: Help in reading first RK scan

« on: September 29, 2016, 11:43:17 PM »

Got it.

Thanks for all of your help.

I'm ordering the upgraded version of RK. Great program, excellent support.

2

Malware removal help / Re: Help in reading first RK scan

« on: September 29, 2016, 07:17:21 PM »

Thanks, Curson, for your assistance.

I do have a single question about MBR's. What would cause an RK scan to list "unknown MBR" drive0; unknown MBR empty?

3

Malware removal help / Re: Help in reading first RK scan

« on: September 28, 2016, 07:47:03 PM »

Curson....

the current ISP is Hughes Network.
Prior to that is was Charter Communications, with a few hotspot connections along the way.

I've been trying to chase down an IP that is traced to an art gallery in Kansas, according to the IP's that show on the scan.

Any help would be greatly appreciated.
Thanks,

4

Malware removal help / Re: Help in reading first RK scan

« on: September 27, 2016, 12:47:17 AM »

Here we go, Curson...

Not that I'm aware, do I have a service with direcway. Probably fishy, if anything. I've been a little careless with this pc, lately. Not so, with my new one.

Here is the fixlog you asked for.

5

Malware removal help / Re: Help in reading first RK scan

« on: September 26, 2016, 08:44:44 PM »

Curson...
Per instruction, I'm attaching the txt logs you requested.

I see a few "hidden" files, some of which have no identifying author. Will wait for your response and advice, in the meantime, no real work will be done here.

I'll keep an eye open for the reply.......

 

6

Malware removal help / Re: Help in reading first RK scan

« on: September 26, 2016, 08:07:46 PM »

Thanks, Curson.

I've deleted all active infections and rebooted and re-scanned the hd. All seems to be good, except for a question I have about a few PUM DNS entries.

The entries are on both of my laptops, and am wondering if it may be a (user defined) proxy, or something more malicious in intent.

I've deleted them on both of the pc's and they keep showing up on re-scans.

"ipTRACKERonline.com"
IP Address Quick Report
IP Address:[/b] 67.142.174.10 67.142.174.11
Organization:[/b] Hughes Network Systems
City:Country of Origin: United States
* For a complete report on this IP address goto ipTRACKERonline

They are traced to a private art museum in Kansas, of which I have no association with.

I'll dl FRST and follow your instruction.

Thanks for the guidance.

7

Malware removal help / Help in reading first RK scan

« on: September 24, 2016, 11:12:53 PM »

First time poster, here.

I've had a problem with a person who feels a psychotic need to track me. I have two laptops, one of which has disabled by a malicious MBR.

This is my first scan with RK, and have several questions about the interpretation of the results.
i've read the documentation, and am getting a better understanding of the code used to interpret the results....that being said, I'm a total noob at this.

I've posted the results of the first scan as an attachment, and would like an experienced opinion of these results.

As for the highlighted entries, I have not disabled them as of yet.....I'm wondering if it would be possible to track them down and save them for tracking the sender.

I'm not certain if this is the correct place to post this question, so please move to proper location.

With interest, I will keep an eye on this thread.