Author Topic: A possible hijacking?  (Read 13806 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: A possible hijacking?
« Reply #30 on: February 02, 2014, 05:45:08 PM »
The main thing though is how is your computer behaving ?

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #31 on: February 03, 2014, 02:13:01 AM »
Computer is behaving fine, so far. Nothing weird, but I haven't been logged onto skype since we determined that was the cause.

Do you think it was an actual virus,or more just like an attack from outside? My logs and stuff are all still clean.

Do you think Skype is safe again?

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #32 on: February 03, 2014, 02:26:06 AM »
Looking through event viewer again. Apparently yesterday, ( 2/1/2014 ) at 10:31 AM it happend again, without my knowledge.

"Name resolution for the name e324rfds.rp-microdefender.nl timed out after none of the configured DNS servers responded."

It shows up as a network warning there.

AFAIK, though, that's the last time it's shown up.

It's really kinda scaring me.

DarthSnoopyFish

  • Guest

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #34 on: February 03, 2014, 11:21:49 AM »
That didn't seem to work. I did as it said, and I'm still getting the

"Call mobile with great new pay-as-you-go rates" advertisement at the top of my skype.

Although that does seem to be the only one that displays, now.

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #35 on: February 03, 2014, 11:35:35 AM »
Nevermind, getting ads about M&Ms and cars and other random crap, still.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: A possible hijacking?
« Reply #36 on: February 03, 2014, 03:51:56 PM »
Unfortunately there is little I can do about Skype ads as that is down to MS.  I believe the ad addresses are stored on their servers

DarthSnoopyFish

  • Guest
Re: A possible hijacking?
« Reply #37 on: February 03, 2014, 04:10:52 PM »
Hmm, that fix on redit worked for me. Did it to 2 computers, no ads are showing up. You have to use the information from both commentor links in that post. First link is instructions, second link has a list of all possible ad services.

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #38 on: February 03, 2014, 06:36:54 PM »
Do I leave them at 0.0.0.0.0, or change them to 127.0.0.1like the others? I did the latter, and they're still showing up.

Here's what's coming up, the first one is from the home page, the second is in a chat window with someone.




Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: A possible hijacking?
« Reply #39 on: February 03, 2014, 07:09:12 PM »
Set them at 127.0.0.1

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #40 on: February 03, 2014, 07:25:20 PM »
Damn, I did that, and it's not working. ;;

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #41 on: February 03, 2014, 07:42:01 PM »
Should I be leaving these twolines in there as well?:

127.0.0.1       localhost
::1       localhost

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: A possible hijacking?
« Reply #42 on: February 03, 2014, 07:47:35 PM »
Yes they are basic headers although they perform no function

OhDearyMe

  • Guest
Re: A possible hijacking?
« Reply #43 on: February 03, 2014, 08:06:53 PM »
Damn. I'm not sure what else I need to do, then. ><

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes