Computer hi jack off and online

[Liger]

kMy computer will keep scrolling up and down off and online. On this forum, it scrolls up and down without my control more smoothly. Suggesting that the arrows to scroll up and down on this website are being pressed

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[Liger]

Here is the report as requested

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  emptyclsid;
  emptyalltemp;
  ipconfig /flushdns >>"%temp%\log.txt";b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Upload it in your next reply.

 

[Liger]

Norton wouldn't uninstall

I didn't upload to notepad


Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by User on 08/07/2016 at 9:13:21.52.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\User\Desktop\zoek.exe [Scan all users] [Script inserted]

===== Runcheck 9:14:59.78 =====

--- Create Environment Variables 9:15:02.31
--- Create System Restore Point 9:15:17.13
--- Checking Input 9:16:04.89
--- AU AppData Check 9:16:56.45
--- Remove From Windows Installer 9:17:03.41
--- Empty Folders Check 9:18:29.98
--- Registry HKLM Software Check 9:18:30.18
--- Quick Launch Shortcut Check 9:19:04.89
--- IE Startpage Check 9:19:15.15
--- Program Files DB Check 9:19:45.53
--- C:\Users\barry\AppData\Roaming DB Check 9:20:53.78
--- C:\Users\Default\AppData\Roaming DB Check 9:20:53.78
--- C:\Users\Default User\AppData\Roaming DB Check 9:20:53.78
--- C:\Users\Michael\AppData\Roaming DB Check 9:20:53.78
--- C:\Users\User\AppData\Roaming DB Check 9:20:53.78
--- C:\WINDOWS\SysNative\config\systemprofile\AppData\Roaming DB Check 9:20:53.78
--- C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Roaming DB Check 9:20:53.78
--- C:\WINDOWS\serviceprofiles\networkservice\AppData\Roaming DB Check 9:20:53.78
--- C:\WINDOWS\serviceprofiles\Localservice\AppData\Roaming DB Check 9:20:53.78
--- C:\Users\User DB Check 9:25:18.36
--- C:\PROGRA~3 DB Check 9:25:59.37
--- C:\Users\Administrator\AppData\Local DB Check 9:26:30.86
--- C:\Users\barry\AppData\Local DB Check 9:26:30.86
--- C:\Users\Default\AppData\Local DB Check 9:26:30.86
--- C:\Users\Default User\AppData\Local DB Check 9:26:30.86
--- C:\Users\Guest\AppData\Local DB Check 9:26:30.86
--- C:\Users\Michael\AppData\Local DB Check 9:26:30.86
--- C:\Users\User\AppData\Local DB Check 9:26:30.86
--- C:\WINDOWS\SysNative\config\systemprofile\AppData\Local DB Check 9:26:30.86
--- C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local DB Check 9:26:30.86
--- C:\WINDOWS\serviceprofiles\networkservice\AppData\Local DB Check 9:26:30.86
--- C:\WINDOWS\serviceprofiles\Localservice\AppData\Local DB Check 9:26:30.86
--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs DB Check 9:30:11.71
--- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs DB Check 9:30:27.10
--- Tasks DB Check 9:30:36.76
--- Downloads DB Check 9:30:43.63
--- C:\Users\barry\AppData\LocalLow DB Check 9:30:52.25
--- C:\Users\Michael\AppData\LocalLow DB Check 9:30:52.25
--- C:\Users\User\AppData\LocalLow DB Check 9:30:52.25
--- C:\WINDOWS\SysNative\config\systemprofile\AppData\LocalLow DB Check 9:30:52.25
--- C:\WINDOWS\sysWoW64\config\systemprofile\AppData\LocalLow DB Check 9:30:52.25
--- C:\WINDOWS\serviceprofiles\networkservice\AppData\LocalLow DB Check 9:30:52.25
--- C:\WINDOWS\serviceprofiles\Localservice\AppData\LocalLow DB Check 9:30:52.25
--- Tasks2 DB Check 9:32:36.12
--- Documents DB Check 9:33:49.66
--- C:\Users\Michael\AppData\Roaming\Songbird2\Profiles\awukmbfj.default DB Check 9:34:14.05
--- C:\Users\User\AppData\Roaming\Songbird2\Profiles\x8zo9gu0.default DB Check 9:34:14.05
--- C:\Users\Public\Desktop DB Check 9:34:21.41
--- C:\Users\User\Desktop DB Check 9:34:29.24
--- Services DB Check 9:34:42.86
--- FF prefs.js DB Check 9:35:18.01
--- Emptyclsid 9:37:24.90
--- Del by CLSID 9:37:27.82

 

[Liger]

*It didn't upload*

 

[Liger]

Here is the updated finished upload

 

[TwinHeadedEagle]

Did you perform FRST fix? How is your PC behaving now?

 

[Liger]

I did first list so I guess that means I didn't do the one your talking about. My computer is still behaving the same, my connection was cut this morning no apparent reason

 

[Liger]

One thing I have noticed is that I can't remove norton security scan. I saw that could leave my computer vulnerable to a hack

 

[TwinHeadedEagle]

Can you attach Fixlog.txt produced from my latest post? You can remove Norton, it won't leave your computer vulnerable.

 

[Liger]

I removed norton

 

[Liger]

I re checked zemena. Just to keep things up to date

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[Liger]

Here are the 2 results you requested

 

[TwinHeadedEagle]

Logs doesn't indicate signs of active infection.

 

[Liger]

Most of the keys of my keyboard stopped working and so I attached a new one to my laptop using a usb. But the button's used to scroll up quickly like it does for no reason are not working so i don't believe it's my laptop. Just in case It is by any chance It was the laptop keyboard and not the attached one I tried uninstalling it. But it didn't uninstall. I previously had alot of other issue's with my computer to do with hacking so I'm definitely not putting much thought into the keyboard being a problem.

 

[Liger]

I am now logging keystrokes

 

[Liger]

I disabled certain keystrokes using sharp keys and surprise surprise that will stop working at convenient moments. The fact that this is the thing that stops working and nothing else leads me to believe that this is somebody maliciously doing this. I would have put my house on that anyway. It looks like they can hide and sneak past all of the scan's I've been given. Do you think I would get help more suited to my needs elsewhere? If so where do you suggest?

 

[TwinHeadedEagle]

Check Disk

• Press the
  
  + R on your keyboard at the same time. Type cmd and click OK.
• Copy/Enter the command below and press Enter:

• chkdsk C: /r

• You should get a message to schedule Check Disk at next system restart. Please type Y and press Enter.
• All you should do now is to restart your PC and let the Check Disk process finish uninterrupted.

Check Disk report:

• Press the
  
  + R on your keyboard at the same time. Type eventvwr and click OK.
• In the left panel, expand Windows Logs and then click on Application.
• Now, on the right side, click on Filter Current Log.
• Under Event Sources, check only Wininit and click OK.
• Now you'll be presented with one or multiple Wininit logs.
• Click on an entry corresponding to the date and time of the disk check.
• On the top main menu, click Action > Copy > Copy Details as Text.
• Paste the contents into your next reply.