AIM Screen name Hijacked! :(

[nscopex]

Lol.. here my advice.If you dont know what you are doing dont mess with the registry or msconfig you will mess something up. As for the AOL Trojans. ALl trojans when made from the client program have a base name "server.exe" any trojan can be named anything but the base is always server.exe. Onto the "ohh he did a virus scan." When do you think a virus is deteactable? After people have had it. You think they magically know what a virus is? No its gotta be found. Which is why trojans are undetectable for a period of time. Before responding with your silly little answers, learn what yuor talking about. Do what i suggested Find a trojan scanner use it. then goto http://www.pandasoftware.com and use there active scan utility. It contains a much larger database than norton or mcafee. and if anyone wants to debate me on my answer ill rip them apart because everything i said is verifiable. so dont start with me children i know what im talking about

[nscopex]

From your screen shot i see theres alot wrong. One of your processes shouldnt be running. Well more than one. If you can see the user names of the processes arent there. Meaning something stopped that from loading. So find that problem and take care of that. just close processes of things you know you dont need. and if you dont know respond back and i might take the time to tell you what they all are.

Okay... I manage to run my Anti-Virus and those ones that you recommended too..

I don't remember exactly what the names where... but it came up like 7 trojans
*those 2 that I listed plus 5 different ones*

Plus a backdoor too. *Backdoor.A <--- or something like that*

I wished it could log those file names.. but it didn't.

As far as messing around with the registry... I don't know if I really should do that cause I'm not really a "computer professional." Sure I know alot about them.. but not that advanced yet. hehe

I was thinking.... would it be ok just to re-formatt my Hard Drive and re-install my OS? o.o

also... How the "hacker" mess around with my computer
is that some files of mine would be deleted... then restored the next day.
Like my pictures, videos,.. stuff like that.

I appreciate all the help from you Dragon31.
Thanks so much. ^.^ !

Oh btw... >.> not that it really matters or anything but... I'm a girl actually.

[Dragon31]

Sorry! What I ment to type was; do not do what he sugguested. Thank goodness you didn't do that. I should be more carefull when editing my posts as of not to delete any words by actident...

Anyway, now back to the problem. If you have forgotten the trojans you had, you can access your AV log. Many times it automaticlly saves your log. I do not know what anti-virus program you have, but it usually explains how to do retrieve it in the help file.

Changing (edit: renewing) your IP would be a good idea, as well as changing your e-mail and AIM screen name. All this would prevent this person from hijacking you again. Once someone knows your IP, it is easy from them to infect your computer again. Thus, changing it would prevent this. I also reccommend that you try reinstalling ZoneAlarm. After you download it, go offline and then install it (so you won't be unprotected for even a secound)Your firewall should be catching all these trojans, so it may have gotten crupted due to viruses. Reinstalling might fix it, but I do not know for sure.

As for reinstalling your OS or hardrive... It is really up to you. If you have important documents on your hardrive and are worried that they will be stolen, you may want to consider this. But I can not make this decision for you.

If your anti-virus program was unable to remove the trojans, try going into safe mode (safe mode without networking) and running a scan.

If none of this helps, feel free to request more help.

By the way, I am not a professional. Anyone feel free to correct me if I have explained anything wrong. This is off of my studies and understanding. I won't be insulted if you do... And nscopex, I never said you were wrong. Your (from what I see so far) as good with this as anyone around here. I'm just trying to help based off of my understanding.

[Dragon31]

You there? Did my directions solve the problem?

[Rusty]

Originally Posted by Dragon31

Yeah... It must be freaky to have someone log on all of a sudden. You know that message that says "You are logged in from 2 locations"? Sometimes I get that as a connection glitch and it scares the heck outta me!

I change my password when that happens.

[Dragon31]

Same here... You can never be too sure.

Well I to reformatt my Hard Drive since I was getting a bit too frustrated about my Anti-Virus ( AVG ) and all of those damn trojans.
But so far, everything seems to be ok

Thanks so much all your help Dragon31
*gives a friendly hug*

Oh and is Norton a better anti-virus than Mcafee that you know of? o.o

Thanks again for everything

[Dragon31]

No prob. In my opinion, no anti-virus service is better or worse (although there are some are just plain crap, lol). Each have it's advantages and disadvantages, so I can not really suggest which one is better. Both (in my opinion) are good.

Anyway, I am glad to hear the problem is solved. But before signing back on using AIM, I really do suggest you create a new account and (if you know how to) renew your IP address. If you don't, you are very much at risk at getting hijacked again. You can also save your buddylist if you use AIM, so getting all your buddies back shouldn't be too hard.

[Dragon31]

Just doing a followup. Was the problem fixed? What were your end results?