[traveler818]

[size="4"]
Great

Though I cut power at night and my ISP insists that I do not have wifi (though I had it for 3 years with them), and that no one can access the modem remotely. When I turn the power on in the am, I find the wireless light on and changes have been made. My status has been reduced to a contact, and she deleted the entire file that had the permissions in it. I haven't explored much because I wanted to get here, but she removed my butterfly avatar, for spite no doubt. I fear she is getting even more serious-she is already obsessed, she looked like a zombie with only one goal in life--get this computer. She started by installing her own wallpaper and gadgets--personalized it for herself.

The Explorer has stopped working twice with the message that a program is causing it to stop until I click close program, but I did not open any between the 2 events.

The priest who referred her has called on some other techs to help, but I have heard nothing. I don't know if the church leaders have spoken with her yet. Her husbamd holds a high position in the churches, plural and is minister in one--that is a lot to lose if she doesn't stop. I found and copied several IP addresses under adapters--would they identify her, ie give me solid evidence if she continues? (I had hoped for honest help if I called the churches.

Popups every few minutes (blocker is on), windows & cursor jumping, lots of redirects--I think it is malware.

When I open a window to enter text, it gets super tiny--she knows my vision is poor--I think this is her shrinking the text to less than 1/2 the size you see. I changed the font size but it didn't work. So far, I can see it which keeps getting rid of the hacker priority one.

I tried without success to delete Java yesterday. Also Adobe, though I do not know if it is a threat without the flash player.

Edited by traveler818, 16 January 2013 - 01:38 PM.

[Advertisements]

Sorry about that my better half called with some food

I will be on now for a few hour

OK to work

Open Avast
[attachment=62478:Capture.JPG]

Select Additional protection > Remote assistance
Press the allow Remote control
A popup will appear with a code... PM that to me
Do not close Avast as that will break the connection
Do not press cancel
Although do the above at any time if you wish to break the connection

[attachment=62479:Capture1.JPG]

[Essexboy]

Sorry about that my better half called with some food

I will be on now for a few hour

OK to work

Open Avast
[attachment=62478:Capture.JPG]

Select Additional protection > Remote assistance
Press the allow Remote control
A popup will appear with a code... PM that to me
Do not close Avast as that will break the connection
Do not press cancel
Although do the above at any time if you wish to break the connection

[attachment=62479:Capture1.JPG]

[traveler818]

Then ignore my pm. The code is on page 5-I will get it. Then I will double check, as I took all the other steps ie Avast. Remote Assistance is open.

Edited by traveler818, 16 January 2013 - 02:33 PM.

[Essexboy]

Could you cancel that as the code is now invalid and generate a new one

[traveler818]

OK.

[traveler818]

KJH8 TWWK

[traveler818]

Control of which folder?

Should I install malwarebytes? if so, which is the real one?

Should I install a spyware program?

Best to go with Norton?

I am confused.

Edited by traveler818, 16 January 2013 - 03:30 PM.

[Essexboy]

I have returned ownership to your user folder

I have disconnected the session

You can stick with Avast if you wish .. Or return to Norton your choice

Yes install then run malwarebytes

Malwarebytes' Anti-Malware
Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

Edited by Essexboy, 16 January 2013 - 03:35 PM.

[traveler818]

Can she still access my computer? Does she have a hidden acct?

Thanks for the links for mbam--I usually had it but I have been busy with this.

I plan to run the malware cleaning guide--if I run into trouble, can I open another topic or stay here?

Edited by traveler818, 16 January 2013 - 03:39 PM.

[Essexboy]

Not as far as I can see, I have disabled shares and shared registry. So she will need to get her hands on the keyboard now

[Essexboy]

Nope once MBAM has run and shown clean, I will post a cleanup for the tools used

[traveler818]

I am working on installing mbam now. I ran into a glitch but just got an idea.

Edited by traveler818, 16 January 2013 - 04:05 PM.

[Essexboy]

OK I will be going offline shortly.. I need my beauty sleep

[traveler818]

Thanks for the warning. Here is the mbam scan:

Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org

Database version: v2013.01.16.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Carrie :: CARRIE-PC [administrator]

Protection: Enabled

1/16/2013 2:36:36 PM
mbam-log-2013-01-16 (14-36-36).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 221995
Time elapsed: 1 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Edited by traveler818, 16 January 2013 - 04:43 PM.

[traveler818]

If she can no longer get in, Thank you! I will give it a few minutes while I eat to see if you are still here, and have the cleanup tool.

I had to disable my malware protection to install MBAM--could not find a way so I uninstalled it and reinstalled the Norton 360 trial version.

The computer is already running a bit faster, not sure of overall behavior yet.