Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Malwarebytes found potentially unwanted modification, what else do nee


  • Please log in to reply

#1
Latters87

Latters87

    New Member

  • Member
  • Pip
  • 2 posts

I have just run a Malwarebytes scan. I have run a few since last night when I discovered that my Twitter may have been hacked. No issues were found.

 

Now a Malwarebytes scan has found the following:

 

(copied from the report): PUM.Optional.HomepageControl, HKU\S-1-5-21-1522325972-3429824536-1209266036-1001\SOFTWARE\POLICIES\MICROSOFT\INTERNET EXPLORER\CONTROL PANEL|HOMEPAGE, Replaced, [16277], [293330],1.0.1775

 

What else do I need to do to make sure the computer is safe?

 

I am so sorry to post multiple threads but I am not sure if the two phenomena are linked or not. I am thinking not, else Malwarebytes would have flagged something-up earlier. And if my entire computer has been hacked it could be devastating in effect as I use this for everything.

 

Folks, please help. :-(

 

If someone could also help with the Twitter issue I would be grateful, as to what to do. I had a an email saying someone had tried to access it and I clicked on the link. That was a stupid thing to do but I think it was legit, it was from [email protected].

 

I look at my login details and use an IP tracker to see who they are. What I fond is this:

 

1. A load of accessing of the account in the early hours of the morning. The IP addresses are all registered to my ISP and are pinpointed by the various IP trackers to be in or near my town. I use apps like TwitLonger, could these accesses be from that? Because you have to give it access to your account

 

2. A log-in from Virgin Media, which is not my ISP. All the other IP addresses begin with 92, 88, 85 and 92 EXCEPT this one that begins 77. Curiously, the IP trackers pinpoint this IP address not just to my town but to an area of it which is literally a mile away. Was this a hack, or are the IP trackers mistaken in saying it was a Virgin Media IP?

 

What I have done since is to change the password at an internet cafe and added two-step verification. 

 

I am desperate for help, I rely on this computer for me and an elderly relative who is housebound. I don't drive so I order her grocery shopping and other provisions on it. :-(


  • 0

Advertisements


#2
Latters87

Latters87

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts

I am running Windows 10, the latest update. Shall I post which security programs I run, or is that a risk as I may be keylogged, and it gives any hackers an insight into what they need to disable?


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP