Question Download From A Torrent Site, FB Hacked (With Messenger Contacts Messaged), Locked Out Another FB A/C, Twitter Hacked. "Invisible" Window On Desktop,

Oct 7, 2021
5
0
10
0
"Windows 10.0.19043 Build 19043
Thinkpad P50 (Intel i7 6820HQ, 24GB RAM, Quadro M1000)"

I've been trying to figure out if my laptop is still infected - this dum-dum installed an Adobe Acrobat from a torrent site (thinking it was reputable) and it turned out it wasn't!! When I pressed install, my browser tried to redirect (a program blocked it) and I suspected other dodgy stuff was going on.

I ran Malwarebytes (free), Spybot, adwclean, went out for a few hours. Also have Spyware Blaster on here.

My Facebook started getting weird Messenger messages to all contacts (!) whilst I was away from the laptop (still logged in, tabs open). Basically someone saying as "me" that they couldn't access their bank account and could they help?

(I tend to use Mozilla the most with uBlock Origin, Edge rarely).

I saw it when I got home, profusely apologised to everyone and logged out unusual devices, changed my Facebook password.

Changed my Facebook, ebay, Paypal passwords, and assumed I was okay. (edit: Forgot to say, did a System Restore as well).

A week or two later, I realised my other (rarely-used) Facebook account (I have two) had generated an "unusual activity on your account" email and it was locked. There were earlier emails saying How To Use Facebook Business, How To Open A Zingiber Account. Big pain there, as I don't have this one tied to another email account or phone number and used a fake DOB (it's a work group account, I didn't want personal crap on there). I'm still locked out, even though I contacted FB on Twitter and submitted a Contact Form on their site!

I noticed on the bottom-right of Desktop there was an invisible "window" appearing sometimes, which could be a sign of rogue malware. Spybot, Malwarebytes, Norton Power Eraser weren't finding anything.

Today, my Twitter account was hacked (albeit for a few hours only) - changed my name and started Liking and Retweeting some Crypto crap. I flagged my account as being hacked and logged all devices out.

Looked at Mozilla addons: User-Agent Switcher was on there and I hadn't added it!!! This really made my blood run cold, I didn't know what it was, but it didn't sound good. I removed it, did a Disk Cleanup and deleted Temporary Files. Refreshed Firefox, checked there were no strange Home screen redirects. Checked my Programs list on Windows for weird programs. Looked at Task Manager to see if my CPU was being used up on anything weird (it's fine).

Hotmail seemed to have "unsuccessful attempts" from all over the world, over the past few weeks, which was a bit concerning. I logged out all devices and reset my Hotmail password. I ensured there was no email Forwarding set and enabled 2FA.

Changed my Twitter password, and Facebook (the one I still have), just to be sure.

How can I ensure my laptop is clean? People used to ask for a Hijack This log file, but not sure if that would help, as I don't think it's been updated for years.

I've tried to Reset this PC, but I'm not sure if I need Supervisor access (this is an ex-business lease Thinkpad) as it won't find my USB device and won't let me go any further.

I've run RKill, ESET Online Scanner, MacAfee Rootkitremover. Put my laptop in Safe Mode and ran Kaspersky's Rootkit Removal Tool and TDSSKiller (one of those found something, not sure what). Emsisoft (which I've just run) found something (for once I took a screenhot - deleted the PUP file).

Thanks for any help.
 
Last edited:

COLGeek

Cybernaut
Moderator
Time for a full wipe and clean install of Windows and your apps. This is a prime example of why you don't want to use pirated content.

 
Oct 7, 2021
5
0
10
0
I would, but as I said, I'm a bit stuck with that. I'm having problems resetting this laptop (it's ex-business lease - bought from a UK site called itzoo, perfectly legit). It either comes up with errors when I try to reset from the boot SSD or can't "see" the bootable Windows USB I've got.
 

COLGeek

Cybernaut
Moderator
I would, but as I said, I'm a bit stuck with that. I'm having problems resetting this laptop (it's ex-business lease - bought from a UK site called itzoo, perfectly legit). It either comes up with errors when I try to reset from the boot SSD or can't "see" the bootable Windows USB I've got.
Do you have access to the system's BIOS? Can you manually select the boot device?
 

USAFRet

Titan
Moderator
Mar 16, 2013
147,419
9,347
175,390
23,024
Not "reset".
Boot from a Win 10 of the same version, and a full clean install.

 
Oct 7, 2021
5
0
10
0
Yes, I can set boot device but it doesn't see the USB pen drive (bootable Windows 10).

I've tried Resetting Windows "from the cloud" (a new-ish Windows Update addition) and it downloaded fine, but when I booted up it said there wasn't enough space (my boot SSD is 256GB - data is on a 512GB SSD).
 
Oct 7, 2021
5
0
10
0
I'm trying to avoid doing a full reinstall but that may be my only option. The boot SSD has plenty of free space -around 155GB. For some reason, my Thinkpad won't see the Windows 10 USB on here.

The bootable Windows 10 stick does work, it was used recently on my partner's PC when it was playing up.

I'll try again with a clean install.
 
Oct 7, 2021
5
0
10
0
Used a different bootable Windows 10 USB, still the same problems as before. Chose the option to totally wipe my data and reinstall Windows, but I get stuck here (same as when I tried a simpler Reset).


Tried to choose the 256GB SSD to install Windows (there's a recovery partition on there too).

Tried F11 to select Recovery and for a split second "...Not Detected" comes up.

Thanks anyway. I'll try elsewhere.
 
Last edited:

ASK THE COMMUNITY

TRENDING THREADS