Is my computer still infected? (6)

1 Name: 4n0n4ym0u5 h4xx0r : 2009-09-06 17:35 ID:k50dji9+

A few days ago, my ISP contacted me and told me that a huge amount of spam emails had originated from my computer. So, I ran three anti-virus scans each time using different software and deleted a few files they had found, and thought that that was it.

So, just now I was banned from 4chan "for being a spambot," which was strange since I had only made two posts today.

I just used ClamWin to run another virus scan and it came up with nothing. I think there's still something in my computer, and since ZoneAlarm hasn't reported of any intrusions either, I don't think the earlier scans had been that effective after all.

What should I do? My ISP threatened to cancel my account in a week if the spam emails didn't stop. How do I know my computer is clean and not sending anything?

2 Name: 4n0n4ym0u5 h4xx0r : 2009-09-06 20:56 ID:Heaven

did you wipe your hard drive and reinstall from scratch? if you didn't, do that. once a machine has been compromized that's the only way to be sure you got everything.

3 Name: 4n0n4ym0u5 h4xx0r : 2009-09-06 22:21 ID:k50dji9+

>>2

> wipe your hard drive and reinstall from scratch

I was afraid you'd say that. :-/

4 Name: 4n0n4ym0u5 h4xx0r : 2009-09-09 16:44 ID:TLba7I8y

are you using windows? If so, restart the computer, connect to the internet, but don't open any browser, or anything. Open the command line, and type "netstat". That command should give you a list of your open connections. If there is a hidden routine sending spam, it will be listed there.

Of course, it could have been that you are using a Wi-fi connection, and someone else has been hijacking it. Happens all the time. If possible, use only wires.

Btw, if you are going to de a clean install, do a clean install, don't use one of those manipulated windows that claim to have it all; Most of the time they only have junk in them, and I've seen some of them being already infected with shit out of the box.

5 Name: 4n0n4ym0u5 h4xx0r : 2009-09-21 14:01 ID:c+taqAZy

I would try using a program like Spybot Search and Destroy. Most of the current A/V programs tend to discriminate, if it is a "VIRUS" then they have the signature for it, if it is "SPYWARE/MALWARE" many of them don't unless you buy their deluxe type packages.

www.safer-networking.org is where you would get Spybot from, it's a very good application, and free.

6 Name: 4n0n4ym0u5 h4xx0r : 2009-10-15 04:35 ID:Heaven

possibly a rootkit on your pc, eg. botted. there is actually no 100% foolproof way to make it clean again except complete format. but even then it still might be there, but this is rare.
so format and reinstall

This thread has been closed. You cannot post in this thread any longer.