Gaming I need help i think iv been hacked.

[kjb1686]

Okay my computer started acting weird as browser closing i reopened thinking nothing of it then all of a sudden explorer closed and on top of that a chat box opened and started chatting with me. What i did was reboot into safemode and so far nothing has happened i am running a scan right now and found a folder by the name of Dr.Watson on my drive. I don't know what i should do.

 

[Zaertix]

Scan and remove infected files. Spybot, Malwarebytes, and a good AV.

 

[kjb1686]

I am running nod32 right now i will use the other two when they finish this scared me a lot i have no idea how they got in.

 

[Rydian]

Malwarebytes is more likely to get it than an AV, as it sounds like malware, not a viral infection.

Check the preventative section of the sticky here on viruses to learn how this stuff gets in.

 

[kjb1686]

Okay well my av and malwarebytes found a few things i will restart my computer and see if i am still hacked or not crossing my fingers.

 

[Originality]

To me it sounds more like a Trojan and dropper than being hacked. Hackers don't tent to leave obvious traces.

 

[kjb1686]

Well whatever it was seems to be gone after my scans so i don't know what it was but it is gone for now at least it seems.

 

[dorayaki95]

are you using windows? lol

 

[koimayeul]

Lol dr watson, what a trickster. Well hopefully its fixed for you.

 

[Rydian]

Dr. Watson's a debugger, I've never seen any malware using that name.

 

[TheDreamLord]

Dr. Watson's a debugger, I've never seen any malware using that name.

http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99

Seems very old. Hopefully it's gone now.
Shoudl be easy to remove anyway, good luck op.

 

[Rydian]

Yeah, given that autoexec.bat stopped being read with the move from 9X to consumer NT-based products (meaning 2K/XP), I don't even think that thing's capable of infecting a modern system.

 

[kjb1686]

Well it is almost 5 where i am and so far i have had this computer running for a while and whatever it was seems to be gone. Nothing has popped up or anything so i don't think that it is still here but man that was scary when it happened. Anyway thanks for all the help you guys have given me in helping resolve this problem.

 

[Rydian]

It's not uncommon to get something like that (back when I was doing online tech support I literally saw it daily), just make sure to keep all your shit updated. All those annoying java/flash updates are meant to close the security holes that these things use to get in.

 

[kjb1686]

Thats the thing though this computer is as up to date as can be all my av software, malwarebytes, java and everything else is updated so i don't know how they found the hole to get in. Oh well at least whatever got in is gone so that is fine with me.

 

[Rydian]

Could be something that stopped getting updates so holes in it aren't being patched, or a hole that hasn't been patched yet.

Or you or somebody else may have simply clicked something without meaning to. Sites are bastards in implementing invisible DIV overlays nowadays to make sure that your first click on a site is clicking a giant invisible link for an advertisement (which gets through browser popup blockers since the browser knows that you clicked it so it thinks you meant to and allows it through).