Solved I think somebody is remote controling my PC

"When I checked active connection it literally says ´´this device XXXX is connected from russia´´"
I need more details. You checked connection with what?
 
Broni said:
"When I checked active connection it literally says ´´this device XXXX is connected from russia´´"
I need more details. You checked connection with what?
Click to expand...
When I got info from steam on gmail.

I looked on ´´active devices´´ where I saw name of my computer but connected from russia (im from czech republic) thats how he bypassed 2 phase security, he must been connected to my PC somehow
 
Broni said:
"I got info from steam on gmail."
What does it mean?
Click to expand...
I hope you get it now.


How I found that somebody is hacking my PC

Ive got email from steam to gmail, that my steam password has been changed. When I checked gmail all those emails about password change were in TRASH/BIN so that was the moment I realize somebody is remotely on my PC (I sucessfully recovered my steam, also recovered battle.net account) beacause:

1: I have 2 phase verification thru my mobile number so its not possible to login to my gmail from non-verified PC/phone whatever.
2: when I checked my active devices using GMAIL I saw
Device : (name of my computer) and location from russia (even im from czech republic)

hope you understand me now, why im still scared that somebody can be joined to my computer.
 
I suspect those emails were simply fake.
Was in fact your Steam password changed?
 
Broni said:
I suspect those emails were simply fake.
Was in fact your Steam password changed?
Click to expand...


100% legit, I had to write on support on steam, bcz I really cant login to my account due to email change and password change. Also I had to write to blizzard support and they recovered my email coz hacker changed it.

And today o logged to my computer and I didnt see my mouse cursor and had to restart it to see it...
 
It's simply possible that your Steam account has been hacked.
There is no sign on any intrusion on your computer.

Said that...

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
[COLOR=#ff0000][B]This is a very crucial step so make sure you don't skip it.[/B][/COLOR]
Download [IMG]http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.pngDelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:
  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore
  • Reset system settings
Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

6. Run Temporary File Cleaner (TFC) and AdwCleaner weekly (you need to redownload these tools since they were removed by DelFix).

7. (optional) If you want to keep all your programs up to date, download and install FileHippo App Manager.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

10. Please, let me know, how your computer is doing.
 
Broni said:
It's simply possible that your Steam account has been hacked.
There is no sign on any intrusion on your computer.

Said that...

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.pngDelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:
  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore
  • Reset system settings
Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

6. Run Temporary File Cleaner (TFC) and AdwCleaner weekly (you need to redownload these tools since they were removed by DelFix).

7. (optional) If you want to keep all your programs up to date, download and install FileHippo App Manager.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

10. Please, let me know, how your computer is doing.
Click to expand...



[/QUOTE]


Thank you, so tell me how he logged to my gmail from russia over my PC?

As I said, in active devices on gmail I saw name of my computer with location from russia (im from czech republic)

Also he deleted STEAM emails on MY gmail
So that basically means he was using my gmail from my PC from russia without any sign of my 2 phase security on my GMAIL...
 
"in active devices on gmail I saw name of my computer with location from russia"
How do you actually check this?
 
When you go to gmail>security>active devices>this device>location russia
It literally said that my device(PC) is active from russia
 
I didnt made screenshot when it was recent, now that shows my location.

But I can show you how it looks now.

Where you see czechia I had russia in that day when hacker attacked me
 

Attachments

  • thisss.jpg
    thisss.jpg
    11.5 KB · Views: 48
Well, possibly one of our tools fixed the issue.
I suggest you change your gmail password just to be on a safe side.
 
Thank you, but as you said you didnt see any virus/connection to my PC.
Already changed all passwords and deleted all saved passwords in chrome/google account.

Do you think im safe now?
 
Well, for now, it looks like you're OK.
If you see any changes you can always post back here.
Good luck and stay safe :)
 
Broni said:
Well, for now, it looks like you're OK.
If you see any changes you can always post back here.
Good luck and stay safe :)
Click to expand...

Thank you very much Broni :) im happy that you helped me.

Have a great day :) I think you can close it here. bye bye
 
You're very welcome
file.php
 
  • Like
Reactions: SymBio
Hello Broni, im back here and today I checked my GMAIL and it again says its logged from russia Even im from Czech Republic

Also, it shows that my account is logged on MY DEVICE in FIREFOX but I dont have firefox installed. Whats going on here?

I didnt install programs since we did all these virus scans before.

Here is IP of that Russia that is shown like my computer
5.167.163.61

Here is my normal IP

46.30.239.242


Sadly I cant upload image from iphone here so I hope its okey to paste link to screenshot

ibb.co

IMG-7197

Image IMG-7197 hosted in ImgBB
ibb.co ibb.co
ibb.co

IMG-7200

Image IMG-7200 hosted in ImgBB
ibb.co ibb.co
 
Last edited:
Did you try to change your Gmail password?
Possibly your Gmail account got compromised.
 
Yes I did, all passwords have been changed.

Werid thing is, if I keep refreshing that page where location is, it change from russia to czech and back over and over again.

Also, WHY it says MY DEVICE is LOGGED on CHROME and FIREFOX? I dont have FIREFOX...
 
Did it, nothing happend, still doin same.

Broni, you didnt answer my question. Why it shows MY device is logged in firefox even I dont have firefox installed...
I bet hackers are using firefox...
 
Already Enabled, but its pointless since it shows MY DEVICE as logged in FIREFOX.

Becuase if I log in into Chrome it automaticly verify MY computer and firefox is logged in too.... I never had Firefox so its weird...

And if you remember, they used MY GMAIL to delete emails without any need of 2 phase verification, because they did it somehow on my device.
 
You must log in or register to reply here.

Similar threads

O
Syngate - what is it and why has it shown up on my laptop?
Replies
2
Views
306
Nelson28
N
bruno167573
What should I do?
Replies
17
Views
238
HardReset
H
midian182
Google confirms it is definitely not killing off Gmail after hoax goes viral
Replies
4
Views
180
sdms96825
S

Latest posts

Back