I cant visit certain sytes because I just got hacked!

[climax]

somebody help me! Some bastards hacked into my comp and now I can't open simchamber.net at all..
I have tried using different browsers like opera, mozilla and Int. explorer but the result is same..

any idea how i can fixed this??

[climax]

please! someone! I already check the Internet option on my web browsers but I just can't figure out what's wrong...

I'm desperate...

[crunchie]

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Download the update from here if you have problems.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Make sure that you restart the computer.

[climax]

Malwarebytes' Anti-Malware 1.42
Database version: 3437
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

12/27/2009 10:05:38 PM
mbam-log-2009-12-27 (22-05-38).txt

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 263288
Time elapsed: 4 hour(s), 19 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
D:\DocPapa\Willy2\CD\VP\NewSample8\GetDskSerial\GetDiskSerial.v2.0.0.Incl.Keygen-Lz0\keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\MasterCD\UTILITY\Winrar\WinRAR 3.80 Full\keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.

[crunchie]

There you go. Keygens will do it every time.

How is the pc?

[climax]

actually the problem is still there.....

I still can't browse simchamber.net at all..
well I still can browse other sites but its bothering me..

[crunchie]

Please download ComboFix by sUBs from HERE or HERE

• You must download it to and run it from your Desktop
• Physically disconnect from the internet.
• Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
• Double click combofix.exe & follow the prompts.
• When finished, it will produce a log. Please save that log to post in your next reply.
• Re-enable all the programs that were disabled during the running of ComboFix..

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Run Combofix ONCE only!!

==

Download HijackThis Executable from here. Save it to your desktop.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and then go to the format Tab and make sure that wordwrap is unchecked. Copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.

[climax]

uhm I must said thank you bcause you care bout my problem but I think the cause of my problem is somewhere in my setup since the 'suspect who wreck my privacy' is someone who lived with me honestly *sigh*...

well it doesn't seem that he would willingly fixed it back so could you tell me how I can fixed this manually?

[climax]

ah and also when I look into the page info its written:

Address :http://simchamber.net/
type : text/plain
Render mode : Quirks mode
Encoding : ISO-8859-1
Size: 0 kb

I thought it was weird because normal page would written like this:
Address :http://www.daniweb.com/forums/thread248999.html
type : text/html
Render mode : Standards compliance mode
Encoding : UTF-8
Size: 96.09 KB (98,396 bytes)

Any idea?

[crunchie]

Go to the view button on the browser and under encoding, select Automatic.

[climax]

Its already set Automatic..
any other way?

[crunchie]

Could try what I suggested in post #7.