Was my pc hacked?

WojtasRed · Aug 28, 2012, 06:47 AM

Every time when I start PC and connect to internet, this massage in HijackThis appears:

Quote:

O17 - HKLM\System\CCS\Services\Tcpip\..\{F052A8D9-84A0-4405-860B-9C593D51C8E0}: NameServer = 212.2.96.54 212.2.96.52
Do you know the IP or Domain '212.2.96.54 212.2.96.52'? If not, fix this entry.

I can fix it, but after restart my system and connect to internet, this entry appears again in HijackThis. Even when I remove this entry and reconect to the internet, this problem back again. When I disconnetct my PC from the internet, HijackThis doesn`t detect this problem.

How can I remove this entry permanently?

Law-II · Aug 28, 2012, 07:36 AM

Hi

This may help - http://ip-lookup.net/ , use the *Lookup an IP address : box; at the bottom of the page to see who the IP or Domain belong to.

atb (all the best)

Law-II

95Viper · Aug 28, 2012, 09:31 AM

Seems those are Polkomtel (Plus+) 's DNS nameservers.

Did you change your DNS servers or install setup software from (Plus+) Polkomtel.
Who is your service (internet,video, cellular access, software etc.) provider?

Check or change your DNS servers:Change TCP/IP settings

If you want to try OpenDNS, here is their instructions:Change your settings: Configuration for Windows 7

Here is a useful couple of tools.
One for changing your DNS server easily:Dns jumper v1.0.4
And, one to edit your hosts file:BlueLifeHosts editor v1.0

If you do not remember changing your DNS or have no software or dealings with Plus+ (Polkomtel), then run Malwarebytes and your favorite A/V programs to check for any baddies.

I do not believe that has anything to do with you being hacked.

WojtasRed · Aug 28, 2012, 11:29 AM

Yes, I`m using Polkomtel (Plus+) software. They`re my internet suppliers. I`ll try with Malwarebytes...

Edit:

OTL results:

OTL.txt

Code:

http://wklej.org/id/820080/

Extras.txt

Code:

http://wklej.org/id/820082/

Could someone take a look?

Mr.EVIL · Aug 30, 2012, 12:07 AM

what is HijackThis ?

Steevo · Aug 30, 2012, 12:17 AM

Hijack this is not for users who ask what it is, unless they are asked to use it by users who know what it is.

*******************************

Its just your DNS or WINS being hijacked by your ISP's questionable software.

If you don't like to see this message use OpenDNS or Google for DNS lookup.

Jetster · Aug 30, 2012, 02:20 AM

Exactly

Processor:	AMD Phenom II 720 3x2,8 GHz BE
Motherboard:	GIGABYTE GA-MA790X-UD3P AM2+ Bios 7b
Cooling:	Scythe Zipang SCZP-1000
Memory:	2x2GB A-Data Extreme PLUS DDR2 800MHz CL4
Video Card:	PALIT GeForce GTX 560Ti 1GB
Hard Disk:	HDD SEAGATE 250GB ST3250410AS SATA II 16MB
Optical Drive:	LG DVD Recorder ;)
CRT/LCD Model:	Gateway FPD2275W `22
Case:	Shinobi SH09A
Sound Card:	ALC889A HD audio 106dB SNR
PSU:	Thermaltake Toughpower W0116 750W
Software:	Windows 7 Ultimate 64bit

Aug 28, 2012, 07:36 AM	#2
Law-II Join Date: May 2011 Location: Mainland Britain Posts: 885 (1.20/day) Thanks: 708 Thanked 308 Times in 274 Posts System Specs	Hi This may help - http://ip-lookup.net/ , use the Lookup an IP address : box; at the bottom of the page to see who the IP or Domain belong to. atb (all the best) Law-II Last edited by Law-II; Aug 28, 2012 at 07:40 AM. Reason: adjusted link*

System Name:	H2o Box
Processor:	Intel(R) Core(TM) i7 CPU 975 @ 4200 Mhz
Motherboard:	Asus Rampage II Extreme x58
Cooling:	Dual Loop CPU & GPU H2o
Memory:	Gskill RipjawsZ 16Gb 9-10-9-28 2T @ 2021Mhz
Video Card:	XFX 5970 Black Edition H2o 880 Core 1250 Mem
Hard Disk:	Kingston 64Gb SSD Seagate 7200rpm
Optical Drive:	LiteON
CRT/LCD Model:	Panasonic GT30 46'' 1080p 3D HDTV
Case:	Corsair O-800D
Sound Card:	Creative Sound Blaster X-Fi Titanium Fatal1ty Pro
PSU:	Be Quiet! Dark Power Pro 1200w
Software:	Win 7 64Bit

Aug 28, 2012, 09:31 AM	#3
95Viper Join Date: Oct 2008 Location: στο άλφα έως ωμέγα Posts: 3,838 (2.29/day) Thanks: 2,032 Thanked 1,416 Times in 1,115 Posts System Specs	Seems those are Polkomtel (Plus+) 's DNS nameservers. Did you change your DNS servers or install setup software from (Plus+) Polkomtel. Who is your service (internet,video, cellular access, software etc.) provider? Check or change your DNS servers:Change TCP/IP settings If you want to try OpenDNS, here is their instructions:Change your settings: Configuration for Windows 7 Here is a useful couple of tools. One for changing your DNS server easily:Dns jumper v1.0.4 And, one to edit your hosts file:BlueLifeHosts editor v1.0 If you do not remember changing your DNS or have no software or dealings with Plus+ (Polkomtel), then run Malwarebytes and your favorite A/V programs to check for any baddies. I do not believe that has anything to do with you being hacked. __________________ Heatware: 95viper TECHPOWERUP GEAR!

System Name:	Ha/AhHa
Processor:	QX9650 SLAWN C1/i7-980x
Motherboard:	GA-X48_DS4 (F3B bios)/Gigabyte x58A-UDR3 v 2.0(Fh1 bios)
Cooling:	CNPS9900 LED/H60
Memory:	8 Gig of G.Skill F2-8800CL5D/24 Gig Corsair Vengence
Video Card:	Galaxy GTS 465/Gigabyte HD6950 unlocked w\ 1536 shaders
Hard Disk:	150 VRaptor,160 WD, 500 WD,2X 74 Gig VR(RAID0)/SanDisk Extreme 120, 2 WD VR(Raid 0),Seagate 1 TB
Optical Drive:	Asus/HP dvd1270 and Samsung
CRT/LCD Model:	ViewSonic VX2250wm-LED/Asus 266H
Case:	CM-690/CM-690 II adv
Sound Card:	On board (Realtek)/On board (Realtek)
PSU:	PC P&C 750/PC P&C Silencer 950
Software:	Windows 7 Build 7601 SP1 - 64 bit/Same

Aug 28, 2012, 11:29 AM	#4
WojtasRed Join Date: May 2008 Posts: 405 (0.22/day) Thanks: 61 Thanked 11 Times in 8 Posts System Specs	Yes, I`m using Polkomtel (Plus+) software. They`re my internet suppliers. I`ll try with Malwarebytes... Edit: OTL results: OTL.txt Code: http://wklej.org/id/820080/ Extras.txt Code: http://wklej.org/id/820082/ Could someone take a look?

Aug 30, 2012, 12:07 AM	#5
Mr.EVIL Join Date: Aug 2012 Posts: 32 (0.12/day) Thanks: 0 Thanked 0 Times in 0 Posts	what is HijackThis ?

Aug 30, 2012, 12:17 AM	#6
Steevo Eligible for custom title Join Date: Nov 2005 Posts: 5,567 (2.02/day) Thanks: 238 Thanked 979 Times in 729 Posts System Specs	Hijack this is not for users who ask what it is, unless they are asked to use it by users who know what it is. ******************************* Its just your DNS or WINS being hijacked by your ISP's questionable software. If you don't like to see this message use OpenDNS or Google for DNS lookup. __________________ “it would have been perfect....its got trains and the line"tech your kids not to do what iv done"(or similar) because i had obviously done something to warrent 2 e-thugs to come 4000miles out of their way and kill me.” -Solaris17 “yeah i failed. i noticed the "coming soon" part after i posted.” -Mussels “people are just stupid.” -W1zzard Yes I am evil, yes you can have some.

System Name:	MoFo
Processor:	AMD PhenomII 1100T @ 3.7Ghz/4.1Ghz Turbo
Motherboard:	Asus M3A32-MVP Deluxe 2202 BIOS
Cooling:	Swiftec 655 pump, Apogee GT, MCW60-R GPU, MCR360mm Rad, 1/2 loop.
Memory:	G-Skill 1200Mhz 5.5.5.15 2T
Video Card:	HD5870 1Gb HIS custom BIOS watercooled & VRM-R4
Hard Disk:	2 Agility 3 SSD RAID 0 on highpoint 640, 2 3TB RAID 0, 1 2TB and one failing 750Gb
Optical Drive:	Lite-On DL DVD
CRT/LCD Model:	Asus 1920X1200 60Hz 25.5" LCD, 46" 1080P Toshiba LCD
Case:	Rosewill R6A34-BK modded (thanks to MKmods)
Sound Card:	On Board
PSU:	750W PC Power & Cooling modded (thanks to MKmods)
Software:	Vista X64 Ultimate/Win 7 Ultimate
Benchmarks:	780 MBps read on HDD's 1052 core on 5870.

Aug 30, 2012, 02:20 AM	#7
Jetster Join Date: Jan 2010 Location: Oregon Posts: 2,850 (2.34/day) Thanks: 923 Thanked 850 Times in 623 Posts System Specs	Exactly

System Name:	Delta // HTPC
Processor:	Intel i7 3770K // Intel i3 550 3.2Ghz
Motherboard:	ASRock Z77 Extreme6 // Gigabyte GA-H55M-S2H Socket 1156
Cooling:	Corsair H100 // SILVERSTONE NT07-1156 90mm
Memory:	Corsair Vengeance 1866 16gb //Corsair DDR3 1600 4 Gb
Video Card:	HIS 7950 3 Gb //Sapphire 6670 1 Gb
Hard Disk:	Samsung 840 250 SSD, WD Caviar Blue 500// Corsair M4 64 Gb Solid State, SAMSUNG F4 2 Tb, WD 1 Tb
Optical Drive:	LG DVDR 24X // Lite on DVDR 24X
CRT/LCD Model:	HP 23xi IPS 1080p" // 50" Samsung Plasma 720p
Case:	Corsair Obsidian Series 550D // Silverstone Granada GD05
Sound Card:	ASUS Xonar DS // HDMI Bit Stream to Yamaha RX V571
PSU:	Corsair TX650 // Corsair CX 430
Software:	Windows 7 64bit // Windows 7 64bit with XBMC Eden
Benchmarks:	I scored P8756 in 3DMark 11

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
My Steam account was hacked - help please!	Red_Machine	Games	29	Dec 15, 2011 05:58 PM
I think i was hacked when I was playing everquest 2	skellattarr	General Software	9	Jun 11, 2011 05:03 PM
www.ontoorthopedics.com Was Hacked!!	flashstar	Programming & Webmastering	6	Aug 24, 2008 06:03 PM