Jump to content


Photo

PLEASE HELP!


  • Please log in to reply
2 replies to this topic

#1 fgalante

fgalante

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 03 September 2014 - 05:26 PM

I'll try and put this in a nutshell. I am married to a highly insecure man who is incredibley suspicious of me, even though I have never given him reason to doubt me, and spend my time chasing a toddler around.

Last night he was scouring my laptop in files I didn't even know existed. He has apparently found "evidence" that I am playing him for a fool. In this folder which was found

 

<?xml version="1.0"?>
<config version="1.0" serial="10" timestamp="1409523640.29">
  <Lib>
    <Account>
      <Migration>63</Migration>
      <OMigration>1</OMigration>
    </Account>
    <Alerts>
      <CleanupTime>1409523576</CleanupTime>
    </Alerts>
    <Call>
      <MissedCallsRegistrarAnchor>https://api.mcr.skyp...egistrarAnchor>
    </Call>
    <CentralStorage>
      <LastBackoff>0</LastBackoff>
      <LastFailure>0</LastFailure>
      <LastSync>1409523580</LastSync>
      <NeedSync>0</NeedSync>
      <SyncSet>
        <p>
          <avatar>ebbb425d:2</avatar>
          <email>8a68d8e9:2</email>
          <mood>3c79a6c7:2</mood>
          <profile>78a6b343:2</profile>
        </p>
        <u>
          <alex.2Ecand3333>ca606fd2:2</alex.2Ecand3333>
          <amabote29>fb8feee7:2</amabote29>
          <azeemlover>d13327f2:2</azeemlover>
          <borabro2012>266bdafe:2</borabro2012>
          <david93412>8d0f5c19:2</david93412>
          <echo123>9db4df93:2</echo123>
          <hornyboy1234567>22bc8d61:2</hornyboy1234567>
          <jhon.2E234>3809f81a:2</jhon.2E234>
          <live.3Ahorny.2Ecock_1>3e6d49d2:2</live.3Ahorny.2Ecock_1>
          <maxmath941>1e62abfd:2</maxmath941>
          <pussyjeb1>54487482:2</pussyjeb1>
          <stablelad999>3070637b:2</stablelad999>
          <teksen34>567aa13b:2</teksen34>
        </u>
      </SyncSet>
    </CentralStorage>
    <Contacts>
      <Migration>3</Migration>
      <MigrationEAS>1</MigrationEAS>
    </Contacts>
    <Conversation>
      <ConversationStatistics>
        <ConnectivityTimeStamp>1409523591</ConnectivityTimeStamp>
        <TimeStamp>1409523591</TimeStamp>
      </ConversationStatistics>
      <CreationTimestampFixed>1</CreationTimestampFixed>
      <DupeLegacyDeleted2>1</DupeLegacyDeleted2>
      <GivenDisplaynameFixed>1</GivenDisplaynameFixed>
      <GroupChatStatisticsEvent>
        <TimeStamp>1409523591</TimeStamp>
      </GroupChatStatisticsEvent>
      <IncomingAuthRequestInConv>2</IncomingAuthRequestInConv>
      <IsBlockedFixed>1</IsBlockedFixed>
      <LastMessageIdFixed3>1</LastMessageIdFixed3>
      <PermanenceFixed>1</PermanenceFixed>
      <PinnedOrderMigrated>1</PinnedOrderMigrated>
      <PruningHorizon>1409523576</PruningHorizon>
      <UpdateConversationsInboxMessageIdFromLastMessage>1</UpdateConversationsInboxMessageIdFromLastMessage>
    </Conversation>
    <DynContent>
      <LastIpCountry>us</LastIpCountry>
      <S>
        <LastTime>1409523580</LastTime>
      </S>
      <UILang>en</UILang>
    </DynContent>
    <EAS>
      <Version>5</Version>
    </EAS>
    <MSNPCore>
      <HomeServer>BN1MSGR2011510.gateway.messenger.live.com</HomeServer>
      <NewThreadAllowed>1</NewThreadAllowed>
      <P2PMigrationAllowed>0</P2PMigrationAllowed>
      <ProtocolToUse>24</ProtocolToUse>
      <RecentConnectionInfo>BN1MSGR2011510.gateway.messenger.live.com@2014-08-31T22:19:38Z,</RecentConnectionInfo>
      <RecentConversationsSyncState>127830a893470100000000000000000000ecd4373fb20533230a0000006675636b6d652e6578654549ce3d4001000001abb6d3ec47010000c8f9262e4801000001abb6d3ec47010000c8f9262e48010000010000000000000000c8f9262e48010000017830a89347010000c8f9262e480100000000000000000000</RecentConversationsSyncState>
    </MSNPCore>
    <Notification>
      <LastID>1000000155</LastID>
      <LastPoll>1409523579</LastPoll>
      <LastSearch>1409523580</LastSearch>
    </Notification>
    <PM>
      <pslut>1409523578</pslut>
    </PM>
    <ProfilePopulated>1</ProfilePopulated>
    <PropsManager>
      <PermaProps>410700AA02000087200000AE200000AB2000008920FBBE8EA005008B20FBBE8EA00505B920410103003939395F3700</PermaProps>
    </PropsManager>
    <PushNotifications>
      <PK>xc5242067898b9d836371fda2c09fb6c6c52f139160d987f867d9ff078c437d523ea72c0c236d8047b12fad1e8c84d26103b60679327bb03276e99cbd838c6f4c38c5bfc2</PK>
    </PushNotifications>
    <Reachback>
      <Enable>1</Enable>
    </Reachback>
    <Sms>
      <CliOptions>4105002313032D434C49204F4B000134000000000000000001350000000000000000003600</CliOptions>
      <CliOptionsFetchedOK>0</CliOptionsFetchedOK>
      <CliOptionsVersion>2</CliOptionsVersion>
    </Sms>
    <StatsSender>
      <SubmitID>6</SubmitID>
      <Type2SubmitID>
        <_1>3</_1>
        <_10>2</_10>
        <_18>2</_18>
        <_29>2</_29>
      </Type2SubmitID>
    </StatsSender>
    <Video>
      <AutoSend>0</AutoSend>
    </Video>
    <VideoMessaging>
      <Epoch>1409523575</Epoch>
      <Token>dWLUn1iaew4Vi5ndtwdvmD6DAMmvv9YpuGwIVEzw9WPVUemCxdW7LT5cKfs0JYuwrTsSC7EZS5Taq7NiagF4gabkjspf8rhnDQlQAKQlmDb21jPUYAxsiFydZM/Y8uwqQzEKVVukVwlnl1ywkADzwBVClZs0Rief5KsIOCTeWeAhkoqrugDHc1zstkZGKEtQSvlKzAOhnZC56R4Wp7IDyJ4D577ONoiY58aZ95eHwoX44544ey8gmQBvrgJWsMXNvSIXayCDCNDwXZuv3Ch0jNoH115QHb7sUWPoQrviV6bQ3YuUVrVTCO6nEjgz0Zz7trVJsb1RUA0krnJkB8v4Yw==</Token>
    </VideoMessaging>
    <table_insert_history>
      <_746cb76eb89e118a50062bab1388ebe19bfa955aaae2b08522c82b3f434b40da>1409609990 54337:21600:1409523590 19070:17280:1409523590 28236:28800:1409523590 2147485066:86400:1409523590</_746cb76eb89e118a50062bab1388ebe19bfa955aaae2b08522c82b3f434b40da>
    </table_insert_history>
  </Lib>
  <UI>
    <Devices>
      <InputName>Internal Mic (IDT High Definition Audio CODEC)</InputName>
      <OutputDevices>
        <_0>
          <Active>1</Active>
          <Handle>{0.0.0.00000000}.{5689f65f-db5b-4d94-ac68-861253785e18}</Handle>
          <Name>Speakers (IDT High Definition Audio CODEC)</Name>
          <ProductId>287143653</ProductId>
        </_0>
      </OutputDevices>
      <OutputName>Speakers (IDT High Definition Audio CODEC)</OutputName>
      <RecordingDevices>
        <_0>
          <Active>1</Active>
          <Handle>{0.0.1.00000000}.{3e8ea729-8cd7-40a5-8fb5-32d3aa6e69ae}</Handle>
          <Name>Internal Mic (IDT High Definition Audio CODEC)</Name>
          <ProductId>287143653</ProductId>
        </_0>
      </RecordingDevices>
      <RingingName>speaker</RingingName>
    </Devices>
    <General>
      <AccountCreationTime>41882</AccountCreationTime>
      <ContentPath>C:\Users\Owner\AppData\Roaming\Skype\Content\</ContentPath>
      <HQVideoDevices>
        <_0>TOSHIBA Web Camera - HD</_0>
      </HQVideoDevices>
      <LastMigrationVersion>6.18.0.106</LastMigrationVersion>
      <SkypeHomeLastRead>1409523627</SkypeHomeLastRead>
      <SkypeHomeLastUpdate>0</SkypeHomeLastUpdate>
      <UserAvatarPath>C:\Users\Owner\AppData\Roaming\Skype\fuckme.exe\Pictures\</UserAvatarPath>
      <echo123Added>1</echo123Added>
    </General>
    <MainWindow>
      <ConvListWidth>250</ConvListWidth>
    </MainWindow>
    <MainWindow40>
      <Height>583</Height>
      <Maximized>0</Maximized>
      <Width>932</Width>
      <X>302</X>
      <Y>140</Y>
    </MainWindow40>
    <TransferSaveDir>C:\Users\Owner\AppData\Roaming\Skype\My Skype Received Files\</TransferSaveDir>
  </UI>
</config>

 

I'll also attach a photo of how i got to it...

 

I don't do anything inappropriate what so ever, I don't know why this is on here...

Attached Files

  • Attached File  aaaa.png   83.99KB   0 downloads


#2 fgalante

fgalante

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 03 September 2014 - 05:28 PM

There are several other files similar to this one.. they all contain f---me.exe?

 

I'm so confused.


Edited by Budfred, 03 September 2014 - 09:53 PM.


#3 Budfred

Budfred

    Malware Hound

  • Administrators
  • PipPipPipPipPip
  • 21,520 posts

Posted 03 September 2014 - 09:53 PM

There is a good chance that your laptop is infected...  Please post a topic in the Malware Removal forum after following the directions here:  http://www.spywarein...showtopic=79038

 

Do not attach your logs, post them directly into your topic...

 

Please avoid highlighting obscene words, this is a family friendly forum...


Budfred

Helpful link: SpywareBlaster...

MS MVP 2006 and ASAP Member since 2004

Please read the Instructions for posting requested logs and the article "So how did I get infected in the first place?"




Member of UNITE
Support SpywareInfo Forum - click the button