phishing scam

April 6, 2008

I descovered that i was involved in a scam. My pc started acting up last

friday by not allowing recieveing email Then i was going to update my check

book on Quicken, and it would'nt let place numbers on the register. When I

did put an entry in I noticed the screen would blink and the new data would

disappere . I went to my ISP web site and did some looking in their help page

and discovered an ALEART message about an email being sent about asking to

update your profile. It said it was from my provider so I updated my profile.

(wrong thing to do ). My question is how do I remove this thing that is

infecting my pc. Also I have already put a fruad alert out to the credit

reports. Any help out there. Thanks Larry

April 6, 2008

Larry wrote:

> I descovered that i was involved in a scam. My pc started acting up last

> friday by not allowing recieveing email Then i was going to update my

> check book on Quicken, and it would'nt let place numbers on the register.

> When I did put an entry in I noticed the screen would blink and the new

> data would disappere . I went to my ISP web site and did some looking in

> their help page and discovered an ALEART message about an email being sent

> about asking to update your profile. It said it was from my provider so I

> updated my profile. (wrong thing to do ). My question is how do I remove

> this thing that is

> infecting my pc. Also I have already put a fruad alert out to the credit

> reports. Any help out there. Thanks Larry

Go through these general malware removal steps systematically -

http://www.elephantboycomputers.com/page2....emoving_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do

all scans in Safe Mode. Please see the special Notes regarding using

Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your

malware here:

Bleeping Computer removal how-to's -

http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Choose one of the specialty forums

listed at the first link. Register and read its posting FAQ. You will

generally be asked to:

1. Download and execute HiJack This! (HJT) -

http://www.trendsecure.com/portal/en-US/th.../HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word

wrap"

3. Download/run Deckard's System Scanner -

http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the

forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

Not all tools used will work in Vista and you will need to run them

elevated. If you are unable to remove the infection by following the

general steps, register at one of the HijackThis forums as suggested.

Standard disclaimer: I can't see and test your computer myself, so these are

just suggestions based on many years of being a professional computer tech;

suggestions based on what you've written. You should not take my

suggestions as a definitive diagnosis. If you can't do the work yourself

(and there is no shame in admitting this isn't your cup of tea), take the

machine to a professional computer repair shop (not your local equivalent

of BigComputerStore/GeekSquad). Please be aware that not all local shops

are skilled at removing malware and even if they are, your computer may be

so infested that Windows will need to be clean-installed. If possible, have

all your data backed up before you take the machine into a shop.

Malke

--

MS-MVP

Elephant Boy Computers

www.elephantboycomputers.com

Don't Panic!

April 6, 2008

Thanks for your reply. I must admit that I'm not real techie, but am able to

do somethings. I have run hijackthis already and posted it to Tech guy I'll

see if I can do some of the other things you suggested Thanks again Larry

"Malke" wrote:

> Larry wrote:

>

> > I descovered that i was involved in a scam. My pc started acting up last

> > friday by not allowing recieveing email Then i was going to update my

> > check book on Quicken, and it would'nt let place numbers on the register.

> > When I did put an entry in I noticed the screen would blink and the new

> > data would disappere . I went to my ISP web site and did some looking in

> > their help page and discovered an ALEART message about an email being sent

> > about asking to update your profile. It said it was from my provider so I

> > updated my profile. (wrong thing to do ). My question is how do I remove

> > this thing that is

> > infecting my pc. Also I have already put a fruad alert out to the credit

> > reports. Any help out there. Thanks Larry

>

> Go through these general malware removal steps systematically -

> http://www.elephantboycomputers.com/page2....emoving_Malware

>

> Include scanning with David Lipman's Multi_AV and follow instructions to do

> all scans in Safe Mode. Please see the special Notes regarding using

> Multi_AV in Vista.

>

> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

> http://tinyurl.com/yoeru3 - download link and more instructions

>

> You can also check to see if there are targeted removal steps for your

> malware here:

> Bleeping Computer removal how-to's -

> http://www.bleepingcomputer.com/forums/forum55.html

>

> When all else fails, get guided help. Choose one of the specialty forums

> listed at the first link. Register and read its posting FAQ. You will

> generally be asked to:

>

> 1. Download and execute HiJack This! (HJT) -

> http://www.trendsecure.com/portal/en-US/th.../HJTInstall.exe

>

> 2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word

> wrap"

>

> 3. Download/run Deckard's System Scanner -

> http://www.techsupportforum.com/sectools/Deckard/dss.exe

>

> 4. Save the scan results (Main.txt and Extra.txt)

>

> 5. And then post the contents of Main.txt and Extra.txt in your post at the

> forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

>

> Not all tools used will work in Vista and you will need to run them

> elevated. If you are unable to remove the infection by following the

> general steps, register at one of the HijackThis forums as suggested.

>

> Standard disclaimer: I can't see and test your computer myself, so these are

> just suggestions based on many years of being a professional computer tech;

> suggestions based on what you've written. You should not take my

> suggestions as a definitive diagnosis. If you can't do the work yourself

> (and there is no shame in admitting this isn't your cup of tea), take the

> machine to a professional computer repair shop (not your local equivalent

> of BigComputerStore/GeekSquad). Please be aware that not all local shops

> are skilled at removing malware and even if they are, your computer may be

> so infested that Windows will need to be clean-installed. If possible, have

> all your data backed up before you take the machine into a shop.

>

> Malke

> --

> MS-MVP

> Elephant Boy Computers

> www.elephantboycomputers.com

> Don't Panic!

>

April 10, 2008

Malke Sorry I have'nt responded with any info. I looked at the

suggestions you provided, tried some with no luck so I will bring it into the

shop. Thanks for tying to help me. Larry