Money Stolen from Bank Account!!

Hi all, I had a customer call me today stating that he has had money stolen from his bank account (£700), the bank noticed the 3 separate transactions to 3 different accounts and though it was a bit suspicious, so they contacted him and asked if he had made the transactions, he had not!!

The bank recommended he have someone look at his computer for viruses etc, I will be tacking a look at his PC in the next few days!!

What i want to know, is there anyway of finding out who or what has done this!!

Any advice on this will be appreciated P.S the bank has paid him the £700 back!!

Thanks in advance Ant*

Probably not ... he will need to change all his passwords using a known 'clean' computer; DO NOT do this using the infected computer! Also, if you don't wipe, and do a clean install, then you will need to flush the DNS cache and restore the original Hosts file with HostsXpert HostsXpert 4.3 - Hosts File Manager.

• Unzip HostsXpert 4.3 - Hosts File Manager to a convenient folder such as C:\HostsXpert
• Click HostsXpert.exe to Run HostsXpert 4.3 - Hosts File Manager from its new home
• Click "Make Hosts Writable?" in the upper right corner (If available).
• Click Restore Microsoft's Hosts file and then click OK.
• Click the X to exit the program.

What are his banking practices? Does he do all transactions entirely on his computer, or a mix of manual transactions in the world and online? Really depends, because it could really be hit or miss on finding exactly how it went down.

Possibility of account details being snagged in transit online, not using a secure login process on whatever site/s he's inputting his account details.

Possibility of someone has gotten remote access to his whole computer, or he has malware, such as a keylogger recording his details installed on his computer.

Or maybe his details were accessed by someone when he made a transaction out in a store, etc.

So it would be a good idea to give the whole computer an overlook for malware, etc. But the possibilities are quite a bit. One good thing to do is to change passwords/account numbers with his bank account, and any he uses to access online. A pretty effective means of checking the computer quickly would be to just wipe completely clean, and install again. I would do it personally, but it's up to the user.

But again, it depends on what his practices are really, being that his system may become compromised again quickly thereafter.

In response to your concern Yes is the short answer - but the how is another subject, there are many back door hacks and viruses that now can and will reside either in the upper memory /ram or nested within a hidden file, In the U.K some time ago there was a Trojan named back door, caused a lot of worry and concern, currently it's reported that there has been breaches via face book, small programme's have been transmitted via this method,
Six months ago i had my gaming account details hacked, it was a nightmare trying to find out how,

Although this really doesn't help it's as much as i can offer on the subject,

Best regards

Peter

Thanks guys, yeah I will be wiping his PC clean and doing a fresh install!! it turns out he lets the kids use the same computer so maybe there's his problem.

Scary stuff, lets hope the banks have the power to take this further for all are sakes!!

Thanks again all

When you reinstall, create an account for him (administrator) and a user account for the kids. A password on the admin account, of course.