Computer compromised

clark33 · 21 Mar 2013

Hi there,

Im trying to help my mum out with her computer. After a visit to her local bank they informed her that someone had got her bank details online and has been ordering video games for themselves from this. I need to ensure that her PC is like fort Knox as im meant to be good with computers but need help this time. Heres what ive tried so far:-

Ran MSE anti-virus, updated and full scan: nothing found.
Ran Malwarebytes anti malware: updated and full scan: nothing found

IE is the latest version but it seems to have adverts all over the place. Ive disabled all add-ons but to no avail. Is the best thing to do next uninstall and reinstall IE?

Thanks for any advice given to me.

Jacee · 21 Mar 2013

The first thing you need to do is change all passwords, using a "known clean" computer. Do not use the infected one!

Next, flush the bad DNS cache and restore MS's Hosts file:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

Now, download DDS from one of these links:
DDS.com
DDS.pif

Disable any script blocking protection
Double click the dds icon to run the tool.
When done, DDS will open two (2) logs:
1. DDS.txt
2. Attach.txt <--- will be minimized in the task tray
Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

Layback Bear · 21 Mar 2013

Find out if your mother has been filling out any forms with personnel information online or email from anybody or organization.
Also check with your mother if she has been getting phone call asking for personnel information from anybody or organization.
Something like; this is your bank or this is the (tax agency) or what ever they call it in your country.

Sometime forms requesting information will come snail mail and people fill them out and mail them back.

boohbah · 21 Mar 2013

aside from jaycees excellent help you could add some extra security by installing rapport.

Trusteer Rapport for Online Banking | Trusteer

this is the download link in case you have difficulty finding it, though you need to make sure your mum is aware of it and how to protect herself in future.

http://www.trusteer.com/ProtectYourMoney

Layback Bear · 24 Mar 2013

clark33 have you solved your mothers computer problems?