phishing scam

[Larry]

I descovered that i was involved in a scam. My pc started acting up last
friday by not allowing recieveing email Then i was going to update my check
book on Quicken, and it would'nt let place numbers on the register. When I
did put an entry in I noticed the screen would blink and the new data would
disappere . I went to my ISP web site and did some looking in their help page
and discovered an ALEART message about an email being sent about asking to
update your profile. It said it was from my provider so I updated my profile.
(wrong thing to do ). My question is how do I remove this thing that is
infecting my pc. Also I have already put a fruad alert out to the credit
reports. Any help out there. Thanks Larry

 

[Malke]

Larry wrote:

> I descovered that i was involved in a scam. My pc started acting up last
> friday by not allowing recieveing email Then i was going to update my
> check book on Quicken, and it would'nt let place numbers on the register.
> When I did put an entry in I noticed the screen would blink and the new
> data would disappere . I went to my ISP web site and did some looking in
> their help page and discovered an ALEART message about an email being sent
> about asking to update your profile. It said it was from my provider so I
> updated my profile. (wrong thing to do ). My question is how do I remove
> this thing that is
> infecting my pc. Also I have already put a fruad alert out to the credit
> reports. Any help out there. Thanks Larry

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. You will
generally be asked to:

1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
wrap"

3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

Not all tools used will work in Vista and you will need to run them
elevated. If you are unable to remove the infection by following the
general steps, register at one of the HijackThis forums as suggested.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

 

[Larry]

Thanks for your reply. I must admit that I'm not real techie, but am able to
do somethings. I have run hijackthis already and posted it to Tech guy I'll
see if I can do some of the other things you suggested Thanks again Larry

"Malke" wrote:

> Larry wrote:
>
> > I descovered that i was involved in a scam. My pc started acting up last
> > friday by not allowing recieveing email Then i was going to update my
> > check book on Quicken, and it would'nt let place numbers on the register.
> > When I did put an entry in I noticed the screen would blink and the new
> > data would disappere . I went to my ISP web site and did some looking in
> > their help page and discovered an ALEART message about an email being sent
> > about asking to update your profile. It said it was from my provider so I
> > updated my profile. (wrong thing to do ). My question is how do I remove
> > this thing that is
> > infecting my pc. Also I have already put a fruad alert out to the credit
> > reports. Any help out there. Thanks Larry
>
> Go through these general malware removal steps systematically -
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to do
> all scans in Safe Mode. Please see the special Notes regarding using
> Multi_AV in Vista.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://tinyurl.com/yoeru3 - download link and more instructions
>
> You can also check to see if there are targeted removal steps for your
> malware here:
> Bleeping Computer removal how-to's -
> http://www.bleepingcomputer.com/forums/forum55.html
>
> When all else fails, get guided help. Choose one of the specialty forums
> listed at the first link. Register and read its posting FAQ. You will
> generally be asked to:
>
> 1. Download and execute HiJack This! (HJT) -
> http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
>
> 2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
> wrap"
>
> 3. Download/run Deckard's System Scanner -
> http://www.techsupportforum.com/sectools/Deckard/dss.exe
>
> 4. Save the scan results (Main.txt and Extra.txt)
>
> 5. And then post the contents of Main.txt and Extra.txt in your post at the
> forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.
>
> Not all tools used will work in Vista and you will need to run them
> elevated. If you are unable to remove the infection by following the
> general steps, register at one of the HijackThis forums as suggested.
>
> Standard disclaimer: I can't see and test your computer myself, so these are
> just suggestions based on many years of being a professional computer tech
> suggestions based on what you've written. You should not take my
> suggestions as a definitive diagnosis. If you can't do the work yourself
> (and there is no shame in admitting this isn't your cup of tea), take the
> machine to a professional computer repair shop (not your local equivalent
> of BigComputerStore/GeekSquad). Please be aware that not all local shops
> are skilled at removing malware and even if they are, your computer may be
> so infested that Windows will need to be clean-installed. If possible, have
> all your data backed up before you take the machine into a shop.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
> www.elephantboycomputers.com
> Don't Panic!
>

 

[Larry]

Malke Sorry I have'nt responded with any info. I looked at the
suggestions you provided, tried some with no luck so I will bring it into the
shop. Thanks for tying to help me. Larry

"Malke" wrote:

> Larry wrote:
>
> > I descovered that i was involved in a scam. My pc started acting up last
> > friday by not allowing recieveing email Then i was going to update my
> > check book on Quicken, and it would'nt let place numbers on the register.
> > When I did put an entry in I noticed the screen would blink and the new
> > data would disappere . I went to my ISP web site and did some looking in
> > their help page and discovered an ALEART message about an email being sent
> > about asking to update your profile. It said it was from my provider so I
> > updated my profile. (wrong thing to do ). My question is how do I remove
> > this thing that is
> > infecting my pc. Also I have already put a fruad alert out to the credit
> > reports. Any help out there. Thanks Larry
>
> Go through these general malware removal steps systematically -
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to do
> all scans in Safe Mode. Please see the special Notes regarding using
> Multi_AV in Vista.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://tinyurl.com/yoeru3 - download link and more instructions
>
> You can also check to see if there are targeted removal steps for your
> malware here:
> Bleeping Computer removal how-to's -
> http://www.bleepingcomputer.com/forums/forum55.html
>
> When all else fails, get guided help. Choose one of the specialty forums
> listed at the first link. Register and read its posting FAQ. You will
> generally be asked to:
>
> 1. Download and execute HiJack This! (HJT) -
> http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
>
> 2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
> wrap"
>
> 3. Download/run Deckard's System Scanner -
> http://www.techsupportforum.com/sectools/Deckard/dss.exe
>
> 4. Save the scan results (Main.txt and Extra.txt)
>
> 5. And then post the contents of Main.txt and Extra.txt in your post at the
> forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.
>
> Not all tools used will work in Vista and you will need to run them
> elevated. If you are unable to remove the infection by following the
> general steps, register at one of the HijackThis forums as suggested.
>
> Standard disclaimer: I can't see and test your computer myself, so these are
> just suggestions based on many years of being a professional computer tech
> suggestions based on what you've written. You should not take my
> suggestions as a definitive diagnosis. If you can't do the work yourself
> (and there is no shame in admitting this isn't your cup of tea), take the
> machine to a professional computer repair shop (not your local equivalent
> of BigComputerStore/GeekSquad). Please be aware that not all local shops
> are skilled at removing malware and even if they are, your computer may be
> so infested that Windows will need to be clean-installed. If possible, have
> all your data backed up before you take the machine into a shop.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
> www.elephantboycomputers.com
> Don't Panic!
>