Go Back   oOple.com Forums > General > The PlayGround

Reply
 
Thread Tools Display Modes
  #1  
Old 10-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default PC Keyloggers

All,

I've had one instance fraudulent activity on PayPal (someone buying Toy 'R' Us stuff in the USA) and think I may have picked up a keylogger somewhere as I don't click on any emails etc. that appear in my emails.

I've run a scan with Kaspersky, Spybot - Search & Destroy as well as Malware Bytes and they've found nothing but I'm still a little worried (OK, very paraniod!)

Short of doing a clean install (which the laptop needs but I wasn't planning on doing just yet) is there anything else some of you computer wizards can suggest?

Cheers,

Ian
__________________
Dragon Paints
Reply With Quote
  #2  
Old 10-12-2009
bigred5765's Avatar
bigred5765 bigred5765 is offline
Lion-O - King of the Thundercats
 
Join Date: Mar 2006
Location: chorley
Posts: 8,474
Send a message via MSN to bigred5765 Send a message via Skype™ to bigred5765
Default

change passwords
__________________
Mattys the driver,my names carl
Reply With Quote
  #3  
Old 10-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

Sorry, forgot to say all passwords and secret questions have been changed
__________________
Dragon Paints
Reply With Quote
  #4  
Old 10-12-2009
mikeyscott's Avatar
mikeyscott mikeyscott is offline
Spends too long on oOple ...
 
Join Date: Mar 2009
Location: Hampshire
Posts: 7,223
Default

Sorry as someone working in IT security I'd do a clean install. What AV have you got installed and does it include a virtual keyboard?

Also do you have more than one PC / laptop in the house? For example I do genera surfing and downloading from one. I do my finances from the other.
Reply With Quote
  #5  
Old 10-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

Mikey,

You're backing up what I'm thinking. I'm in the process of backing up my documents to an external drive ready for the clean install.

I'm running Kaspersky 2009 Internet Security with Spybot - Search & Destroy running too. Neither of them (to my knowledge) have virtual keyboards. I can't find the Kaspersky disc for after the format, what free AV would you recommend?

I've only got the one laptop so I'm stuck with that.
__________________
Dragon Paints
Reply With Quote
  #6  
Old 10-12-2009
mikeyscott's Avatar
mikeyscott mikeyscott is offline
Spends too long on oOple ...
 
Join Date: Mar 2009
Location: Hampshire
Posts: 7,223
Default

Do you have the license for Kapersky? If you right click on the icon in the toolbar I think it'll come up with virtual keyboard..

You may be able to export the license in kapersky? Did you get it with the machine? 2009 license also allows you to run 2010 from what I've found.

Another option is to install virtual PC with and XP image running in that and do you banking in that.

Another security tip... Phone the credit card company every so often to say you've lost the card. Bingo new card number. I do that due to a lot of online shopping

The new Windows Security Essentials from Microsoft is free.

Novatech do Kapersky for peanuts as do overclockers.co.uk
Reply With Quote
  #7  
Old 10-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

Quote:
Originally Posted by mikeyscott View Post
Do you have the license for Kapersky? If you right click on the icon in the toolbar I think it'll come up with virtual keyboard..
I've got the licence, it's with the disc, wherever that is! You're correct on the virtual keyboard, didn't know that - I'll remember that for the future

Quote:
Originally Posted by mikeyscott View Post
You may be able to export the license in kapersky? Did you get it with the machine? 2009 license also allows you to run 2010 from what I've found.
I bought it separately, so I've got the disc somewhere, I just can't find it

Quote:
Originally Posted by mikeyscott View Post
Novatech do Kapersky for peanuts as do overclockers.co.uk
I'll have a shufty if I don't find the disc
__________________
Dragon Paints
Reply With Quote
  #8  
Old 10-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

In the process of doing a clean install. Surfung oOe on the smart phone now!

Changed all important passwords again with the virtual keyboard before starting. Don't think I would have relaxed if I hadn't taken this option to be honest.

Although this probably does explain why the thing has been freezing about 5 min after I open Firefox for the past week...

Oh, found the disc in the end. The 2009 licence does work with 2010, you've just got to insatl 2010 over 2009.

Cheers for your help Mikey.

Ian.
__________________
Dragon Paints
Reply With Quote
  #9  
Old 10-12-2009
mikeyscott's Avatar
mikeyscott mikeyscott is offline
Spends too long on oOple ...
 
Join Date: Mar 2009
Location: Hampshire
Posts: 7,223
Default

Quote:
Originally Posted by i4n View Post
In the process of doing a clean install. Surfung oOe on the smart phone now!

Changed all important passwords again with the virtual keyboard before starting. Don't think I would have relaxed if I hadn't taken this option to be honest.

Although this probably does explain why the thing has been freezing about 5 min after I open Firefox for the past week...

Oh, found the disc in the end. The 2009 licence does work with 2010, you've just got to insatl 2010 over 2009.

Cheers for your help Mikey.

Ian.
No worries. You should be able to do a straight install of 2010 and then enter the license key.
Reply With Quote
  #10  
Old 10-12-2009
b4pete b4pete is offline
Senior Member
 
Join Date: Nov 2009
Location: Oop North
Posts: 467
Default

Buy a Mac
__________________
B4, BJ4WE (x2!!)
Reply With Quote
  #11  
Old 10-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

There's always one comedian isn't there.

Do me a favour mate, crawl back under the rock you came from. This could have been serious for me if they got my banking details,
__________________
Dragon Paints
Reply With Quote
  #12  
Old 11-12-2009
MatJohnson MatJohnson is offline
Senior Member
 
Join Date: Jul 2009
Location: Buckley, N. Wales
Posts: 776
Default

b4pete - You can still get viruses on a Mac, accept it!

Bellarc advisor will give you your kaspersky key.

As for a free AV program, Avira is the best detection for its hard drive/resource footprint. Chances are the password came from a different source (a forum getting hacked or something) rather than a keylogger. I've seen so many places recently that dont encrypt their passwords its getting a joke!

I've had my paypal done on christmas day before so I don't have any card details stored in it or bank details for that reason, if they get in, they can't spend anything!
Reply With Quote
  #13  
Old 11-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

I found the Kaspersky disc and key code last night so that's not a problem anymore.

Did the format and install last night, just got the job of putting everything back on to look forward to over the weekend. It needed doing anyway as the PC was slower than a Sloth on Valium.
__________________
Dragon Paints
Reply With Quote
  #14  
Old 11-12-2009
mikeyscott's Avatar
mikeyscott mikeyscott is offline
Spends too long on oOple ...
 
Join Date: Mar 2009
Location: Hampshire
Posts: 7,223
Default

Quote:
Originally Posted by Toadeh View Post
b4pete - You can still get viruses on a Mac, accept it!

Bellarc advisor will give you your kaspersky key.

As for a free AV program, Avira is the best detection for its hard drive/resource footprint. Chances are the password came from a different source (a forum getting hacked or something) rather than a keylogger. I've seen so many places recently that dont encrypt their passwords its getting a joke!

I've had my paypal done on christmas day before so I don't have any card details stored in it or bank details for that reason, if they get in, they can't spend anything!
Yup I have seen that recently too. Running wireshark and the logs show passwords and usernames going over in clear text. Anyway forums are http sites and not https.... Another common issue is people using the same passwords for everything!
Reply With Quote
  #15  
Old 11-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

Quote:
Originally Posted by mikeyscott View Post
Another common issue is people using the same passwords for everything!
I'm not that bad, I've got 5 or so different one's that I use. My PayPal password was the same as another forumI'm a member of - it's not now though!
__________________
Dragon Paints
Reply With Quote
  #16  
Old 11-12-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

Ian, did you just reinstall, format or data wipe your hard drive?
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
  #17  
Old 11-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

Formatted
__________________
Dragon Paints
Reply With Quote
  #18  
Old 11-12-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

My experience is, that if there is a persistant malware/virus, they can be resillient to a format, as it only removes the location data of the malware/virus but doesn't remove it off the drive platter.
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
  #19  
Old 11-12-2009
i4n's Avatar
i4n i4n is offline
Senior Member
 
Join Date: Jan 2008
Location: Deal, Kent
Posts: 708
Default

I did a full format, not just a quick one. Hopfully all will be OK.
__________________
Dragon Paints
Reply With Quote
  #20  
Old 11-12-2009
DCM's Avatar
DCM DCM is offline
Spends too long on oOple ...
 
Join Date: Oct 2005
Location: Marvelous South Wales!!
Posts: 8,896
Default

If you still get problems, download and use KillDisk, it overwrites every single part of your hardrive, 3 times, to obliterate any info on there.
__________________
dragon paints : team tekin : fusion hobbies :SCHUMACHER RACING : Nuclear R/C for all my sticky and slippery stuff - if it needs gluing or lubing, Nuclear RC is the man!
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 08:36 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
oOple.com