View Single Post
  #3  
Old 25th July 2011, 02:00
Jim P. Jim P. is offline
Alter Hase
 
Join Date: Dec 2004
Posts: 1,967
Jim P. will become famous soon enough
Re: PHISHING EMAIL IN TOCH MEMBER's NAME

Not related to this particular infection, but if you ever follow a link to a Russian site and start getting messages shortly thereafter to the effect that your disk(s) are failing, shut your computer down immediately. Bring up in safe mod and do a google search for MBAM. The errors are false and what the 'virus' does is start to hide all your software and disks, the 'site' that detected the problem will run some 'utility' to examine your system and offer, if you give your cc number, to 'fix' the problem. The address of the company may be some place in Florida (it was for me). Your pc has been hijacked. Whatever you do, DO NOT, give them your cc number. I expect if you do you're toast. When I got hit with this I had fortunately read something about this hijack some time ago, but could not remember what the solution was. I did try and get through their krap long enough that everything got hidden on me. However when it finally occurred to me to put in the OS disk and boot in safe mode, I could see all my files. At that point I finally started googling and eventually found the MBAM site. Their solution is free, but you need to follow their instructions exactly. There may be better solutions out there, but some of the 'solution' sites were pay sites, a few of which I think are somehow related to the 'infection', and none of the companys were known to me (the Nortons, Zone-Alarms or other well-known anti-virus companys had nothing-this was in early June). I was not about to give my cc # to anyone in that situation. Finally found the free MBAM site (they will ask you to purchase their product, but the 'fix' for this is free). End result, their software 'unhid' all my file folders, but not my software so I had to re-install all my applications. I still have a few problems like not being able to set a desktop scheme, which I can live with, but all functionality was restored. A friend of mine got nailed with the same thing a couple of weeks later and I had him shut down his machine and call his IT department. This was the nastiest bug I ever 'caught' from the internet and my firewall and anti-virus software did not catch it until it was too late. Note that I have no affilation whatsoever MBAM or the software company that produces the fix (BittingCow[?] or something like that.) Just a word of warning.

Last edited by Jim P.; 25th July 2011 at 02:04. Reason: added
Reply With Quote