IMPORTANT! Have you received an email to your forum username?

nilrem_2

mynewaccount wrote: »

Except it's not just another spam email - it's a virus/trojan horse email sent only to members of this forum (and no other) with intent to trick them, using member details stolen from this forum.

Many spam emails either carry some sort of malware/spyware or direct recipients to websites that will infect ones computer' it's not unique to MSE, indeed I belong to other forums where similar things have occurred, the aim is always to trick people using details that they have harvested.

Spammers/con artists/whatever are always one jump ahead, if hackers can infiltrate the Royal Navy website and cause problems what chance do simple forums have, the only way to be 100% sure of being safe is do not connect to the net at all.

Oh and keep away from cash machines in fact shut oneself off from the world it's the only way to be really safe! :eek:

swanny65

I did click the link and run the exe file as well so i know my PC is infected.

Have changed my passwords where needed

What i found strange is it appears to have infected my google search. When i click on a result i get redirected elsewhere.........

StumpyPumpy

swanny65 wrote: »

I did click the link and run the exe file as well so i know my PC is infected.

Have changed my passwords where needed

What i found strange is it appears to have infected my google search. When i click on a result i get redirected elsewhere.........

Yes, you were and indeed are infected. You NEED to sort out your computer immediately. The redirection is exactly what I would expect to see in a computer infected by this email/trojan. I would suggest your first action is to download Malwarebytes and run it http://www.malwarebytes.org/ Be aware, that as you have malware active on your machine it may also prohibit access to remedies. You must also treat with suspicion anything that you get in an internet search (not just google btw) If you run an AV program and it comes up with nothing, don't believe it, find another one to run until one does find it. Do not change any further passwords on the infected machine until it is cleared, you could already have malware monitoring your changes. Use a different, uninfected computer to change them and/or make sure that once your computer is clean you change them again.
My previous post in this thread has more detail and links on the probable nature of your infection: http://forums.moneysavingexpert.com/showpost.php?p=38571018&postcount=478

SP

bilibala

Just checked my pm and found out about the email. I received the email open it as it was addressed to me using my user name. Opened it but I don't remember clicking on link and downloading a zip file, so I'm safe right?!?!? :mad:
btw, I joined a few years ago.

Pound

I've received spam in the past to my MSE address about a year ago (where other people confirmed they received the same email) but I haven't received any spam this time.

swanny65

StumpyPumpy wrote: »

Yes, you were and indeed are infected. You NEED to sort out your computer immediately. The redirection is exactly what I would expect to see in a computer infected by this email/trojan. I would suggest your first action is to download Malwarebytes and run it http://www.malwarebytes.org/ Be aware, that as you have malware active on your machine it may also prohibit access to remedies. You must also treat with suspicion anything that you get in an internet search (not just google btw) If you run an AV program and it comes up with nothing, don't believe it, find another one to run until one does find it. Do not change any further passwords on the infected machine until it is cleared, you could already have malware monitoring your changes. Use a different, uninfected computer to change them and/or make sure that once your computer is clean you change them again.
My previous post in this thread has more detail and links on the probable nature of your infection: http://forums.moneysavingexpert.com/showpost.php?p=38571018&postcount=478

SP

Thanks for the advice. I have already run I0Bit and removed a threat but no change. AVG fiound nothing. Will run Malwarebytes and see what to do from there.

I have cloned my hard drive partitioned c and D drive onto my G and H and will probably do a new install copy back the H to the new D and then clone again. Should keep all my important data that i store on the D drive.

Just cant believe i made such a mistake but i knew something was wrong yesterday when google started acting as it did.

Ran Hijackthis but didn't do a great deal.

StumpyPumpy

@Swanny65 - I've PMed you. Don't feel too bad about the mistake, it happens to most people at sometime or another, Yes, it is dumb but we are all dumb at times at least you admitted to it. I can't begin to tell you the number of incidents I've dealt with where no one would admit responsibility for their own actions.

dixxi30

I received the email as well but it wasn't sent to the email address i registered with on here, it went to my instant messaging MSN Messenger Handle that i use for public profile is my computer safe if i haven't opened it please.

nilrem_2

dixxi30 wrote: »

I received the email as well but it wasn't sent to the email address i registered with on here, it went to my instant messaging MSN Messenger Handle that i use for public profile is my computer safe if i haven't opened it please.

As long as you haven't actually run an exe file you are safe.

nilrem_2

swanny65 wrote: »

Just cant believe i made such a mistake but i knew something was wrong yesterday when google started acting as it did.

One other thing worth checking is the DNS server addresses in your router if you use one, some while ago I had a problem with strange results and redirects on google with some sites not loading etc and eventually found that the DNS settings in my router had been changed to two from Russian websites! I still don't know how they got changed as I am very careful using all the usual antispy etc.