IMPORTANT! Have you received an email to your forum username?

dipsy81

Hi Nilrem

Thank you very much for the information.

Lynda

smk77

k-k-k-katy wrote: »

I wish this info had been sent by email, instead of just being put on the forum. I feel really let down. I had the mail containing the virus for two days before running the programme, without receiving any warning. An email during that time would have saved me a lot of anguish, worry and money. I trusted the mail, because I hadn't been warned that hacking had taken place last year, and it included my user name. Now it seems belonging to the moneysaving expert forum has cost me, my computer, and extra expense, on the run up to Christmas too. My Internet Explorer isn't working, instead of the sites I've tried to access I've had !!!!!! sites amongst others. It's really distressing, and worrying. I've run various anti virus programmes, and my computer is apparently free of viruses, but it still doesn't work. (I get a message telling me there's a hidden object, I don't know if that's still affecting things, but I can't find any way to get rid of it). Is my pc now useless, is there anything I can do, or do I go without my pc until I can afford another????? I realize I'm responsible for running the prog, but still think that moneysaver didn't make much of an effort to warn their members. I'm completely gutted. Surely I can't be the only one caught with this, perhaps others can't find an alternative computer to contact the forum?

try reading this

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=TrojanDropper:Win32/Bamital.C

and this

http://forums.techguy.org/virus-other-malware-removal/963692-trojandropper-win32-bamital-c-infection.html

MissLead

k-k-k-katy wrote: »

I wish this info had been sent by email, instead of just being put on the forum. I feel really let down. I had the mail containing the virus for two days before running the programme, without receiving any warning. An email during that time would have saved me a lot of anguish, worry and money. I trusted the mail, because I hadn't been warned that hacking had taken place last year, and it included my user name. Now it seems belonging to the moneysaving expert forum has cost me, my computer, and extra expense, on the run up to Christmas too. My Internet Explorer isn't working, instead of the sites I've tried to access I've had !!!!!! sites amongst others. It's really distressing, and worrying. I've run various anti virus programmes, and my computer is apparently free of viruses, but it still doesn't work. (I get a message telling me there's a hidden object, I don't know if that's still affecting things, but I can't find any way to get rid of it). Is my pc now useless, is there anything I can do, or do I go without my pc until I can afford another????? I realize I'm responsible for running the prog, but still think that moneysaver didn't make much of an effort to warn their members. I'm completely gutted. Surely I can't be the only one caught with this, perhaps others can't find an alternative computer to contact the forum?

What an absolute shame KKK Katy. But take hope. Another forum member clicked on the link and has been given a lot of advice by StumpyPumpy (on page 40 of this thread.) I would suggest you have a look at what has been advised there to see if will help. Perhaps Webby from MSE would be able to proffer some advice too.
I do hope you get it all sorted very quickly and get your computer back. Good luck!

forgotmyname

Well now i know what my original log in name and email account was.

Shame they did not notify me of the previous breach in security, One for him to answer to on Watchdog?

As the username/account and email has only ever been used here, never mentioned or linked elsewhere.
No question about where the information came from. Account was last used in 2008.

StumpyPumpy

How to clean up a computer infected through this email (maybe)

I've been infecting and cleaning a test computer with the trojan from this email all day (and night as it now appears) and what follows is the easiest/non-techie method I can find to clean up a machine. It is a tricky little thing and this works 95% consistently for me but may not for you. I make no promises.
I will supply direct links here because if your computer is compromised you cannot trust what your search engine of choice returns, though as far as I can tell a search engine that still works while you are infected is http://uk.ask.com should you need one.

It is up to you whether or not to trust me and the steps I provide. I would not blame you for not doing so: you know nothing verifiable about me: I am accountable to no one. I am a nice guy, but I would say that, wouldn't I? I am not affiliated in anyway with either MSE or any of the companies behind the links below. I suggest using HitmanPro simply because of the tools I tried it was the most consistently successful.

0) Print out these instructions before proceeding

The following steps have all been tested numerous times on an infected machine, In my testing the worst they did was not cure the infection, However
I offer no guarantees and accept no liability should they totally ruin your computer. <Insert legalise here, but basically: don't hate me if it doesn't work for you, or makes matters worse>
Please only follow the instructions below if you accept the risk that in doing so you may totally disable your machine and you accept I really can't help you if that happens.

1) Download HitmanPro from
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html
by clicking on the Download button, it should start downloading automatically but if it doesn't check the instructions on screen. Do not choose to run the file, save it to somewhere sensible - I use the desktop so I can find it again easily.
2) Once it has successfully downloaded, close all running applications (browser etc.), do not disconnect from the internet - HitmanPro needs the connection.
3) Find HitmanPro (HitmanPro35.exe) where it was saved and run it, It may take a little time to start up and if Windows asks you whether or not you wish to run it say yes. HitmanPro will automatically update itself to its latest version (.117 as I write this).
4) When it becomes enabled, click on the Next button, accept the license agreement and then choose the second option: "No, I only want to perform a one-time scan..." and click Next
While working, HitmanPro may put up some adverts below the progress bar if it doesn't find any installed AntiVirus software, you can close this if you wish.
5) When it has finished scanning you should get a list of problem files, leave all options as default and click Next. If it doesn't find any files, it (and I) can't help and you might as well quit now.
6) You now get a screen asking for a HitmanPro product key, before you start swearing, notice there is a second option "Activate free license" Click this to get a fully featured 30 day activation, then click Next again to start the cleanup.
7) Click Next then click Reboot to finish the process.
9) Once your computer reboots repeat the steps above from 3) until HitmanPro reports no problems.
In testing I have had odd ocassions where HitmanPro has failed to clear the problem, I don't know why, but it may have been with me messing around to finalise these steps. However, if after 3 iterations HitmanPro still reports malware it is unlikely to fix the issue with more tries. There are ways of working around this but it requires a computer literate person to do so, as there is a high risk it would disable your system completely, requiring a total re-installation.

Hopefully you now have a clean computer.

Good Luck!

SP

ani_26

Thanks for that, but i think i'll take the re - installation option.

Nh

Gorgeous_George

I received one on 17th November but it was filtered by yahoo spam control.

GG

Eenymeeny

Thanks to StumpyPumpy for the time spent on trying to help other mse users. Can I ask, would it be worth printing this off and keeping it in case I ever have problems with another trojan/virus?:eek: Obviously I'm not techie and can understand your instructions perfectly so thanks for that.
Am I alone in being surprised at the low number of voters in the poll? There has been such a lot of interest I would have thought that any help that we can give is paramount.:)

MSE_Martin

happychick69 wrote: »

I have recieved this and just recently joined too, whats the risks?

Hi Happychick please would you send details of your user name and a copy of the email you received to [EMAIL="webmaster&#64;moneysavingexpert.com"]webmaster@moneysavingexpert.com[/EMAIL]

powerRIP wrote:

So to confirm, you joined this site in October 2010 and received an email entitled "From MoneyExpert.com to happychick69" and you do not have any other previous accounts on moneysavingexpert? Just want confirmation as MSE still appear to be denying that there is any problem with people who joined in 2010 despite all the people claiming otherwise and the 70 or so who have voted accordingly?????

This is really an unhelpful comment. We're not denying there is any problem - we're saying we simply haven't verified it. I have explained about this previously in the thread. We have not yet seen one confirmed case of someone who joined in 2010 who has had the email.

People who have sent us information have either actually joined earlier than they thought or the email forwarded wasn't the email (ie it was a legit email and they'd got confused).

We could do with any confirmation as it will help us better crack what has happened here. Yet to confuse denying it with us saying "we're still trying to verify" it is unhelpful.

We are trying to solve this problem - but frankly I feel a few people keep trying to give us a kicking rather than letting us get on with it. As noted before we've got security in place, had consultants in and taken this very serious - yet just like a house sometimes no matter what you do - burgulars can come in. It's unpleasant and its distasteful, but its very tough to do much about.

Ed_Jogg

Eenymeeny wrote: »

Can I ask, would it be worth printing this off and keeping it in case I ever have problems with another trojan/virus?:eek:

I would suggest not. Each malware 'infection' will have its own characteristics, and an appropriate mechanism for removal. These instructions may not be appropriate for the next one you encounter, and might even cause more harm than good.

The very first thing you should do is make sure that you have the appropriate protection installed on your PC -- whether you go for an annual subscription 'suite', or a collection of independent (but free) tools is up to you. I found an excellent forum (bleepingcomputer.com -- no connection except as satisfied 'customer') which specialises in helping users recover from malware incidents, and the general view there is in favour of the free alternatives over the big name subscription tools.

The next stage is to remain vigilant:

• Be very wary of any 'official' emails which are addressed to 'undisclosed recipients'
• Don't click on links in emails you weren't expecting - If you already have an association with the company, go to the relevant website directly by entering the base URL in the address bar. Most offers from legit companies are accessible from their home page.
• Use a good email package. Mozilla Thunderbird is free (same stable as Firefox) and has good spam/junk detection and handling. Also, you can usually hover over a link in a message and see where it ACTUALLY points -- careful examination will usually show that the address is NOT the one for the company being spoofed. (Some companies, such as B&Q, really don't help this process by using unrelated domain names!)
• etc -- see elsewhere within the MSE site for more tips