Fraud defence centre

Saint_Chris

i can't copy all of the text only lets me do half of it.
sorry

Saint_Chris

got it now

Volume in drive C is HP_PAVILION
Volume Serial Number is 1C57-5C9D
Directory of C:\Documents and Settings\HP_Owner\Local Settings\Application Data\winNet3xx
06/10/2011 19:16 <DIR> .
06/10/2011 19:16 <DIR> ..
0 File(s) 0 bytes
2 Dir(s) 92,037,668,864 bytes free

waddler_8

Copy this then - hopefully the forum software doesn't break it.



cmd /c dir "C:\Documents and Settings\HP_Owner\Local Settings\Application Data\winNet3xx" >Log.txt&Log.txt&del Log.txt

waddler_8

That all looks good - the folder's empty. You can do this bit tomorrow if you want as it's late.

Download TFC to your desktop.

http://oldtimer.geekstogo.com/TFC.exe

• Save any unsaved work. TFC will close all open application windows.
• Double-click TFC.exe to run the program.
• Click the Start button in the bottom left of TFC
• If prompted, click "Yes" to reboot.

Note: Save your work. TFC will automatically close any open programs, let it run uninterrupted. It should not take longer than a couple of minutes , and may only take a few seconds. Only if needed will you be prompted to reboot.

Then Update (click the update tab > check for updates) & run another scan with malwarebytes tomorrow - just a quick scan (it should only take 5 - 10 minutes) - and post the log if it detects anything.

Let us know either way how things are - if you're having any problems etc...

Saint_Chris

thanks you so much

i will do the other tomorrow and let you know how i get on

thanks

waddler_8

No problem.

Enterprise_1701C

Did it ask for a 4 digit password or 4 digits of his password? I signed up (when it was visa) for visa safe or something like that when I started using my Tesco CC on line, it was a double-check thing that ensured the person using the card was the right person and had the details necessary to be able to pass this check.

I signed up specifically for this, did wonder if it would continue to work after it changed to Mastercard (I think I've got this right unless it was another card that changed!!) but it still pops up on certain sites. It's a while since I used my card online and I can't recall for sure what it asks for apart from 4 characters from the password I registered with them. It is separate from Tescos so they would not know about it, and you are not obliged to register.

To me, this incident sounds like this?

Saint_Chris

Enterprise_1701C wrote: »

Did it ask for a 4 digit password or 4 digits of his password? I signed up (when it was visa) for visa safe or something like that when I started using my Tesco CC on line, it was a double-check thing that ensured the person using the card was the right person and had the details necessary to be able to pass this check.

I signed up specifically for this, did wonder if it would continue to work after it changed to Mastercard (I think I've got this right unless it was another card that changed!!) but it still pops up on certain sites. It's a while since I used my card online and I can't recall for sure what it asks for apart from 4 characters from the password I registered with them. It is separate from Tescos so they would not know about it, and you are not obliged to register.


To me, this incident sounds like this?

Hi
Yes it does sound like this, is wanted all his details including some 4 digit password, plus his name address etc, it did have his card number well the 1st 12 numbers were stars the last 4 his card numbers.

I can't ask him now he's out, but we've used our tesco credit card for quite a few years and this box has never popped up, which is what worried him, so he rang tesco who said we must have a virus, as they had never heard of this.

So i decied to do to the best of my ability a check and must thank waddler_8

Just to check, he looked at our tsb account on line and no extra security information came up, and we have a old virgin credit card we never use, so he tried this and agian he was asked for added information.

thanks

Bollotom

It sounds very much like the "Verified by Visa" (but Mastercard version) to me. I get asked either three questions like where have I lived gives four options like East Street, West Street, North Street, None of These. Which person do I know, from a list or none of these or from my password the (for instance) first, fourth and eighth character. :cool:

Saint_Chris

Hi
thanks i did that just, it did ask for a re-boot.

And this is now my malware bytes new log.

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.05.15.05
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
HP_Owner :: MLCL2427 [administrator]
15/05/2012 19:55:48
mbam-log-2012-05-15 (19-55-48).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 209422
Time elapsed: 8 minute(s), 56 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)