| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 123052 | 2012-01-30 23:49:00 | 24 Seven Windows Support | NZHawk (4093) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 1256687 | 2012-01-31 01:52:00 | Look at the upload usage stats with his ISp account might be a start, if any large files were uploaded it will show the amount just not what they were | gary67 (56) | ||
| 1256688 | 2012-01-31 01:53:00 | At the very least, his machine should be scanned with several anti-spyware/AV progs. | linw (53) | ||
| 1256689 | 2012-01-31 02:05:00 | you should also change the admin passwords and check that no new user accounts have been created. | Barnabas (4562) | ||
| 1256690 | 2012-01-31 02:57:00 | I'd be mostly concerned with Usernames and passwords for any online services / banks etc and for the possibility of keyloggers / trojans etc as already suggested. I would doubt they bothered uploading anything else but who knows. A hard lesson, but never accept anything from unsolicited calls or website pop-ups. If you didn't initiate the request yourself don't do it. For example any time I use new malware scanners I do some online searches first to find out if they are legit. Hindsight and all that, but put this in simple terms and you see how bad it is. Someone he doesn't know rang up and asked for his credit card details and he gave it to them......!! Doh! |
dugimodo (138) | ||
| 1256691 | 2012-01-31 02:58:00 | & change any online banking passwords used on that PC Also any webmail passwords etc etc |
1101 (13337) | ||
| 1256692 | 2012-01-31 05:25:00 | do a search on one of their "most used" lines of text - see how many sites look similar. And if you investigate a little more, you'll find that the sites are nearly all on servers in Kolkata, even tho they may say Australia,UK, or US in their "whois" www.google.co.nz er,+it+is+in+determining+whom+to+call.+Good+news+i s+that+now,+quality+technical+support+is+just+a+%E 2%80%9Cclick%E2%80%9D+away&hl=en&safe=off&gbv=1&ie=UTF-8&prmd=ivns&ei=WnQnT9-MAamOigKU56jaAQ&start=20&sa=N |
bevy121 (117) | ||
| 1256693 | 2012-01-31 06:37:00 | do a search on one of their "most used" lines of text - see how many sites look similar. And if you investigate a little more, you'll find that the sites are nearly all on servers in Kolkata, even tho they may say Australia,UK, or US in their "whois" www.google.co.nz er,+it+is+in+determining+whom+to+call.+Good+news+i s+that+now,+quality+technical+support+is+just+a+%E 2%80%9Cclick%E2%80%9D+away&hl=en&safe=off&gbv=1&ie=UTF-8&prmd=ivns&ei=WnQnT9-MAamOigKU56jaAQ&start=20&sa=N Muahahaha, nice. :thumbs: |
fred_fish (15241) | ||
| 1256694 | 2012-01-31 09:35:00 | Format and reinstall, only way to get rid of the paranoia. | Agent_24 (57) | ||
| 1256695 | 2012-01-31 19:29:00 | do a search on one of their "most used" lines of text - see how many sites look similar. And if you investigate a little more, you'll find that the sites are nearly all on servers in Kolkata, even tho they may say Australia,UK, or US in their "whois" www.google.co.nz er,+it+is+in+determining+whom+to+call.+Good+news+i s+that+now,+quality+technical+support+is+just+a+%E 2%80%9Cclick%E2%80%9D+away&hl=en&safe=off&gbv=1&ie=UTF-8&prmd=ivns&ei=WnQnT9-MAamOigKU56jaAQ&start=20&sa=N Good technique! Certainly showed this one up for what it is. |
linw (53) | ||
| 1 2 | |||||