Has my credit card been compromised by this spyware?

[Panarchy]

Hello!

I've been fixing a computer today, and I asked the owner if she had used any credit card with the computer. She said that she has. The spyware is pictured in the image, I think I can remove it, but suggestions would be appreciated. At the moment I can't boot into the computer except in Safe Mode (which I am in now).

I am using Windows XP (Core 2 Duo) 32-bit 1GB RAM 7300 GFX

I would like to know if any of this spyware has or could be able to of stolen my credit card numbers (keylogging etc.).

Please help reply.

Thanks in advance.

Panarchy

[-pops-]

If there is any possibility of the card being compromised, contact the card issuer without delay. It it for both your and the card issuer's protection. They will not mind as they take the view of better safe than sorry.

I don't know what the infection/infestation is but if you are unable to remove it as you hope, come back.

[MANEMAN]

Well, I can only wholeheartedly agree with what "pops" has told you.

I was rather worried by what you said in your post because it would seem that not one, but two credit cards may have been compromised.

Quote: "I asked the owner if she had used any credit card with the computer. She said that she has".

Quote: "Has my credit card been compromised by this spyware?"

Quote: I would like to know if any of this spyware has or could be able to of stolen my credit card numbers

It would seem fairly obvious from this that you have both entered details of your credit cards using the same computer.

As you have been advised, get on to your Credit Card Companies and advise them straight away.

I have this morning had a telephone conversation with someone who deals with online fraud and they are fairly certain they could track a credit card scam with the help of your Internet Service Provider, Yourself, and the surrender for a short while of the computer in question to HM Customs and Excise for analysis. (Or whoever deals with similar instances in whichever country you live)

These people are always pleased to have forehand knowledge of such things so that they can "Nip things in the bud" so to speak. Once advised like this they do not usually let it out of their sight.

Hope that this settles your mind a little, knowing that there well may be a covert investigation going on into these sorts of things even as I write.

Please do contact your individual Credit Card Companies if you think there has been fraud.

[Panarchy]

Okay thanks.

Should I tell her to cancel her credit cards?

Oh, and I wasn't able to remove. I plan on partitoning my client's drive and put linux on it, back everything up to the 2nd partiton (ubuntu on 3rd) and then I will format the computer.

That is last resort.

If anyone knows how to help, please do!

[Boris]

Panarchy

I do hope you know what you're doing !

Before you start partitioning, have you tried something as simple as a System Restore to cure this?

If that doesn't work - download the free version of SuperAntiSpyware, update it and run a full scan.

http://www.superantispyware.com/

After installing, try to run it in Safe Mode.

[Gagaman]

These guys know alot of malwareremoval and should be able to help you:

http://www.malwareremoval.com/

[Panarchy]

I've tried Spybot, I couldn't install Ad-Aware, and System Restore wasn't activated.

If you can give me the files for that anti-spyware in zip format, so I can just extract the data from Program Files (and hope reg keys won't get in the way) It's be greatly apppreciated.

Or a portable version.

Problem: I boot up, NOD32 Smart Security splash screen comes up, someboots goes away, someboots doesn't. Then it freezes. I can move the mouse, but that's it.

And those shortcuts (which look like spyware to me) keep appearing, even when I delete them with Gutman (35 pass) [CCleaner]

I have been able to boot in Safe mode though... and the networking safe mode :)

Please tell me if you can do these things for me.

Thanks in advance,

Panarchy

PS: Just saw that new post, please give me the folder from program files in zip (or any archival format supported by IZArc). Thanks in advance.

[Boris]

Why this need for you to be given .zip files ?

Download it yourself - here is a direct link :-

http://downloads2.superantispyware.com/dow...AntiSpyware.exe

Copy it to a pen drive and install it from that.

There is no portable version AFAIK ?

[Panarchy]

Okay, I didn't see the download. I thought it was an installation, one that I wouldn't be able to install in Safe Mode.

[Panarchy]

On a Different and much more important note, will I need to tell her to cancel her credit cards?

[-pops-]

On a Different and much more important note, will I need to tell her to cancel her credit cards?

Read my first reply. The longer you leave it the more likelihood of something going amiss.

[Panarchy]

If there is any possibility of the card being compromised, contact the card issuer without delay. It it for both your and the card issuer's protection. They will not mind as they take the view of better safe than sorry.

I don't know what the infection/infestation is but if you are unable to remove it as you hope, come back.

So I should tell her to cancel her credit cards?

[ɹəuəllıʍ ʇɐb]

Have you read pops' first reply?

contact the card issuer without delay.

They will know what to do (which is most likely to stop the card immediately). You have already waited more than 15 hours, which increases the danger that someone may have misused the card number.

[Panarchy]

Okay, I'll ring her straight away (after this class)

[Panarchy]

So will I be able to install SuperAntiSpyware in Safe Mode?

[andsome]

As with all Panicky threads, this is going on and on and on. Panicky why on earth don't you tell her to ask the card company for a new card and be done with it. Why not try the install of SUPERAntiSpyware in safe mode. Unless other members have already done this they will have no way of knowing will they?

P.S. How many other forums is this thread appearing on?

[andsome]

One other point. If you are having to ask questions on here about partitioning, I would question whether you should be even thinking about doing this on someone else's computer.

Should you also be even thinking about putting Linux onto the computer? She is obviously pretty naive about computers, you are liable to cause her even more stress. The best thing would be to tell her to go to the local shop if you are at all unsure about anything.

A little knowledge can be a dangerous thing.

[Panarchy]

I am professional IT help (in other words, she hired me).

And I want to either fix the problem, or format the drive (whilst not losing important files)

Panarchy

PS: Thanks -pops-, I told her yesterday when I received your reply, that she should cancel her credit cards. To the best of my knowledge, she has.

PPS: This topic is appearing on 2 forums, the two that I have found most useful in the past (neowin & windowsforum)

NOTE: You double posted... "mods!"

[andsome]

You certainly don't sound very professional. A professional does not go into peoples houses, mess about then post questions on forums. I think that you should leave this womans computer alone, other than doing what you are competent to do. I am far from being a professional, but have helped several friends, and also my daughter with simple things like reinstalling Windows, downloading and installing programs etc. I would never attempt anything that I had not previously done SEVERAL times on my own computer first. You are liable to commit a real act of folly if you mess about with partitioning and installing alternative operating systems onto someone else's computer.

[Mike567]

I agree with andsome, I think your own business/freelance is dangerous work if you don't have much experience.

Computers control peoples lives if they lose it because you messed something up you can be looking for a lawyer.

You need a good tool kit to go and fix others somethings, the situation your in I would be running BartPE with anti spyware app.

But I would say that once security has been broken there is a lot of chance antiviruses/antispyware apps may not pick them all up, to be sure the main option is reinstalling the OS which at the same time will cause your client a lot of grief.

Be careful and only help people if you really have the experience and qualifications.

[Boris]

I am professional IT help (in other words, she hired me).

Being hired doesn't necessarily mean that someone is "professional"

[catgate]

With allusion to luke x. 7 (AV) The labourer is worthy of his hire.

The hye God, that al this world hath wroght, Seith that the werkman worthy is his hyre.

[c 1390 Chaucer Summoner's Tale ]

[andsome]

I don't expect him to take any notice, he NEVER does. I just feel very sorry for the woman concerned. She is very likely going to end up with a big repair bill at the local shop.

[Panarchy]

I am currently doing an IT Course (in networking).

Folly? I don't think so.

[andsome]

quote I am currently doing an IT Course

Maybe so, but to mess about and experiment on someone else's computer is not just folly, but completely unfair to her. You have started another thread elsewhere on something else to do with this computer, again it is something that you do not yet know how to handle. The best thing that you can do is to admit to her that you are taking advice step by step on several forums, and are NOT the expert that she thinks you are, and let her have the computer looked at professionally. Wait until you know that you are an expert, and meanwhile mess your own computer up, not someone else's.