Scam which I have been caught with.

[normspanners]

Unusual but have been caught with an email scam I have seen an increase in this type of crap just lately but we had just bought a new bed for the lads room, BUT I didnt know where it was bought from, but got an email addressed to mr Norman, saying re tracking etc info for your latest purchase etc etc payed by P/pal from BEDLAMB or some such, naturally thought it was from the bed people so opened it, it imediately took me to a rar file and as soon as it opened, it went to work, luckily I have... IO BIT running which told me of three new items loading into start up, I blocked them but havnt been able to run chrome after as soon as I open it, it closes,it obviously waiting for the next browser to load which I have blocked it is a pain and now the restore points wont work.
So a warning any body else had similar. WIN defender didnt see it as evil..

 

[Shox Dr]

Never, never open attachments UNLESS you specifically asked to be sent it, and then either open in a txt reader, or scan it before hand.

I dont run any 'software' and havent for yrs, as relying on someone else doesnt work

 

[octo0072000]

sounds like you already had some malware on the pc Norm
try this if you can manage to open a browser
win defender is a waste of space have you tried booting into safe mode
https://www.malwarebytes.com/

 

[Brummie]

I tend to use disposable e-mail addresses when buying one off purchases on online. I have no real evidence it works but I think it does cut down on the spam e-mails

 

[monkeh]

Reboot in safe mode and run anti virus and anti malware software.

 

[wookie]

I tend to use disposable e-mail addresses when buying one off purchases on online. I have no real evidence it works but I think it does cut down on the spam e-mails

I also use a similar technique, I own a email domain rather than just an address so if I buy something from Beds4You I would tell them my email address is beds4you@wookie.com, I have a few mail boxes for my proper email but everything else addressed to ...@wookie.com goes into 1 mail box that I treat with suspicion whenever I read anything in there. If Beds4You becomes a pain and starts sending me spam then I configure anything from beds4you@wookie.com to automatically be deleted as soon as it hits the mail server.

p.s Company names & email addresses mentioned above are entirely fictitious and any similarity with any company past, present or future is entirely coincidental.

 

[normspanners]

Thanks guys yes i have used malware bytes and others in safe before, the thing is it just that it said it was tracking info, on something due that day, as many places do after recent purchases . Now what is more worrying is the name they called themselves which might have been a coincidence but being it was SOOO close to a recent purchase of a bed, bedlamb which could have been a legit name.

 

[Maxakarudy]

Depends on what OS you are on, but can't you roll back to a previous date before the virus was opened, done it a few times, works ok for me

 

[normspanners]

sounds like you already had some malware on the pc Norm

yes agree with that

Depends on what OS you are on, but can't you roll back to a previous date before the virus was opened, done it a few times, works ok for me

Ten, but as said its probably first off been into the REG and prevented restore points from working!

 

[normspanners]

Being fairly puter literate I am very annoyed at myself for getting drawn in and this is more a warning for others

 

[Shox Dr]

I also use a similar technique, I own a email domain rather than just an address so if I buy something from Beds4You I would tell them my email address is beds4you@wookie.com, I have a few mail boxes for my proper email but everything else addressed to ...@wookie.com goes into 1 mail box that I treat with suspicion whenever I read anything in there. If Beds4You becomes a pain and starts sending me spam then I configure anything from beds4you@wookie.com to automatically be deleted as soon as it hits the mail server.

p.s Company names & email addresses mentioned above are entirely fictitious and any similarity with any company past, present or future is entirely coincidental.

Ditto

...and the amount of people/companies that tell me I cant use their name in my addy. Simples I say, if any crap comes in to that [your] email address, I know EXACTLY where it originated from .
So dont be selling it on

 

[normspanners]

Its been switched off since and the network dongle out , using my spare diagnostic desktop one at the mo, this one runs off memory stick only no hdd

 

[angellonewolf]

if you cant get it sorted have a look at hirens boot cd and run the anti virus from the disk or remove your harddrive put in to another pc and run anti virus on the drive

 

[WorkshopChris]

I have one email address used purely for pay-pall only, as well as the real payment info and updates its not uncommon to receive email for things very similar to the company names of supposedly legitimate sellers. I have come to the conclusion that it may be a nice little side line for employees of online companies to sell or pass on email addresses.

 

[slimjim]

Don't kick yourself about it, it's either happened to you, or it will happen to you, or you have been very lucky,

We have had a few at work, and it's only with good planning or luck that we have avoided so far,
Fake invoices, seemingly genuine invoices from fake people, fake letters trying to change bank account details for suppliers, the boss needs to send payments urgently type thing.

 

[gaz1]

if i get something on my system i dont fath around its straight to format it and reboot it all back up from a backup that id made a while ago then its back up and running in 6 mins

thats after ive transfered what i want to something else

 

[mart]

Norm,
regarding the retore points not working, when I want to take the pc back to a restore point I have to disable my anti virus. After restore, it is then ok to switch the anti virus back on. Without doing this, it is not possible to do a restore with my set up.

 

[steve_s]

Take hard disc out slave it to another pc/laptop do virus malware scans etc as an other drive as far as the pc/laptop is concerned its just a bunch of files as the operating system is not running no where for virus/malware to hide even in the system restore which seems to be a place they hide.

 

[normspanners]

Up date on this
if it helps anybody, after running various anti malwares in safe mode etc etc etc to no avail, I though because it was an application I opened thats where to look and sure enough found about 6 notepad files full of chinese writing ?? anyway I kept deleting them and emptying recycle bin straight away coz they kept reappearing like magic untill I found the source in the registry Oh and one other folder in my apps and its now gone fingers crossed though not tried sys restore as yet.

 

[Brad93]

I just system restore nowadays got fed up of chasing virus around the computer