Help!!!

Onto our harddrives do you mean?

To copy and paste them in?

No. We don't keep sensitive info like that on the system.

I use the Cleaner and just yesterday i had a friend tell me i sent them a trojan!!
They found a trojan called ..VBKEYBOARDHOOK.dll in a game i had sent them yet Norton and The Cleaner had failed to find it!!

Both of these programs are updated automatically...So beware things can still get passed them.Moosoft asked me to email me them the game so i'm waiting to hear back from them.

This is what I,m worried about.

What do you guys make of the activity I'm getting on my Firewall. are there any tell tale signs I should look out for that might indicate a trojan?

To be honest though the more I think about it the more I believe it was taken from a website but I just don't want to take any chances.

Quote:

---

I wish I could get rid of file and printer sharing but its necessary

---

I would be looking into changing this too...Big hole!!

Yeah, most trojans on startup will try to open up a port, if you load a firewall, it will probably report this activity to you, unless you specifically said yes to the program, it should not be trying to access the internet on startup. So get a firewall, and make sure it loads on startup. Wait a minute and see if any programs pop up asking for permission to access the internet. And if nothing happens, get a port scanner and run it on yourself, and see if you have any open ports.

Well first off if it is a credit card then damages are gonna be $50.00. Second just cause you have an always on connect dosen't mean you have to have a home network on all the time. Third your firewal shows nothing really, the keyboard hook is a remapping of the keys and can mean a back space may boot you out of the game a common lame hook BTW. To remove file and print sharing goto start, system, utilties then the window tab scroll to file print sharing check it hit remove. Again if they are credit cards $50.00 is all your gonna have in damages inform the credit card compay cancel the account have them issue new cards, if Debit card you are SOL.

I'm thinking this guy probably just snagged your CC info from a website or during an online session. There are lots of possibilites of HOW it could have occurred, but keyloggers, and custom trojans don't seem to likely to me. For that, someone would have had to target your girlfriend specifically, and come up with a fairly custom solution for retrieving her CC. On the other hand, there are quite a few websites out there that try to give the appearance of being secure, but really aren't. All that a website has to do for IE or Netscape to display the "lock of security" showing an encrypted site is run the site through a secure server. From there, however, many web-merchants have the information (including CC numbers) emailed to them plain text from the secure server. All one has to do is sniff through the outgoing traffic from a secure server and wait for the magic numbers come rolling in.

Sound far fetched? Not even close. Most web-merchants know absolutely nothing about e-commerce security and rely on their ISP or host to fill in such details. Unfortunately, there are those ISPs and hosting services out there that don't know or don't care enough about e-commerce security to bother investigating the full route.

It would seem to me that this would be the most obvious way anyone could get your CC number and personal data. If it looks like a dog and barks like a dog, it's probably a dog.

Thanks for all your replies,

Roswell 1329, thanks, thats the kind of explanantion I was looking for, I was leaning towards the breach comming from a website but I didn't know how to make a case for it.

Thanks for filling me in, Her last transaction before this happened was to a small online pet store I guess it could have been them although I don't want to point the finger.

We'll be more careful in future.

Palemoon. Only $50 ??

Thats alright then, never mind the stress and paranoia that comes from having that kind of sensitive information sent to you by a total stranger.

Never mind the hassle of having to destroy all your credit cards and apply for new ones.

Sheesh If I knew it was only gonna cost me 50 bucks I wouldn't have bothered.

BTW I do know HOW to turn file and printer sharing off and on but unfortunately I need it on to preform certain tasks efficiently. But as you pointed out maybe I shouldn't have it on all the time.

To everyone that replied thanks again. With your help maybe I can avoid this happening to anyone else I know.

Cheers.

Nick.

One could try to trace these leaks of the web services by giving a bit different information to all of them. For example if you address is "Somestreet 17 B 6", enter it as "Somestreet 17B 6" in one service, "Somestreet 17 b 6" in another and so on. This is nothing that could prevent the payments to go through but when a hacker posts you your address, you can check your (encrypted ;)) file and see where the information was like that.

HeyReaver000:
Here is a link to an article on credit card fraud:

Fraud Info

The article indicates that the $50.00 limit is the result of federal law.
You, however, live in the United Kingdom.
Are you certain that you are protected by the $50.00 limitation rule?
:confused: