New? Phone scam......

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi all,

My neighbour came to me very upset and REALLY wanted help.
He had received a letter from BT advising him of unusually high phone use. Turns out to be £500 in 1 week.

His computer was dialling out to the Caymen Islands every now and again.
I got him to put a firewall and up to date anti virus stuff on it and they found 2 lots of virus, and killed them. It appears that 3 attempts were made to access his computer via a back door (now firewalled) since putting on the firewall. They were looking for a file called FOFF370.tmp.
I have renamed this file. BT have put a block on all international numbers from his phone line.

Thing is that 'something' is still trying to dial out. Even if I remove the 'New Connection' from the dial-up in control panel it re-appears after a couple of minutes.

Anyone have any ideas?

Paul

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi Paul,

I've heard of folks being hit by this sort of malicious malware. One guy I knew got hit by a dialler that altered the dial-up no. to a premium rate one, then re-directed his browser to default to a porn site. It almost cost the guy his marriage - not funny.

Have you tried running Adaware on his machine ? That should find and delete all sorts of spyware and related nasties from his PC.

Hope that helps.

 

Nice one AJ - would the two sit OK on one computer, for the sake of comparing them ?

Just wondering, as I've always just used Adaware :hhhmmm