Yahoo Logon from PAKISTAN?

[ds1528]

Hi jholland...

I ran the ESET software again and there was not .txt file generated other than the one I sent to you. What do you suggest? I have included a screen cap og what the file(s) look like. Thanks

[jholland1964]

It won't generate a "real log" unless something was found and removed.
Did you remove the programs I noted earlier? Are you still having the problems noted in your first post?

How many "shared files" do you have stored on there? Are all the games paid games or did you get them via P2P? This is the reason for your problems, without a doubt. It is absolutely the easiest way to get an infection.

Do you do any online banking or shopping? You need to contact your bank and credit card company and tell them your computer has been compromised and if possible give them an approximate date when all of this began, tell your credit card company that your card has been stolen so you will not be held liable for any charges you personally didn't make, because it obviously has since you couldn't make a purchase.

[ds1528]

Thanks for the advice. Utorrent has been used many times for music. I have changed all of these passwords and been monitoring all of my accounts without any unknown or suspicious activity. I have uninstalled all of those P2P programs. All of the games are paid for. There have ben no fraudulent charges since I first noticed the logon from Pakistan back in March. Yesterday, I logged on to Yahoo from the computer at work and there was a new IM from some unknow source. All I can do is not open them and block the sender...which I have done.

[jholland1964]

uTorrent is a P2P program, peer to peer protocol, which means you download and upload to other people downloading the same file. The music is not coming from the copyright owner and therefore not legal and extremely dangerous to do. Every single time you use uTorrent to download and upload music or any what would normally be a paid item but you are taking it without payment to the legal owner, to or from others this means that anybody can see your IP address when using peer to peer clients (like µTorrent), which identifies your computer on the internet.
The infected files found and removed by MBA-M were "supposedly" a screen saver, that doesn't necessarily mean that is what it was and it two of those files were found in your Back Ups.
Because you are still receiving IM's from unknown people that tells me that there is a good chance that a lot of other people, possibly thousands of others all over the world, that you don't know may have you IP address and they very likely got it via a file transferred using that uTorrent program. You opened the door to your computer and all of your private information by using this program in order to download music, and obviously for "free" when it should have been paid for...you got a whole lot more than Free music. Regardless of whether you have changed your passwords, you DO need to notify your credit card company and your bank by telephone not the computer of this breech of security on your computer. Doesn't matter if you have not seen unknown charges up to now...you may see them later and you must personally notify these companies of this ASAP, otherwise you could be held liable for charges made at a later time since you knew of this but didn't inform them.
If you did any of this from a work computer than that computer security also may have been compromised also, which could also put other work computers at risk also.

One other thing you need to do is get rid of that AVG Anti-Virus Free Edition 2012 program. It is one of the lowest rated anti-virus programs available. I can honestly say I have helped clean up more computers on the various forums where I post that are running AVG than any other anti-virus program. It continually ranks in the bottom in independent testing. I strongly recommend that you Uninstall it via Add/Remove.

There are two other FREE AV programs that are much better and offer superior protection. They are Avira Free 2012 and Avast. I personally use Avira and have for many, many years.

You can download Avira Free 2012 from here:
http://www.avira.com/en/download/pro...free-antivirus

Here are instructions for it's install:
To begin, double click the executable file to start installation. Vista and Windows 7 users must run this executable as Admininistrator.

Before installation the installer will scan your system for other security programs installed. Avira Free AntiVirus 2012 may warn you of POSSIBLE incompatible security software on your system like Emsisoft AntiMalware, some 3rd party Firewalls, especially Zone Alarm. It is just a warning of POSSIBLE conflicts and you do not need to uninstall these software programs. Just install Avira Free AV and everything is OK. I was warned about SpyBot and SpywareBlaster, I IGNORED the warning, I still have the programs and they ARE working fine. The warning is of POSSIBLE conflicts, not absolutes. I say again, you DO NOT have to uninstall the programs you may receive a warning about. The Avira program has a WebGuard included ONLY IF you first accept it, this would be one reason for this type of warning. I will get to the WebGuard in a moment.
You will need to WATCH the full install as ALL of it REQUIRES User interaction. It will not proceed unless you continue to follow it and read the screens and then click the required buttons to go forward.
Choose Installation Type choose CUSTOM INSTALL click Next.
The next screen is titled Web Protection with Avira Search Free Tool Bar for your browser.
You DO NOT have to take it, in fact you must actually CHOOSE to take it. I say again, it is NOT automatically included and you must personally CHOOSE to take them by putting in two separate check marks in order to have this included. You DO NOT WANT this so DON'T place any checkmarks, just click Next
The next screens are pretty self explanatory. Default options are already in place so just continue to click next until the install is complete.

You can and should schedule a weekly scan at the time that is most convenient for you to do so. You do this on the left side of the program, under Administration, Scheduler.

If you would prefer Avast Free then it can be downloaded from this link:

http://www.filehippo.com/download_avast_antivirus/

[ds1528]

Thank you for the concern and advice. One last question - I have checked my Windows Firewall several times and it says it is "on"...yet several of the scans have said that there was no evidence of a Firewall. Should I install another Firewall? If yes, then can you suggest one that would be best?

Thabnks again.

[jholland1964]

The Windows Firewall, no matter what the operating system, won't show in the scans but as long as it shows to you in the Security Center as turned on then it is. The Windows 7 Firewall is very good, don't worry about another one.

[ds1528]

Thanks for all your help!

[jholland1964]

You're welcome!