Computer hacked - help!

[The Fugitive]

2 hours ago, DaveBKK said:

Considering your computer skills.... just ditch your computer. Get an iPad w/Keyboard or get a Chromebook. 

 

Seriously many of you folks on here probably don’t need a traditional laptop anymore. Especially with the complexity of scams, virus and hacks out there. You’ll be much better served with an iPad or a Chromebook. 

Very good advice from everyone here. Many people use their Smartphone for almost everything. Some websites can be a pain and spreadsheets are awkward but a modern Android phone could well be sufficient.

[TGIR]

I hate to repeat myself so I'll try to be concise.  I posted to Facebook a recap of my computer travails yesterday.  If you're on Facebook there was a lengthy discussion about similar subjects.

 

Here's what I found out directly from Microsoft and Facebook while I was in the process of replacing my old laptop over the past three weeks......I bought a used one.......wouldn't charge the battery, junked it and bought a new one....had Windows 10 on it and I spent an entire day trying to set the GDmmmed thing up.  Finally went to Advice in Cha Am where I bought it and ordered a PC WITHOUT Win 10......Got a new one with Windows 8.1......only have a problem about every half hour or so when I get a BIG notice from Microsoft that my brand new computer has a chip that isn't supported by them anymore.......so I should buy a new one with Windows 10 and my problems will be solved.....thanks but no thanks......I could give a rats behind If I won't be getting their updates which F the whole computer up anyway.

 

O.K.  sorry, got carried away. Here's the deal, verified in writing on my new computer(s)..... Windows has all the info on your computer whether they need it or not.  They can arbitrarily update your computer whenever they want to.......if you're a Win 10 user.  Other users with Win 7 or 8 can try to stop them by making sure they are notified of updates and by instructing their computer not to install any updates without permission.  Google, you will find out if you are installing Google on a new machine, already tracks anything and everything you do on your Google enhanced computer.....they will even ask you what you want to track, or not track......although my secret super brain thinks they are going to keep doing it whether you want them to do it or not.....they'll just tell you they're not doing it and assume you, like the other 98% of us dumb asses will believe them.

 

In closing, I hope this made you feel better......personally, I have to go take a shower......yuk!  Just do some reading up on Win 10 before you go any further.......you CAN choose to use Win 7 or 8 which may be supported for a couple more years but personally I'll choose not to be supported at all, and buy a new computer when the one I have takes a dump I can't fix........I'd try Unix but at my age I'd rather have a daily rectal exam.......

[Stocky]

1 hour ago, TGIR said:

I'd try Unix but at my age I'd rather have a daily rectal exam.......

You don't need to go to that extreme, just install Linux Mint.

[Thomas J]

There are a number of programs even free ones at CNET to remove malware.  My best luck has always been to type in to google exactly the message the malware is broadcasting. There likely are already posts out there regarding the malware and how to remove it.  One easy way on windows if you have been creating a restore point  The restore point puts the computer back to the date you have restored.  If that pre-dates the time the malware was introduced on your computer it will be as if it was never loaded to begin with. 

https://support.microsoft.com/en-us/help/12415/windows-10-recovery-options

[The Theory]

9 hours ago, Tofer said:

Correct, I don't believe it's a virus as they are into my settings and making adjustments / standing instructions, such as 'switch off Windows defender on each log in and the 'delete files' automatically. 

When I reset Windows defender and run a search, it comes up with 'no infected files / programmes'.

Yes it’s not a virus, it is actually a malware. 

Perhaps the pc got that not by remote computer tech.

 

Edited February 4, 2019 by The Theory

[Tofer]

20 hours ago, KittenKong said:

Once remote-access software is installed it can be made to report back to a central server and to provide the current IP address. Commercial remote access software works like that, so it isnt limited to malware or hacker tools. In this way it can be easy for someone to log into your machine even if they dont know where you are, once the machine is set up to allow it.

Thank you for that clear explanation KK. 

 

So even if I manage to change my email password, it will have no effect on their ability to access my computer and do whatever they like, including log my new email / passwords etc. through my keystrokes.

 

By the way, I just tried to change my email password and the process was unbearably frustrating. Microsoft have blocked emails to the security info alternative email I used as all the verification codes they sent were rejected. As a consequence I've had to change my security info to another method and that will now be 30 days wait to be able to use it to attempt to change my password again. Isn't this super intelligent technology wonderful!!

 

So if my machine's software is set up to allow access wherever I go, then it would seem logical to bin this machine and start a fresh with a new one. 

 

What confuses me though is how they manage to re-establish their control of my machine after I have had the computer completely wiped clean and rebooted by a professional computer technician in the UK, twice, reset to an earlier date 3 times by me, all to no avail.

 

[Tofer]

21 hours ago, neeray said:

I fully understand your "technical dinosaur" comment. Like me, and like somebody suggested, you need a local, hands-on tech.

I most certainly do. 

 

How to find one that you can trust?

Edited February 5, 2019 by Tofer

[Tofer]

20 hours ago, DaveBKK said:

Considering your computer skills.... just ditch your computer. Get an iPad w/Keyboard or get a Chromebook. 

 

Seriously many of you folks on here probably don’t need a traditional laptop anymore. Especially with the complexity of scams, virus and hacks out there. You’ll be much better served with an iPad or a Chromebook. 

I have an iPad and a, so called, smart phone, but they don't have SD slots, DVD or USB ports to connect anything. 

 

I have a lot of files on my laptop both documents and photos, and I wouldn't have the first idea about how to save them across to an iPad. You will probably suggest Microsoft cloud or something similar, BUT..., can I trust those remote facilities as much as my own hardware? Will my compromised machine pass on the same problems I have now via that facility?

 

You can probably surmise that I'm nervous as hell about trusting any technology now.

[Tofer]

17 hours ago, TGIR said:

I hate to repeat myself so I'll try to be concise.  I posted to Facebook a recap of my computer travails yesterday.  If you're on Facebook there was a lengthy discussion about similar subjects.

 

Here's what I found out directly from Microsoft and Facebook while I was in the process of replacing my old laptop over the past three weeks......I bought a used one.......wouldn't charge the battery, junked it and bought a new one....had Windows 10 on it and I spent an entire day trying to set the GDmmmed thing up.  Finally went to Advice in Cha Am where I bought it and ordered a PC WITHOUT Win 10......Got a new one with Windows 8.1......only have a problem about every half hour or so when I get a BIG notice from Microsoft that my brand new computer has a chip that isn't supported by them anymore.......so I should buy a new one with Windows 10 and my problems will be solved.....thanks but no thanks......I could give a rats behind If I won't be getting their updates which F the whole computer up anyway.

 

O.K.  sorry, got carried away. Here's the deal, verified in writing on my new computer(s)..... Windows has all the info on your computer whether they need it or not.  They can arbitrarily update your computer whenever they want to.......if you're a Win 10 user.  Other users with Win 7 or 8 can try to stop them by making sure they are notified of updates and by instructing their computer not to install any updates without permission.  Google, you will find out if you are installing Google on a new machine, already tracks anything and everything you do on your Google enhanced computer.....they will even ask you what you want to track, or not track......although my secret super brain thinks they are going to keep doing it whether you want them to do it or not.....they'll just tell you they're not doing it and assume you, like the other 98% of us dumb asses will believe them.

 

In closing, I hope this made you feel better......personally, I have to go take a shower......yuk!  Just do some reading up on Win 10 before you go any further.......you CAN choose to use Win 7 or 8 which may be supported for a couple more years but personally I'll choose not to be supported at all, and buy a new computer when the one I have takes a dump I can't fix........I'd try Unix but at my age I'd rather have a daily rectal exam.......

My sympathies go out to you.

 

You sound as frustrated as I am.

 

[Stocky]

19 minutes ago, Tofer said:

I have a lot of files on my laptop both documents and photos

If that's all you need it for, why not drop Windows and install Linux - Linux Mint works fine and you can happily view photos, Word documents and pdf files, access the Internet and do your emails. Whatever's been following you around won't work on Linux.

[Tofer]

20 hours ago, Bundooman said:

I don't know the manufacturer of your laptop, but there are certainly repair agencies that can clean and re-install programmes for you.

 

Over the years, I have used Samsung and HP/Compaq Service agents here in CM, (for three of the computers/laptops I've had over the years and the last one I have used is the Acer Service Centre.

 

So that's 4 different computers and 3 Service Agencies, (HP&Compaq are the same agency here) and I have been pleasantly satisfied with service and the prices quoted.

 

I'm a dinosaur also. I would advise you to at least look at them if there is an Service centre for your machine. Up to you, of course, but that is what I would do.

It's a Sony Vaio. I will try to find someone in our Krabi area.

[chrisinth]

On 2/2/2019 at 6:27 PM, Tofer said:

I've had issues with my computer for some time since I stupidly allowed a so called expert helpline access to assist with a problem. What confuses me is that access was facilitated via an IP in UK but since I've been in Thailand I am still having problems obviously on a completely different IP address and password.

 

Recently when I log onto my laptop there is a start up screen asking me to choose an operating system, Windows 7 or other. I try to escape this process but cannot move on until I make the selection.

 

Then when I try to open up documents / files the message 'delete this file' pops up and I cannot easily get rid of it. Sometimes persistently hitting the NO icon gets rid of it and the file opens, but then wherever the cursor is sitting the text starts deleting automatically.

 

Also when I log onto my email and try to open a message I get the same problem and the message gets deleted, if I  try to open the deleted message it gets permanently deleted.

 

I've checked the control panel and find that every time I log on Windows defender has been switched off. I've tried resetting the computer to an earlier date which took a lot of effort, but did help for a short while. Now it's back. To the screwed up version.

 

Someone has messed about with the settings and I've no idea how to fix it, also I'm very concerned that if someone can mess with my computer settings they may also be able to log my key strokes and learn of my passwords etc.

 

I'm just about at my wits end with it and on the verge of buying a new computer and changing my email address to try to thwart the culprits.

 

Please understand I am a bit of a dinosaur where technology is concerned and any assistance/ instructions will need to be simple, and would be much appreciated.

 

Many thanks in anticipation.

OP, just my two pence worth on your issues. I will just keynote your issues as I see them and try not to get into it too much.

 

1. IP's. You seem concerned that access is being granted through IP addresses. Unless you are on a static IP address, most users are using dynamic IP; this IP will be changed by whichever ISP you are using everytime you switch off your computer or at the end of each 'lease' by the ISP. In short, access is not by specific IP address.

 

2. There is an extremely good chance that whichever 'service' you allowed to remotely access your computer has indeed injected a trojan, loaded up with a cocktail of scripts to <deleted> with your system. I am suggesting this as your problems don't seem to be targeting one but several programs and actions.

As such, IMO, it is a waste of time trying to rectify your current OS as regards scanning (although it is good practice to do so in future) for virus/malware as, even if the trojan is known, the contents carried by the trojan probably isn't and the scripts won't show up.

You need to format the drive and install a clean operating system.

 

3. As others have suggested, immediately change all your passwords to all accounts that are related to this computer.

 

4. Transferring data/pictures/videos from the old system to the new operating system. I haven't seen any advice given on this which is quite surprising as it is such an important step as some compromised files may be present in these files such as infected macros for example. When transferring data, in this sort of instance, I would not recommend using any image type of software, but manually select what you want to keep and transfer this to an external thumb drive or external drive. Make sure you have a reliable anti-virus/anti-malware program running when you do the transfer. I would also include backing up any other partitions you have on this drive.

 

5. When doing a fresh install of the operating system, delete all present partitions on the drive and format the lot. Once this has been done, you can re-establish any additional partitions you need. If you intend changing your HDD for an SSD, all the better as you will appreciate the increase in performance later. 

 

6. When the fresh install has completed (and your network adapter drivers have installed correctly) install your preferred anti-virus/anti-malware programs or, if just using windows defender, make sure it is updated to the latest definitions. You can then start reinstalling your 3rd party software such as Office/Email/PDF software, etc. On completion of this, transfer across the files you saved to external.

 

And finally 7. Think a lot before you allow someone to access your computer remotely. In fact, you could go into Services and disable Remote modules if it makes you feel better. That said, software like TeamViewer and the like use different methods of access.

 

Use the above a a reference when you take your confuser to the shop or for yourself if doing it on your own. Good time to upgrade to W10 at this juncture......................

[SteveK]

If your computer has been accessed remotely by someone asking for payment, then 100% you have fallen victim to a scam. They can use all kinds of tricks to annoy you until you pay the money, and even then they may do nothing. YouTube will show you many examples.

 

You need a clean reinstall of your operating system, available at any computer store for a few hundred baht maximum, and be more careful next time. Never allow remote access to anyone, whether it's someone from Microsoft, Steve Jobs or Jesus, it's always a scam.

 

EDIT: Chrisinth has just given excellent advice.

Edited February 5, 2019 by pr9spk

[Tofer]

20 hours ago, stud858 said:

Your computer may have a windows restore partition on it. Usually accessed by continually pressing a fn key immediately after computer has switch on button pressed after a complete shutdown not just sleep mode. What's your model? Usually printed underside. Google the model number with "how to factory reset restore windows" you can do it yourself.

 

Also I don't recommend having antivirus on computer permanently.

They end up doing more harm from my 10 years experience in repair shop. Sensible browsing is a much better protector. But the industry still pushes scare tactics so they are popular. Did you have antivirus? Did it stop this problem from occuring?

 

If you are wanting to go for an SSD I have a 250gb SSD Samsung brand for sale. PM me if you are wanting to use SSD. The guys on this forum will tell you what's a fair price for one.

It will speed up computer. For example boot up time will go from around 30 sec. To 10 seconds. Strongly recommended.

 

Good luck

 

I have a Sony Vaio which has an assist button, but it says I have no problems in the 'solution centre'. It recommended system tune up and when I tried to run that it froze up, so I shut down again.

 

Thank you for your offer of the SSD, but at the moment I'm more interested in getting my computer to work properly and not too concerned about it's speed right now. I will certainly consider this upgrade if / when I get this machine to someone to fix the software intrusion problems, or purchase a new machine.

[SteveK]

It doesn't sound like you need a new machine. Where abouts are you based? I could probably sort it for you in an hour depending on how big your hard drives are, the suggestion of an upgrade to Windows 10 is a good one, they can definitely do that for you at Fortune Town if you buy the O/S there.

Edited February 5, 2019 by pr9spk

[Tofer]

24 minutes ago, Stocky said:

If that's all you need it for, why not drop Windows and install Linux - Linux Mint works fine and you can happily view photos, Word documents and pdf files, access the Internet and do your emails. Whatever's been following you around won't work on Linux.

Thanks. 

That's is exactly all I need it for.

So you are saying the malware on my computer will not be able to function if I switch to Linux?

 

Will I loose my current files switching over?

[Greyhat]

OP don't install Linux, yes it's a better and more secure operating system but you're going to have to learn everything from scratch. Better stick to what you know. If you're local and are okay with the idea I'd be happy to sort out any issue for you. I'm an IT professional and would be happy to help out as a friend.

[Tofer]

21 minutes ago, chrisinth said:

OP, just my two pence worth on your issues. I will just keynote your issues as I see them and try not to get into it too much.

 

1. IP's. You seem concerned that access is being granted through IP addresses. Unless you are on a static IP address, most users are using dynamic IP; this IP will be changed by whichever ISP you are using everytime you switch off your computer or at the end of each 'lease' by the ISP. In short, access is not by specific IP address.

 

2. There is an extremely good chance that whichever 'service' you allowed to remotely access your computer has indeed injected a trojan, loaded up with a cocktail of scripts to <deleted> with your system. I am suggesting this as your problems don't seem to be targeting one but several programs and actions.

As such, IMO, it is a waste of time trying to rectify your current OS as regards scanning (although it is good practice to do so in future) for virus/malware as, even if the trojan is known, the contents carried by the trojan probably isn't and the scripts won't show up.

You need to format the drive and install a clean operating system.

 

3. As others have suggested, immediately change all your passwords to all accounts that are related to this computer.

 

4. Transferring data/pictures/videos from the old system to the new operating system. I haven't seen any advice given on this which is quite surprising as it is such an important step as some compromised files may be present in these files such as infected macros for example. When transferring data, in this sort of instance, I would not recommend using any image type of software, but manually select what you want to keep and transfer this to an external thumb drive or external drive. Make sure you have a reliable anti-virus/anti-malware program running when you do the transfer. I would also include backing up any other partitions you have on this drive.

 

5. When doing a fresh install of the operating system, delete all present partitions on the drive and format the lot. Once this has been done, you can re-establish any additional partitions you need. If you intend changing your HDD for an SSD, all the better as you will appreciate the increase in performance later. 

 

6. When the fresh install has completed (and your network adapter drivers have installed correctly) install your preferred anti-virus/anti-malware programs or, if just using windows defender, make sure it is updated to the latest definitions. You can then start reinstalling your 3rd party software such as Office/Email/PDF software, etc. On completion of this, transfer across the files you saved to external.

 

And finally 7. Think a lot before you allow someone to access your computer remotely. In fact, you could go into Services and disable Remote modules if it makes you feel better. That said, software like TeamViewer and the like use different methods of access.

 

Use the above a a reference when you take your confuser to the shop or for yourself if doing it on your own. Good time to upgrade to W10 at this juncture......................

Thanks for that very detailed advice.

 

It will definitely have to be a tech expert that implements that lot, as most of what you wrote went over my head.

[Tofer]

17 minutes ago, pr9spk said:

It doesn't sound like you need a new machine. Where abouts are you based? I could probably sort it for you in an hour depending on how big your hard drives are, the suggestion of an upgrade to Windows 10 is a good one, they can definitely do that for you at Fortune Town if you buy the O/S there.

I'm in Koh Lanta, Krabi.

 

Don't know Fortune Town?

 

Happy to carry it around when I visit Phuket, Trang, Surat Thani, Bangkok, if you're anywhere near these locations.

[Tofer]

8 minutes ago, Greyhat said:

OP don't install Linux, yes it's a better and more secure operating system but you're going to have to learn everything from scratch. Better stick to what you know. If you're local and are okay with the idea I'd be happy to sort out any issue for you. I'm an IT professional and would be happy to help out as a friend.

 

9 minutes ago, Greyhat said:

OP don't install Linux, yes it's a better and more secure operating system but you're going to have to learn everything from scratch. Better stick to what you know. If you're local and are okay with the idea I'd be happy to sort out any issue for you. I'm an IT professional and would be happy to help out as a friend.

Where are you located?

 

I'm in Krabi area.

[Stocky]

19 minutes ago, Tofer said:

Will I loose my current files switching over?

Not if you back up all your files before hand. You'd want to do a clean install with Linux as the only OS, not a dual boot. Linux will reformat your HDD.

 

15 minutes ago, Greyhat said:

OP don't install Linux, yes it's a better and more secure operating system but you're going to have to learn everything from scratch.

Linux Mint isn't hard to understand, it's a very intuitive user interface that is much the same as Windows, my wife and 8 year old granddaughter are happy enough using it. If all you're doing is web browser, email, word processing, spreadsheets and storing photos, watching movies and listening to music, all that works from the install. The only issues would be with external hardware compatibility, printers and scanners.

[metempsychotic]

18 hours ago, TGIR said:

I hate to repeat myself so I'll try to be concise.  I posted to Facebook a recap of my computer travails yesterday.  If you're on Facebook there was a lengthy discussion about similar subjects.

 

Here's what I found out directly from Microsoft and Facebook while I was in the process of replacing my old laptop over the past three weeks......I bought a used one.......wouldn't charge the battery, junked it and bought a new one....had Windows 10 on it and I spent an entire day trying to set the GDmmmed thing up.  Finally went to Advice in Cha Am where I bought it and ordered a PC WITHOUT Win 10......Got a new one with Windows 8.1......only have a problem about every half hour or so when I get a BIG notice from Microsoft that my brand new computer has a chip that isn't supported by them anymore.......so I should buy a new one with Windows 10 and my problems will be solved.....thanks but no thanks......I could give a rats behind If I won't be getting their updates which F the whole computer up anyway.

 

O.K.  sorry, got carried away. Here's the deal, verified in writing on my new computer(s)..... Windows has all the info on your computer whether they need it or not.  They can arbitrarily update your computer whenever they want to.......if you're a Win 10 user.  Other users with Win 7 or 8 can try to stop them by making sure they are notified of updates and by instructing their computer not to install any updates without permission.  Google, you will find out if you are installing Google on a new machine, already tracks anything and everything you do on your Google enhanced computer.....they will even ask you what you want to track, or not track......although my secret super brain thinks they are going to keep doing it whether you want them to do it or not.....they'll just tell you they're not doing it and assume you, like the other 98% of us dumb asses will believe them.

 

In closing, I hope this made you feel better......personally, I have to go take a shower......yuk!  Just do some reading up on Win 10 before you go any further.......you CAN choose to use Win 7 or 8 which may be supported for a couple more years but personally I'll choose not to be supported at all, and buy a new computer when the one I have takes a dump I can't fix........I'd try Unix but at my age I'd rather have a daily rectal exam.......

As someone here has already said, you lack far too much knowledge to use a windows machine. Scap it all a d buy a Chromebook. 

 

Of course you will. Still be under googles thumb, but that is simply the cost of doing business these days. 

[Tofer]

22 hours ago, dotpoom said:

Am sincerely sorry to hear of your problems...but had to have a little smile to myself ..You write.. .." Please understand I am a bit of a dinosaur where technology is concerned"

   Having read your full post I thought to myself.. "What does that meke me"?...most of it went way above my head, 555.

PS...hope it all works out well for you.

You're doing better than I did when I first discovered computers.

 

Here's a little anecdote to have another chuckle at.

 

Working in a large site office in Malaysia I passed the time of day with the contractors project manager, then he asked, 'why are you still talking to me?', I asked 'why not?'. He then told me he was surprised because of the emails he'd been sending me. To which I replied 'what's an email?'. We went into the office and he opened up the emails on the office system LAN (internal network). I was then furnished with a computer and the inhouse techy taught me how to switch it on and a few other basics. Over the 2 years on that project, and with lots of help from colleagues, I gradually became somewhat competent in its use but, as you will have guessed, never actually understood what was going on behind the screen...555

 

I got so proficient in its use that one of the contractors managers, a really big fellow, threatened to wrap it around my head one day...555. I told him to f-off out of my office until he could conduct himself in a professional manner. Sadly he got fired for that outburst as one of his colleagues witnessed it and reported him, I did not drop him in it I hasten to add.

 

So I've had nothing but trouble with these infernal machines.....

[indepth]

i got an email yesterday, it quoted a PW i have used for some site, if I dont send the sender $980 they will notify my contacts that i view porn sites and show them webcams i have made. I dont  hve web cam and as  for visiting port sites, dont care who knows. (ps, how do i get rid of this underlining?)

[Greyhat]

28 minutes ago, Tofer said:

Where are you located?

Unfortunately I'm in central Bangkok.

[chrisinth]

21 minutes ago, hyku1147 said:

Yes - and the reset will saves your files.

Have you tried System Restore?

What is loading on start up?

Have you tried booting up in safe mode?

When you start Task Manager, what processes are running?

 

the problem with a reset (and opting to keep files & settings) in this instance is that it will save not only what you want but also anything undesirable as well.

 

If either of these have been compromised, you will simply keep them without solving the issue.

 

Big word here is if..................

Edited February 5, 2019 by chrisinth

[Greyhat]

5 minutes ago, indepth said:

i got an email yesterday, it quoted a PW i have used for some site, if I dont send the sender $980 they will notify my contacts that i view porn sites and show them webcams i have made. I dont  hve web cam and as  for visiting port sites, dont care who knows. (ps, how do i get rid of this underlining?) 

It's just an automated bot going through leaked databases of stolen passwords emailing everyone. Just ignore it and change your passwords. You can check a site like this to see if your password has been compromised. https://haveibeenpwned.com/

 

Oh and press the U at the top left hand side.

Edited February 5, 2019 by Greyhat

[SteveK]

In transferring your files to a USB device and then putting them back on after reinstallation of the O/S, you may find the trojan pops up again. Therefore, unless there is stuff on there that you really really need, better to do a full clean installation and cut your losses. Obviously it depends on the malware that you are infected with.

 

EDIT: Chrisinth basically said the same thing again!

Edited February 5, 2019 by pr9spk

[Greyhat]

1 minute ago, pr9spk said:

In transferring your files to a USB device and then putting them back on after reinstallation of the O/S, you may find the trojan pops up again.

While technically possible this is rather unlikely. I wouldn't suggest he deletes all his personal files just because there might be a small chance he'll be back at square one.

[Tofer]

6 hours ago, chrisinth said:

the problem with a reset (and opting to keep files & settings) in this instance is that it will save not only what you want but also anything undesirable as well.

 

If either of these have been compromised, you will simply keep them without solving the issue.

 

Big word here is if..................

What if I did try to save all my documents and photos to Cloud or similar, would their protection prevent any Trojans or malware or whatever demons passing across?

Edited February 5, 2019 by Tofer