Help, I been hacked

WH_Conley · June 27, 2012, 03:28:44 PM

I didn't know anything was wrong til I got 3 mail failure notices this morning and a warning from Yahoo that my mail account had been accessed from Pakistan. Since then I have changed all of my passwords. Ran Malwarebytes, shows nothing. How did the Dang thing or whatever get in and why does nothing show up? I also run Microsoft security essentials. Do I need to do anything else? I guess I have been lucky, had this machine since 03 and have never been hacked before.

Texas Ranger · June 27, 2012, 03:31:29 PM

Look at you sent mail file and see if you actually had them out of your account, I did that, and I had none sent. They are harvesting email addies from some where and posting using that, giving us credit/blame for their crude.

Some one else told me how to do that when I started to get emails from folks that did not like "my spam".

Shotgun · June 27, 2012, 03:33:04 PM

It would be good to change your passwords every 3 or 4 months. Yahoo seems to be a victim fairly often in my experience.

WH_Conley · June 27, 2012, 03:59:10 PM

Now I can't even access my Yahoo account to check my sent folder, or anything else. Says it is locked for 12 hours.

Warbird · June 28, 2012, 12:25:37 AM

Given that info, it is likely that someone had guessed/brute-forced your old Yahoo email password. When you changed your password, they (or their program/script) kept trying to get back in, thereby locking your account.

Read here for more information:

http://answers.yahoo.com/question/index?qid=20080127200514AA7xKWv

Let me know if you need any help talking to Yahoo if your account doesn't unlock. I used to deal with this stuff all the time.

WH_Conley · June 28, 2012, 07:31:14 AM

Still can't get back in. The process to recover password has not worked because I had not thought to update the alternate email. It is on an old account through our internet provider when we had dial up. I have explained the situation on every yahoo page that is available for comments.

Warbird, thanks, looks like I am left out in the cold on this thing. It says I will have to wait more time to try again. I tried the new and old passwords both. No luck.

Warbird · June 28, 2012, 01:26:58 PM

Yeah, that's because your account is continually being locked, probably due to so many failed attempts to log in. If it continues past a few days, contact Yahoo and ask for help.

WH_Conley · June 28, 2012, 02:31:51 PM

How? I have tried every comment section I can find on their site.

Warbird · June 28, 2012, 05:04:58 PM

http://io.help.yahoo.com/contact/index?locale=en_US&y=PROD_ACCT&page=contact

WH_Conley · June 28, 2012, 09:30:32 PM

I finally got back in after another 12 hour wait. I checked out the sent folder, nothing there. I did get an email on my gmail account that was sent, supposedly from me, showed a lot my contacts on it. I guess it just stole my contacts and did not use my machine. Thanks for everything folks.

Jeff · June 30, 2012, 02:15:31 PM

With a yahoo address, it doesn't need your machine. I got 3 emails with infected links in them from your address before you got it shut down, but looks like its clear now.

WH_Conley · June 30, 2012, 03:57:25 PM

Is there anything else I need to do? I have my account back and password changed. I got a notice this morning that someone tried to access my account again, they didn't get in.

Jeff · June 30, 2012, 04:00:12 PM

Biggest thing is to make sure you have a strong password.

WH_Conley · June 30, 2012, 04:05:55 PM

OK, Thanks.

Does who ever this person have a list of my contacts now?

Jeff · June 30, 2012, 04:15:51 PM

Well, they certainly could have, but its most likely they simply used your email to send crap to them, and once closed and secured, they are on to the next easy target. You should be changing passwords anywhere that that email was used by you to set up any other kind of accounts. Hacking an email is the easiest way to get into the rest of someone's live if they use that account for other personal or financial things such as paypal or banking, or even a forum.

If you find you can't login to other places you used to be able to login to, there could be a problem.

WH_Conley · June 30, 2012, 06:33:29 PM

I changed every password on all forums, called my bank and put a freeze on my account for anything electronic til I had run a scan on my machine. They said there had been no attempts to access my account. Changed password on the bank too. I run Ccleaner a couple of times a week, shouldn't have been much available to get.

Jeff · June 30, 2012, 06:38:22 PM

Sounds like you did everything you could do.

Mark Wentzell · August 31, 2012, 05:55:15 PM

Do a search for a program called TDSS killer by Kaspersky. Its a free anti rootkit utility. You could have one on your system might be how they got your password :-\ Just a thought