Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

E-mail possibly hacked

Started by Hacksawjim , Mar 11 2014 07:51 PM

  • This topic is locked This topic is locked

#1
Hacksawjim
Posted 11 March 2014 - 07:51 PM

Hacksawjim

    New Member

  • Member
  • Pip
  • 1 posts
Hi, a few weeks back I got an email from the bank, problem is the bank don't send emails and I don't have an account with the bank in question. I was multi tasking an opened it and closed it straight away, ran the bank in question and they said not to worry. On thursday morning I had an account hacked into and all my money taken. It was a betting account and I couldn't figure out how they might have gotten in, my account is suspended and no sign of me getting that money back. I couldn't think of anyway anyone could have got those details and did a full computer scan, adware was found and promptly deleted, but I keep getting those same bank emails since I opened the first one, and more regular since my account was hacked so i'm wondering if anyone can help me trace this, or if I can find out if this could have been the cause? i'm a novice on computers and don't know what part of this if any would be the hackers IP address, i've removed my email address from this and changed all my passwords and ordered a new debit card. No other accounts seem to have been accessed, would appreciate any help i'm out a lot of money over this, and this is just clutching at straws

x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=none (sender IP is 174.142.82.239) [email protected]; dkim=none header.d=bankofireland.com; x-hmca=none [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTnfsWCXMo9Ow7U5ivBxPBQubGuycM7kH1pRO2sjrpS0Ss2fLWLUEJpZvoKrMUfqNYpsL0Gn4Njz/ow9Er/EymlgyqEph75nShrDEMhuVwuqLh3kIrBNJHTFAKPLeXLkN0ttRokexppeN2hniP/DKzE6/Lke85n3Ji/BkFD19zibx5Ik9xcxe7wnSdgMvDvvDB3jURlzseuQF7vVVQq5I+kC
Received: from smart3.qualitare.com.br ([174.142.82.239]) by BAY0-MC4-F46.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Tue, 11 Mar 2014 07:57:46 -0700
Received: from [94.242.252.121] (port=52544 helo=bankofireland.com)
by smart3.qualitare.com.br with esmtpa (Exim 4.80)
(envelope-from <[email protected]>)
id 1WNO7J-0006ha-Ev
for; Tue, 11 Mar 2014 10:57:17 -0400
From: Bank of Ireland <[email protected]>
To:
Subject: BOI0922: Account on hold
Date: 11 Mar 2014 15:57:54 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - smart3.qualitare.com.br
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bankofireland.com
X-Get-Message-Sender-Via: smart3.qualitare.com.br: authenticated_id: [email protected]
Return-Path: [email protected]
X-OriginalArrivalTime: 11 Mar 2014 14:57:47.0054 (UTC) FILETIME=[43B7A4E0:01CF3D3A]

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w=
3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns=3D"http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-1=
" />
<title>Bank of Ireland</title>
</head>

<body>
<p><img src=3D"http://online.hemsco...mages/logo.gif" =
alt=3D"Bank of Ireland"
  • 0

Advertisements

#2
zep516
Posted 11 March 2014 - 09:43 PM

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Hi Hacksawjim

I can't tell anything from that, but I would at lease have the computer checked out with additional Malware scans Here. Post the OTL log.txt and the Extras.txt log in the Malware removal forum. Someone will do a thorough review for you.

Thanks
Joe :)
  • 0

#3
zep516
Posted 11 March 2014 - 10:02 PM

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Sorry Hacksawjim,

Did I make an error, you are in the Malware removal forum,

Pleas post the logs asked for.
  • 0

#4
zep516
Posted 16 March 2014 - 06:42 PM

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Hello,

Are you still with us.
  • 0

#5
zep516
Posted 03 April 2014 - 07:11 PM

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP