[afnog] hey

[Jeff Mason]

I already replied privately to vigo, with the steps - here's what I recommend:

1. change password to a COMPLEX password (yet, easy for you to remember)
2. scan system for any 'bad stuff' - virus, etc.

Jeff Mason, MCSE, BBA CIS
MDHA Systems Administrator
615-780-7031
jmason at nashville-mdha.org


-----Original Message-----
From: afnog-bounces at afnog.org [mailto:afnog-bounces at afnog.org] On Behalf Of Rob Thomas
Sent: Wednesday, January 30, 2013 9:57 AM
To: vigo augustine
Cc: afnog at afnog.org
Subject: Re: [afnog] hey

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Vigo,

This happens to a great many people every day.  You're not alone!

Begin by assuming that your Yahoo account is compromised.

> Please do u have an idea of what i can do about it now? 

Are you running Windows?  If so, I recommend the following:

1. Start here and follow the advice, install the tools, etc.:
   <http://www.microsoft.com/security/default.aspx>
   This will include the most current patches, anti-virus,
   anti-trojan, and personal firewall settings.  Depending
   on your system, this may take quite a while.  It is worth
   the time!

   You can also watch our video, "Making Windows more secure"
   on our YouTube channel.

   <http://www.youtube.com/watch?v=YmiX6Ld_COk>

   Perhaps also useful, "Tips to stay safe online."

   <http://www.youtube.com/watch?v=Uj0KzdXRq78>

2. Next I recommend the free version of Ad-Aware:
   <http://www.lavasoft.com/>
   Install it and run it regularly.  It's a nice compliment to
   classic AV, AT, personal firewall, et al.  Again this may
   run for a bit; please let it finish.

3. After that, change your Yahoo account password.  This is likely
   what was compromised, and it is likely to have been compromised
   through malware on your host (cleaned in steps #1 or #2,
   hopefully).

4. After that, send a note to your contact list suggesting that
   they not click on any links in email sent from your account
   in the past 48 hours.

Why wait on step #4?  Others who have been compromised have sent a note immediately, only to have that note countered by the online criminal who compromised the account.  You can end up with a point counter-point from your account, confusing everyone in your contacts list.

If you're running an OS other than Windows, please let me know and I'll suggest some different alternatives.

Please let me know if there is anything else I can do to assist.

Best regards,
Rob.
- --
Rabbi Rob Thomas
Team Cymru
https://www.team-cymru.org/
"Say little and do much." M Avot 1:15
-----BEGIN PGP SIGNATURE-----

iQCVAwUBUQlC4lkX3QAo5sgJAQLsPAP/dE2KGwml7MfBpFcQXyUuVqAEycbAKc8i
E2Wrc4OsIURY53kdlehWXx7He38wtGssi9b//xHiXpb6r4XzxEDT2ZtXC025oR1n
rcStnWB5LFepMURxazXr2h5xsXQ16wDVYbm2qgrvpXBDehJj+UIs/eU93+S1qOo2
PIzQNKZt7bE=
=ZLBi
-----END PGP SIGNATURE-----

_______________________________________________
afnog mailing list
http://afnog.org/mailman/listinfo/afnog