BT - Logmein123 scam, help?!
Author
Discussion

gman88667733

Original Poster:

1,196 posts

89 months

Thursday 13th June 2019
quotequote all
Someone just phoned my partner pretending to be BT saying there was an issue and they needed to get rid of some errors on her laptop.... So she was directed to logmein123.com and she initiated a remote desktop connection. She was asked to run something using windows + r and I think it was a command prompt as that is still typed in the box... I have been onto the command prompt history with doskey /History and there is nothing on it.
Once they had control, they opened up firstly the BT homepage for some reason and then the Santander page (her bank) and asked her to log in, which she did not.
They then cancelled the session and asked her to download teamviewer on her phone and they would do it that way. So she did and told them half of the connection ID before realising it was a scam and hung up.

I have scanned the laptop with Malwarebytes and nothing comes up, I can't find any suspicious activity and everything seems to be running okay.

How can I tell for sure if all is well and they just wanted her bank details? We have changed all of our passwords and neither of our bank accounts were linked to the laptop.

She feels very stupid that she fell for this, but I just want to make sure nothing bad can now happen.

I am concerned about key loggers and any other programs they may have covertly installed.

I've run malwarebytes on her Android phone and that shows nothing.

Any advice?

randlemarcus

13,644 posts

253 months

Thursday 13th June 2019
quotequote all
Try another anti-malware first. If nothing, result.

Personally, I'd rebuild it.

deckster

9,631 posts

277 months

Thursday 13th June 2019
quotequote all
randlemarcus said:
Personally, I'd rebuild it.
This. If you really want to be safe then disconnect it from the internet right now, rebuild it, change all passwords. Overkill maybe but there's simply no way to know what they've done. From what you say, the chances are you're OK but it's not a risk I'd take personally.

gman88667733

Original Poster:

1,196 posts

89 months

Thursday 13th June 2019
quotequote all
When you say rebuild it, do you mean reinstall windows? Can I do that without having to purchase the version of windows again? It came preloaded with windows 10.

TonyRPH

13,453 posts

190 months

Thursday 13th June 2019
quotequote all
Download and run HitmanPro

It'll likely find loads of cookies (usually perfectly normal) but it's malware you need to look for in the search results.

You have to register for a free trial if you want to clean up the malware - but at least it will alert you to anything bad,


Harpoon

2,388 posts

236 months

Thursday 13th June 2019
quotequote all
gman88667733 said:
When you say rebuild it, do you mean reinstall windows? Can I do that without having to purchase the version of windows again? It came preloaded with windows 10.
Yes, you can re-install with the license the PC came with.

The PC may have a factory restore routine which you access via an Function key on boot.

randlemarcus

13,644 posts

253 months

Thursday 13th June 2019
quotequote all
Harpoon said:
gman88667733 said:
When you say rebuild it, do you mean reinstall windows? Can I do that without having to purchase the version of windows again? It came preloaded with windows 10.
Yes, you can re-install with the license the PC came with.

The PC may have a factory restore routine which you access via an Function key on boot.
And use the opportunity to make sure your backup routines are up to date. OneDrive will help protect against crypto viruses, but it wont help if you cock up - external drives as well might do that.

anonymous-user

76 months

Friday 14th June 2019
quotequote all
Rebuilding is a bit extreme and panicky.

Run antimalwarebytes with a full deep scan

The run superantispyware with a deep scan

Free versions of both. You can let the promo real time scanners run for X days after until the trial expires, then disable the real time scanners.

Both of these together will catch and malware / keyloggers.

Your online banking login will be set up in a way that keyloggers won't help anyone anyhow. You enter numbers or letters in boxes in a random order, which keyloggers can't make sense of.

On top of this, if someone tried to move money to a new recipient, your bank would text you a one time password OTP, so you'd know, and be able to stop it.

Don't panic and go through loads of rebuilding hassle, and best to explain to your partner that she might want to think about how exactly some stranger knows there is a problem with her laptop, and ask why they are offering free help :-)

Good job she stopped the phone remote control, as the OTP would go to the phone so the hackers would see and use it.

Lazermilk

3,523 posts

103 months

Friday 14th June 2019
quotequote all
Did she not wander why BT needed access to her laptop??

Maybe this will make you both feel a bit better, some funny videos on youtube of people scamming the scammers, Kitboga is good:

https://www.youtube.com/watch?v=6ffRjzNsEJo

https://www.youtube.com/watch?v=3H9JMb5P4GM

https://www.youtube.com/watch?v=UWlx_wFqI8E

randlemarcus

13,644 posts

253 months

Friday 14th June 2019
quotequote all
RogerDodger said:
Rebuilding is a bit extreme and panicky.
But it does help with the "being a complete numtpy online" problem, if only because not having access to the toys for a few hours is a PITA wink

gman88667733

Original Poster:

1,196 posts

89 months

Friday 14th June 2019
quotequote all
She feels very stupid now and has no idea why she fell for it... At least I know she will never do it again!
I think i'm going to back up her files onto a hard drive and reset the laptop and her mobile phone, just to be safe.