# Paypal and bank attacked keylogger, please help! **URL:** \ **Category:** Factual Questions\ **Created:** [October 16, 2011, 5:10pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828 "2011-10-16T17:10:36Z")\ **Posts on this page:** 8\ **Page:** 2
**Author:** ![davidm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/davidm/32/225_2.png) [@davidm](https://boards.straightdope.com/u/davidm)\ **Post date:** [October 17, 2011, 10:15am UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/21 "2011-10-17T10:15:36Z")
Check out this thread. [http://forums.techguy.org/windows-xp/1011463-solved-startnow-toolbar.html](http://forums.techguy.org/windows-xp/1011463-solved-startnow-toolbar.html) It has a link to here: [SystemLookup - CLSID List](http://www.systemlookup.com/lists.php?list=1&type=clsid&search=%7B5911488E-9D1E-40ec-8CBB-06B231CC153F%7D&s=) which has a link to here: [http://www.threatexpert.com/report.aspx?md5=933f2f524a69cc08f4a6e7274470129d](http://www.threatexpert.com/report.aspx?md5=933f2f524a69cc08f4a6e7274470129d) It sounds like Zugo /StartNow is malware which surreptitiously connects to various shady URLs. I would sign up at the [techguy.org](http://techguy.org) forum (the first link in this post) and post what you posted here and then let them guide you. They’ll have you run various types of scans and post the results. They are good at this kind of thing and seem to understand the Zugo / Startnow thing. ---
**Author:** ![Shakester](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/shakester/32/437_2.png) [@Shakester](https://boards.straightdope.com/u/Shakester)\ **Post date:** [October 17, 2011, 12:52pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/22 "2011-10-17T12:52:11Z")
> [@Desert\_Nomad](#): > > Once you get it resolved, buy a Mac. Or, more realistically, try Ubuntu Linux instead. That’s what current Mac software is based on anyway, and you’re better off using the real thing for free. Also allows you to look down on hapless Windows users _and_ smug Mac users. ---
**Author:** ![Bloody\_L](https://avatars.discourse-cdn.com/v4/letter/b/ac8455/32.png) [@Bloody\_L](https://boards.straightdope.com/u/Bloody_L)\ **Post date:** [October 17, 2011, 3:11pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/23 "2011-10-17T15:11:36Z")
> [@davidm](#): > > She’s a student working fast food who’s just had $1000 stolen. I don’t think she can afford a new computer. Precisely! I’m living day-to-day, there’s no way I can afford something other than a dirt-cheap emachine! ---
**Author:** ![Bloody\_L](https://avatars.discourse-cdn.com/v4/letter/b/ac8455/32.png) [@Bloody\_L](https://boards.straightdope.com/u/Bloody_L)\ **Post date:** [October 17, 2011, 3:15pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/24 "2011-10-17T15:15:50Z")
I want to thank everyone who is helping with both the keylogger and the financial hack. I went to the bank today and got everything straightened out. I got a brand new shiny bank account that I’m going to guard with my life! Also, paypal closes in the morning when the transfer is 100% done. They reversed the overdrafts too! So far I got two more clean malware byte scans so I’m hoping the last time it found malware that “fix” fixed the problem. I will be signing up with that forum either way though in case it picks up Zugo get in the next couple of hours/days/weeks. Thank you again! ---
**Author:** ![Rushgeekgirl](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rushgeekgirl/32/3715_2.png) [@Rushgeekgirl](https://boards.straightdope.com/u/Rushgeekgirl)\ **Post date:** [October 17, 2011, 3:20pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/25 "2011-10-17T15:20:44Z")
And mama can breathe again. ---
**Author:** ![brk913](https://avatars.discourse-cdn.com/v4/letter/b/838e76/32.png) [@brk913](https://boards.straightdope.com/u/brk913)\ **Post date:** [October 17, 2011, 4:13pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/26 "2011-10-17T16:13:44Z")
> [@Shakester](#): > > Or, more realistically, try Ubuntu Linux instead. That’s what current Mac software is based on anyway, and you’re better off using the real thing for free. Also allows you to look down on hapless Windows users _and_ smug Mac users. Yeah, that will help, Smug Linux Users never get viruses: [The truth about Linux virus vulnerability | The Ubuntu Army](http://ubuntuarmy.wordpress.com/2010/09/16/linux-vulnerability/) Regards, A virus and malware free Windows User and IT Professional smugly looking down at you… ---
**Author:** ![breezman](https://avatars.discourse-cdn.com/v4/letter/b/4491bb/32.png) [@breezman](https://boards.straightdope.com/u/breezman)\ **Post date:** [October 18, 2011, 12:04am UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/27 "2011-10-18T00:04:30Z")
> [@Shakester](#): > > Or, more realistically, try Ubuntu Linux instead. That’s what current Mac software is based on anyway Not really. Mac OS is based on BSD unix. Ubuntu is based on linux. You could say that both are based on earlier versions of unix or unix-like operating systems, but one is not based on the other. ---
**Author:** ![NessaKlem](https://avatars.discourse-cdn.com/v4/letter/n/43a26b/32.png) [@NessaKlem](https://boards.straightdope.com/u/NessaKlem)\ **Post date:** [November 1, 2011, 1:44pm UTC](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828/28 "2011-11-01T13:44:19Z")
Hi, bloody I am really sorry that such a horrible story happened to you, and I hope that you managed to get all your money back. Similar thing happened to a friend of mine, but he lost less money. Got everything back, still it was enough for him to stop downloading stuff randomly from the Internet. About the keylogger - I hope you managed to find which one that was. If you did - please let us know, so we can spread the word. I can say for sure that it was not StartNow, as I accidentally downloaded it a month ago or so, and I did research about it before closing that chapter. As scary as it looks, it is a simple search toolbar that changes the home page and the search engine.Recently it’s not being identified as a threat at all - in the worst case it’s called “unwanted program”. If you still haven’t done that - you definitely wipe clean and re-install your computer, then reset ALL your passwords AND make sure that the email address in each accounts’ settings is yours. I really hope that everything is sorted by now. Warm regards, vanessa [Previous page](https://boards.straightdope.com/t/paypal-and-bank-attacked-keylogger-please-help/599828.md?page=1)