shoedog

Thanks THE.... I haven't forgotten. I cancelled all my cards used on this computer so it will be a couple days. I won't forget. I'll get educated in the meantime. Have a nice weekend.

Well sonsirej - THE, I tried to donate but PAyPal said I didn't have my address, city, state, and zip correct. I've lived here a while now so I should know but I'll try later. I wasn't phished, was I? Sheesh.

Thank you TwinHeadedEagle! I scanned again and all seems well. Weird about the log file re: CAFADABUG. What causes that? Regardless, I will donate for your help. Hoping to see a VISA refund re: Capstone and will purchase MBAM premium for real this time. Steve

Thanks Daledoc1 ... I was just following the link advice to run FRST, etc. TwinHeadedEagle is on it. I backed up first if a redo is needed.

Thanks TwinHeadedEagle. I also ran AdwCleaner and those logs are included too. I re-scanned with MBAM and all was fine. There's beer in it if all is well Addition.txt AdwCleanerR0.txt AdwCleanerS0.txt FRST.txt

Ran Ad which cleaned a couple pokki files and a folder, a couple google chrome extensions and that was about it. A few odds and ends but mostly pokki related. Saved the logs. Ran FRST64 and saved the logs. Ran MBAM again and all seems well. That CAFADEBUG was weird though but I didn't see it in the FRST or AdW or MBAM. Hmmm....

https://forums.malwarebytes.org/index.php?/topic/169908-malware-i-had-a-problem-with-capstone-ransomware-scam/ Above is a link to this site re: a CAFADEBUG txt (notepad) log I found on my computer shortly after calling Capstone re: bank requested refund. Is this malware, or adware, or??? Seems like the font is similar to previous communications back in 10/2014. I wonder is this is how they installed ransomware on the new computer originally and are accessing it now, or... were they accessing my computer as or after I was talking to them? Ideas? Thank you! Steve

I found this shortly after calling Capstone this am re: a refund per my bank's request and it appears to be the same font from previous communications: see attached notepad file. Is this adware, malware, etc? I have never seen anything like this before on my system. If malware or whatever, how do I fix it? Thank you, Steve I have in my network file: 2 users, me and public. This was in the public file. It starts like: and is fairly large. ... uh, well I can't seem to copy and paste it. The file is in the notepad text below. CAFADEBUG.log

BTW Ron, I did go to your link. I did install the 'free' MBAM and ran a couple scans over yesterday and today. My question, is there a different scan you can do or is it the free one. The scans never have nor presently show any problems and nothing seems infected. Thanks for removing personal info too btw ... Not that I am naiive noob and trusting or anything. Sheesh. .

Thanks Staff, My banker and I called Capstone regarding the 'scam' and them selling MBAM and uh, should have been taped. I downloaded spyware blaster, have the Win 8.1 stuff working... how can I have you scan for malware? Is this a different scan from the 'free' MBAM scans I did yesterday and this am?

Thank you... I'll let you know the end result so this thread can be put to rest.

Hi, went to the MBAM site and downloaded the 14 free trial. It's scanning now. I'll call VISA (@my bank) tomorrow. I'll buy the premium when I find out what can be done. My next question is... how do I make sure my computer is clean now with this scam stuff known? Any other products that can help? I haven't noticed any problems with accounts, etc. yet. I'll change passwords. Thanks

Ok, I tried to activate it and it asked for a key... where is that found? Thanks

Yeah, I read the link. Thank. I've sent the info to the CS dept at Malwarebytes. It was a new Toshiba Satellite laptop and when initially installing things the MS Office website said I had to call the number to install malwarebytes or MS couldn't load Office safely. Apparently the new Toshiba shipped with malware. I'll call VISA and try to recover funds. If Malwarebytes knows/knew about this... has fraud complaints been filed or followed up on? Thanks