quote:

ORIGINAL: DesFIP

The problem here is the op already said she's positive that CM is the cause and therefore she won't sign back in. So unless someone can forward this to her on a different site, she's not going to know what she needs to do.

quote:

ORIGINAL: Darkfeather

Yeah, the problem is I highly doubt its a virus. It is more than likely simply a reinvented email phishing technique. A newer version of the "dear sir, an african relative of mine with the same exact last name as yours has died, leaving 1.2 billion euros..." These new ones simply target any of your login site, claiming various issues. From fraud, to hacking. Since I also play online games, I get scams claiming attempts of account selling to item farming for real world cash. In all cases, they give a valid looking website to "validate" my account information, just to make sure I am who I claim to be. Of course, this would result in them getting my password, and access to my account retroactively. Simple answer, it is really easy to find out your online activity and email. Unless you deactivate cookies, but do that and you can't do anything on the net anymore. But with your email and web history, all they can do is phish. I get about 10 of these things a week in my spam folder... Recognize the scam email, block and delete. Crisis averted.

quote:

The problem here is the op already said she's positive that CM is the cause and therefore she won't sign back in.

quote:

ORIGINAL: shallowdeep

Late, but I wanted to add a few comments for anyone interested:

1. As suggested, the email might have been a phishing ploy. However, assuming the email account was a Gmail one, Google actually does send out bona fide, identically worded warnings when it detects suspicious activity with an account. These warnings should absolutely not be ignored. If you are certain the login attempt was not from you, it means that your Google account's password is compromised. That said, do not click on any links from within the warning email. Instead visit gmail.com directly from a browser. If the warning was valid and not a phishing attempt, you will see a red notice near the top about unusual activity, something like this. In this case, it's time to change your password (and not just by one character) and probably scan for malware. Setting up two-factor authentication on your Google account is also a good idea.

2. Collarme.com doesn't know, let alone store, any information about your associated email account's password, so it's not likely to be the source of any compromise of the latter. Providing you don't reuse passwords, at any rate. And no one would ever do that, I'm sure.

3. McAfee SiteAdvisor has often listed collarme.com as a Yellow/Caution/Minor Risk. As far as I can tell, this appears to be based solely on the "reputation" of the site in their TrustedSource system rather than any specific detected threat. If McAfee detects an actual specific threat, like hosted malware, they use a Red/Warning/Serious Risk indication. Not everything on the other side should be taken at face value, so the caution warning to potential visitors doesn't seem wholly out of place, but it's not intended to indicate a serious, imminent security risk. If the administration believes the site merits a better rating, they can request a review.

quote:

ORIGINAL: DarkSteven
1. I agree with you that McAfee is just being prudish.

2. That story about the login hacking attempt sounds very fishy to me. I very much doubt that cm has the capability to detect undesired logins. I would rather suspect a keystroke logging program, which generated a fake warning message in order to prod toy to change his password, which the program would then have a record of.

quote:

ORIGINAL: Gauge

Step 4. Install the programs and update them. Do the recommended scans as indicated. You may have to disable your anti-virus software to do the scans. If infections are discovered then take the action that the program recommends. Please note that some of these programs say that some harmless tracking cookies are problems so if you want to remove them go ahead and do so, it will not hurt anything.

You might mention that whenever possible, it's best to boot into safe mode to install and run these programs as many illicit programs will circumvent them from running properly if in native Windows mode...

_____________________________

An error does not become truth by reason of multiplied propagation, nor does truth become error because nobody sees it: Mohandas Gandhi

(in reply to Gauge)