Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Recently, I've had both my Visa debit then my Visa credit cards compromised and unapproved payments attempted to be made on them (my bank caught them first, called me then stopped my cards). These occurred approximately 3 weeks apart.

I'm fairly paranoid about online security so I use LastPass and PayPal is directly hooked into my bank account.

I also changed my LastPass master password after the first breach and ran a full Spybot & NOD32 scan of my computer, with no adverse results.

Now that I've had another breach on a different card, I'm concerned about other things hiding on my computer or something else.

What steps should I take now that I've been compromised again? Should I do a full OS format of my computer? Is there anything else I can do to mitigate the chances of this happening again?

share|improve this question

closed as off topic by studiohack Jun 7 '11 at 3:58

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

How were they compromised? You got a virus, got skimmed while eating out, cards were stolen? If you did not have those numbers stored on your computer, chances are high that some merchant was compromised and lost your numbers...think TJ Maxx. – KCotreau Jun 7 '11 at 3:47
I swear by HiJackThis. It's not really an antivirus program, but it shows all the best places nasty stuff likes to hide and what's in there. Download HiJackThis from and run it. Export the log file and add it to your answer. Keep in mind that it's not a list of infections, it's a list of where infections like to hang out. Most if not all of the stuff in the log will be part of Windows or device drivers, with some stuff thrown in by harmless programs. – TuxRug Jun 7 '11 at 3:59
off-topic and not a real question are the reasons for closing - in its current form, the not a real question makes it off-topic - please see the FAQ – studiohack Jun 7 '11 at 4:02
I use that a lot too Tuxrug, but most users could not read the output to save their lives. I really thought this was going to be off-topic by the way the question was phrased, but I answered because it does cover practical PC security. – KCotreau Jun 7 '11 at 4:02
@studiohack: I don't know what else you want. I have no idea how they were compromised. Only that fraudulent transactions were attempted on them. What else do you want to make this on-topic? – Alastair Pitts Jun 7 '11 at 5:23

Runs scans with Malware Bytes and Superantispyware (I love Spybot, but it is just not good enough now). If they come back negative, you are probably clean. Change your passwords as you did.

I will regurgitate the answer I just gave to another question in response to your what should you do to mitigate the chances of it happening again:

You need to keep your computers patched (Windows Update and browser plugins up-to-date for most browsers), and protected with anti-virus.

Most attacks happen from the inside, because you have not properly maintained your computer, and you get a virus.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.