Possible Etrade Fraud

Quote from murky:

I think this is a false sense of security. If someone can put a keylogger on your system, then someone can put software that logs all form inputs in your browser. I am pretty sure this can be done at multiple levels with or without the use of HTTPS.


Hmm... But not all keyloggers will log all form inputs, right?
Although it's not foolproof, it should be better than doing nothing. :)

Sure you should install anti-virus, firewall, anti-spyware, intrusion prevention system to protect yourself as well.
 
Quote from WmWaster:

Hmm... But not all keyloggers will log all form inputs, right?
Although it's not foolproof, it should be better than doing nothing. :)

Sure you should install anti-virus, firewall, anti-spyware, intrusion prevention system to protect yourself as well.

A good protection scheme seems to be to use Win XP Pro/Win 2000 and use a normal User account, i.e. no Power User account and especially no administrator account. You should even disable autoruns for the user account you use. You have to use the NTFS file system.

Any malware which then gets started in the normal User account will not be able to install itself into the system and will be disabled with the next system start.

Of course, it is a bit of nuisance to use a normal User account. Usually no update routine will run, because in general they want to access the registry, and some programs just won't work.

There is a solution for this: you have to use a script called "MakeMeAdmin" which you can use to start any program requiring Admin rights with exactly these rights. E.g. the program checking for TWS updates needs Admin rights. The eSignal News Manager requires Admin rights, at least on my computer. There are some more - minor - restrictions.

Seeing that the malware becomes more and more sophisticated and running a virus scanner etc. will only protect against the "dumb" malware I decided to go this route.

If you want to know how to set up your computer properly google for "MakemeAdmin". Aaron Margosis' Weblog is a good start.

Regards

Bernd Kuerbs
 
Quote from BKuerbs:

A good protection scheme seems to be to use Win XP Pro/Win 2000 and use a normal User account, i.e. no Power User account and especially no administrator account. You should even disable autoruns for the user account you use. You have to use the NTFS file system.

Any malware which then gets started in the normal User account will not be able to install itself into the system and will be disabled with the next system start.

Of course, it is a bit of nuisance to use a normal User account. Usually no update routine will run, because in general they want to access the registry, and some programs just won't work.

There is a solution for this: you have to use a script called "MakeMeAdmin" which you can use to start any program requiring Admin rights with exactly these rights. E.g. the program checking for TWS updates needs Admin rights. The eSignal News Manager requires Admin rights, at least on my computer. There are some more - minor - restrictions.


If anyone decides to stick with an administrative account, one can use a porgram called "DropMyRights.msi".


Seeing that the malware becomes more and more sophisticated and running a virus scanner etc. will only protect against the "dumb" malware I decided to go this route.

I don't think so.
Anti-malware has a research team which will keep updating its database to include new-coming malware, so it seems to be too negative to say they can only catch "dumb" malware.
Some of them have heuristic approach to spot any future malware or possible malicious programs/codes.

You could also add more preventive programs to protect your system. Firewall (hardware + software) & intrusion preventive system can help.

Any safe computer cannot live without the abovementioned porgrams. :)

Most importantly, prevention is better than detection. If you have common security sense & good browsing habits, you should be pretty safe. Eg: Don't download suspicious programs from unknown sources, don't visit suspicious websites, don't download suspicious attachments. Set a strong password for your account. Configure your computer to a higher security level, and so on.

After you have done all these, you are safe from most attacks. A hacker can only attack you if, say, it finds any security holes in your operating system & can bypass your firewalls.

If you want to know how to set up your computer properly google for "MakemeAdmin". Aaron Margosis' Weblog is a good start.

Regards

Bernd Kuerbs

Thanks for your information.
 
Thanks Spike.

I hope everybody can see how bogus this phish crap is. Checkout the language and syntax.



<img src="http://www.elitetrader.com/vb/attachment.php?s=&postid=1263775"/>
 
Having a problem with etrade................
I need to know how I could get a copy of an account agreement
from 2005, if anyone has a copy of the account agreement or disclosures it would be greatly appreciated
 
Back
Top