BleepingComputer.com: I had my Paypal account hacked a couple months ago

My paypal account was hacked into a couple months ago. I woke up one morning before work, and discovered 4 emails form various venders, later discovered to be fraudulent, that purchases were made or ordered and to whom items sent or shipped to. This, of course is where my nightmare probably begain by unfortunately clicking on something in the email that began my infestation of various viruses, malware et al. Granted, thanks to the help of the Tech Specialist "Fireman", he helped me recently to resolve all my computer virus issues and now, thanks to him and Bleeping Computer, my computer has a clean bill of health.

Since the date that my computer was hacked, I was able to successfully resolve the issues with Paypal, my bank accounts and the unfortunate people involved who were also victimized as a result of this incident. Paypal has provided me with a Secret Decoder Key card to use which utilized several safety password features and precautions when logging onto their site when/ if I need to make an internet purchase. I have also opened a separate bank account just for the sole use of making internet purchases. When I get ready to make an internet payment, I simply transfer funds into that particular account and then utilize Paypal. I have been doing this on my other computer which was not violated because until just recently I had not felt safe doing this on the computer that was compromised.

Now that my computer is clean, firewalled, and active spyware is installed, is there anything else I need to do? Should I get rid of emails that contain passwords to accesss other sites and accounts, or simply hide them in non-conspicuous files/folders in my computer? Or should I just keep them manually written down and totally off the computer?

Any advise regarding this would be greatly appreciated.

Thanks.

This post has been edited by hYlAnDeR~TFC: 15 February 2011 - 06:45 PM

First, definitely delete any passwords to accounts that are stored on your computer. For many reasons, including malware, it is not safe to keep passwords in an easily retrievable environment, especially from the local keyboard.

Instead write the down or use a password storage program like http://keepass.info/.

You may also want to consider Keyscramber, which will encrypt all keyboard strokes so that if you are ever infected with a keylogger this information is just garbage text when sent to the remote attacker.

http://www.qfxsoftware.com/

Will do, Thanks Grinler!