the key word is 'tried' every failed login is also tracked on some sites.

smackfu said:I wonder how they would know if you tried to access the site during the period, since... you couldn't access their site.

scott1961 said:...and protects your good name. Well, at least the rest of it will be useful!

I'm pretty sure I'm safe , I use Norton 360 Subscription and always keep it updated and run full scans every day.

smackfu said:I wonder how they would know if you tried to access the site during the period, since... you couldn't access their site.I got a similar message for a different bank (Century Bank Direct). I actually remember there was a time that I was unable to access the online bill pay system. The site as a whole was not down but the CheckFree-hosted portion was not responding properly. However, I have nothing to worry about as I was using a Mac and the malware is Windows-based. The full text of the letter I received is as follows:

At Century Bank Direct, we take great care to keep your personal information secure. As part of these ongoing efforts, we
are notifying you that the computer you use for online bill payment may be infected with malicious software that puts the
security of your computer’s contents at risk.

Because of an issue with our bill pay service provider, CheckFree, some end users who were trying to access online bill
payment may have been were redirected to an unauthorized site not controlled by CheckFree.

This letter will help you determine if your computer is actually infected and advise you how to fix the problem and protect
yourself against future risk.

Impact

The malicious software affects some but not all customers who accessed online bill payment on Tuesday, December 2,
2008. For a limited period of time, some customers were redirected from the authentic bill payment service to another site
that may have installed malicious software. Your computer may be infected if all of the following are true:

• You attempted to access online bill payment between 12:40 a.m. and 10:10 a.m. Eastern Time (GMT -5) on
Tuesday, December 2, 2008, and
• You were using a computer with the Windows operating system, and
• You reached a blank screen rather than the usual bill payment screen when you attempted to navigate to online
bill payment, and
• After reaching the blank screen, your computer’s virus protection program did not tell you via pop-up or other
messaging that malicious software was detected and quarantined.

What you should do if you believe your system was infected, or if you are not sure:

If all four of the conditions above are true, or if you are not sure, your computer may be infected and you should take the
following actions:

Complimentary Virus Protection:

• From the computer that was used to access online bill payment Tuesday, please go
to http://us.mcafee.com/root/campaign.asp?cid=53348 and follow onscreen instructions to install McAfee®
VirusScan® Plus software. We have also included the Installation instructions. The Promo Code is
VSPPROMOCF.
• This is an anti-virus package created by McAfee, the world's largest dedicated security technology company, that
addresses this malware infection
• You will need to enter validation code VSPPROMOCF at the website to access this service. This code is
valid through December 31, 2008.
• After you install the software, launch the McAfee® VirusScan® Plus application and run a full system
scan.
• Reboot your computer after running the system scan.

Change Your Passwords

• After you have removed any malicious software from your computer, please go to our online banking site
(www.centurybankdirect.com) or contact (1-877-444-2259) to reset your online banking ID/password. We strongly
recommend that you change all of the passwords you use through this computer.

Complimentary Credit Monitoring:

• As a further precaution, you may also wish to accept our offer of a two-year subscription to Deluxe ID Theft Block
Plus credit monitoring service so that you may monitor your credit report for unauthorized new accounts or
changes to existing accounts. You may activate this service at https://www.deluxe-idtheftblock.com/secure by
entering validation code XXXXXXXXX. This code is valid through December 31, 2008.


Century Bank Direct values your business and your trust, and we and our partner CheckFree apologize for any
inconvenience this recent incident has caused.

Please feel free to contact us at 1-877-444-2259 with any additional questions.

smackfu said:I wonder how they would know if you tried to access the site during the period, since... you couldn't access their site.They dont. If you logged in to view your bank records, but didnt attempt to enter/view the BillPay module, you are unaffected. But they dont know who did beyond knowing who accessed the main site during that timeframe, since any attempt to access BillPay got diverted to a bogus site. Thus the email identifying all customers who logged into their bank account during those 9 hours as potential victims.

Here’s an email I received from CheckFree. I think it was sent to me because I subscribe to my electric company’s e*bill service.

CHECKFREE
December 7, 2008

Dear xxx,

We take great care to keep your personal information secure. As part of these ongoing efforts, we are notifying you that the computer you use for online bill payment may be infected with malicious software that puts the security of your computer's contents at risk. This letter will help you determine if your computer is actually infected and advise you how to fix the problem and protect yourself against future risk.

The malicious software affects some but not all customers who accessed online bill payment on Tuesday, December 2, 2008. For a limited period of time, some customers were redirected from the authentic bill payment service to another site that may have installed malicious software. Your computer may be infected if all of the following are true:

• You attempted to access online bill payment between 12:30 a.m. and 10:10 a.m. Eastern time (GMT -5) on Tuesday, December 2, 2008, and
• You were using a computer with the Windows operating system, and
• You reached a blank screen rather than the usual bill payment screen when you attempted to navigate to online bill payment, and
• After reaching the blank screen, your computer's virus protection program did not tell you via pop-up or other messaging that malicious software was detected and quarantined.

If all four of the conditions above are true, your computer may be infected. We have arranged with McAfee, the world's largest dedicated security technology company, to provide you with an assessment of your computer's hard drive and remove any malicious software. Please contact us at 877-800-4864 for further instructions or 800-564-9184, Option 1 for further instructions. We will also offer you both advice and free services that can help you mitigate any risk you may face as a result of this incident or other everyday exposures you may encounter.

We value your business and your trust, and we apologize for any inconvenience this recent incident has caused.

Thank you,

Art D'Angelo
Vice President, CheckFree Customer Operations

To get the free codes for McAfee and Deluxe ID monitoring the Checkfree number for that is 877-800-4864

Glitch99 said:smackfu said:I wonder how they would know if you tried to access the site during the period, since... you couldn't access their site.They dont. If you logged in to view your bank records, but didnt attempt to enter/view the BillPay module, you are unaffected. But they dont know who did beyond knowing who accessed the main site during that timeframe, since any attempt to access BillPay got diverted to a bogus site. Thus the email identifying all customers who logged into their bank account during those 9 hours as potential victims.

Wrong, they know if you tried to access the billpay site. Even the attempt is logged.

aleck said:scott1961 said:Called Checkfree and they gave me codes to get free McAfee and this:
Deluxe ID TheftBlock®:

Does anybody know how long the free TheftBlock subscription is good for?2 years