Computer Support Forum

Gmail account sending out spam emails to contacts

Question: Gmail account sending out spam emails to contacts

My Gmail account started sending out spam from my email. I believe it's related to this Epsilon breach. I have changed my email password and deleted any suspicious emails. Is there anything else I need to do?
Thanks

Relevance 100%
Preferred Solution: Gmail account sending out spam emails to contacts

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Gmail account sending out spam emails to contacts

If you've changed your password and no further e-mails get sent out then you should be fine.

8 more replies
Relevance 76.85%

I have a problem where an automated mail is sent from a third party software (SPAM) that goes to all my contacts in my address book.

What should I do?

I want to stop this program from sending automated messages. This is from a website Desktop Dating. It keeps sending a message that Did you receive my Invite to all my contacts.

How do I ensure that these mails do not go out.

Answer:Gmail sending SPAM to all my contacts

Wish I knew-the same exact thing has happened to my hotmail account and has sent this "invite" to my contacts on my hotmail account! I am very angry about this and when I tried contacting all of my contacts to let them know not to open the email invite to desktop dating that was supposedly from me, microsoft sent me a message saying I exceeded my 300 email messages a day so my email account is now suspended for 24 hours!!That is ridiculous because as now 374 other contacts on my list will not get the warning message about not opening up the desktop dating invite and thus their contact lists will probably be hijacked too because I can't warn them in time about this bogus email message. Let me know if someone tells you what to do--wish we could sue all these jerks for the problems they have caused us by their scams.

1 more replies
Relevance 75.98%

I'm not sure if this is a malware issue or not, had no idea where to post it. A couple of my friends have sent me messages (not through email) letting me know they are getting spam from my email address. And sure enough, when I logged into my email I got a ton of "delivery to the following recepient failed" messages".

This has happened twice within the last week or so, I'm sure all of my contacts are getting pretty annoyed by now, but I have no idea how to stop it!

Help?
 

Answer:My gmail is sending spam to my contacts list

I'm pretty sure that you will be better off by getting down all your contacts info > create a fresh email account. But if you wish to check for malware then you can do the following:

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.


After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:


If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet c... Read more

3 more replies
Relevance 106.19%

Hello all,

this is the second time this has happened to me in a short period of time and I am hoping that somebody can help me.

Something is sending emails to all my hotmail contacts. The email:

Hey friend,
How are you doing recently? I'd like to introduce you a very good foreign trading online company and the website is www.ui-mall.com
It can offer you so many kinds of electronic products which you may be in need,such as laptops, gps, TV, cell phones, ps, MP3/4, motorcycles even several kinds of musical instruments and etc..
You can take some time to have a check ,there must be something you are interested in and you 'd like to purchase .
The contacts:
XXXXXX
XXXXXX
Hoping you can enjoy your shopping from that company !
Regards

When I go to "Sent emails", I do see these emails there.

I am attaching some logs (followed the instructions). Hope i did everything correct.

Is this a virus??

Please help!!

Thanks in advance,
Marzena
 

Answer:Self-sending spam emails to contacts. HELP!

http://forums.majorgeeks.com/showthread.php?t=35407

I think you may have malware on your computer go to this link and follow the instruction to clean your computer
 

6 more replies
Relevance 104.55%

My gmail account has been compromised. Something is sending emails from my gmail account to my contacts. In the sent mail folder there are four emails I didn't write that were sent to my contacts. They included links and little else. My inbox was also full of returned mail items that said "Malier Delivery System - Permanent delivery failure". My logs are below. Thanks in advance!!!

DDS (Ver_2012-11-05.02) - NTFS_x86
Internet Explorer: 9.0.8112.16450 BrowserJavaVersion: 10.9.2
Run by pep at 15:10:18 on 2012-11-05
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2968.833 [GMT -8:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\ibmpmsvc.exe
C:\Program Files\SafeNet\HighAssurance RemoteLT\IPSecMon.exe
C:\Program Files\SafeNet\HighAssurance RemoteLT\IreIKE.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files ... Read more

Answer:Virus sending emails to my contacts on gmail

Greetings pep7702 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary. If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance. Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not ... Read more

16 more replies
Relevance 103.32%

My gmail account started sending world of warcraft spam mail last night. Lots of it.

I have avg free and am running mbam atm. so far no hits on the source of the infiltration.

I have changed the password on my gmail account but if I'm keylogged what other steps or apps should I use to clean my self up?

Answer:Gmail account sending spam

Change your password.... If youre worried use a different computer.

2 more replies
Relevance 101.68%

I have seen a few posts on this but they have all been closed due to lack of feedback. This has happened to me about 3 times now, I get a whole lot of Delivery Failure reports in my Hotmail inbox that tell me the following email couldn't be sent. It appears to have tried to send this message to everyone in my contacts list, and in some cases successfully. It's very embarrassing.Hey friend,How are you these days?I got a nice webiste ,that guys sell lots of laptops |cell phones| PS3 | cameras and so on,which are brand new and original,But the price is so cheap and quality is nice.The international shipping is door to door ,more accurate ,more security!Go and check it : www.eleRUSH.com MSN: [email protected] E-mail: [email protected] have changed my email account password as this seems to be the only advice that Windows live can offer, other than the usual "how to keep yourself safe" stuff.Does anyone have any suggestions as to how I can stop this from happening again? Thanks

Answer:Hotmail account sending out spam to my contacts list

Unless you are absolutely certain that the E-mail is actually coming from your computer, it would be more likely that someone else's computer is infected and the malware found your E-mail address there. And too, spammers often mask their stuff as if it came from an E-mail daemon, since most ISPS do not filter that address.

2 more replies
Relevance 99.63%

Hi guys, my hotmail account has recently begun to send out spam mails (I know this because of the tons of Postmaster Delivery mails I get every morning. I have checked my outbox, and unfortunately I see that it is truly this account that is sending out the mails, and not merely a spoof. I have already changed my password, but can't tell whether it has made a difference as of now.

I have not been able to identify what is the trojan/worm responsible for this. I used Spybot Search and Destroy in both normal and Safe mode, but it didn't turn up anything of note. Would really appreciate your help and advice on this issue!

Cheers!

DDS:


DDS (Ver_09-03-16.01) - NTFSx86
Run by Yixuan at 20:37:59.43 on Mon 04/13/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_13
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.65.1033.18.2045.942 [GMT 8:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system3... Read more

Answer:My Hotmail account is sending out spam emails! Help please!

Welcome to TSF gosulation,


The logs show a malware worm startup loading there. Let's start some repairs then check after.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

19 more replies
Relevance 98.4%

My computer sends spam emails to others in my contact address book. Also it takes long time for my computer to shut-down.
DDS (Ver_09-06-26.01) - NTFSx86
Run by jl at 10:13:49.26 on 07/19/2009 Sun
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.936.86.1033.18.1014.594 [GMT -4:00]

AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files&... Read more

Answer:my yahoo email account sending spam emails

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 97.58%

My yahoo email account is sending out links to a casino site to everyone in my address book. I don't know if the problem originated on this computer or my laptop. I also don't know what the specific malware that would cause this is called. As far as I can tell the first spam email was sent out on 3/14/09.I don't know if it's important but the 1st email title is: ~~~~~Hi.Surprise for you!The body of the email is: Very interesting! <hxxp://sendspace-free.com/cash> ,,,The 2nd email title is: ************///Attention/// It.The body of the email is: ********** Hi! How you doin'? Look, I've found something interesting. Actually it's awesome ! I've found a website which explains online casino functioning scheme. And it works!!! Actually, I'm shocked! II hope you can help me stop the sending of these. I use the web based version of yahoo email. I never use outlook or anything like that.---DDS (Ver_09-02-01.01) - NTFSx86Run by Emerald at 8:59:58.67 on Sun 03/15/2009Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.1889 [GMT -4:00]AV: Kaspersky Anti-Virus *On-access scanning enabled* (Updated)FW: Kaspersky Anti-Virus *enabled*============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exee:\... Read more

Answer:Yahoo Account Sending Spam to Address Book Emails

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

2 more replies
Relevance 87.74%

The tittle of the topic is wrong but I could not edit it, the only problem that I have is with gmail. Emails were sent without my authorization from my gmail account to some of my contacts; the content of the email was a link to strange web sites; the activity showed that someone from Trinidad & Tobago has logged in ( I do not know anyone there).I did not installed any programs or software on several weeks prior to these problems. I have not made any changes to my pc. I do not receive any kind of error message. I have run several online antivirus, all of them show zero infections, with the exception of Onecare from Microsoft that showed one error but was unable to see the kind of error. Before this I have never had any kind of problem or strange behavior. .Thanks in advance for all your help.

I am using Windows XP SP3, Avast, Firefox.

More replies
Relevance 85.28%

Basically my email is sending emails away, I found out cause some didn't make it to the senders and my MSN Messenger is sending out virus links to friends. Here's my DDS and other info.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Owner at 11:07:47.71 on Sun 01/03/2010
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.510.159 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\TELUS eCare\bin\mpbtn.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Hewlett-P... Read more

Answer:Hotmail sending SPAM emails, and Messenger sending Links, please help.

Hello and welcome to Tech Support Forum.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please post a fresh DDS Log

3 more replies
Relevance 82.82%

I recieved a comlaint to my fiance today. She says that she received three emails, (which, for her, started Friday) with a link to some Canadian Drug retail site, featuring prices for Viagra and another with the link to some site that did not exist. She also tells me that these emails have been sent to all my contacts as well. I've changed my password at this point, but thats it. Im not too computer-saavy, either-- What does this mean and what can I do to stop it?

Answer:Something is sending spam to all my Contacts!

in general everyone will receive spam how do u know that the spam is coming from you to your contacts?I am here for a reason.For help or To helplet me know if my advice was of help thank you.

5 more replies
Relevance 82%

Hello, just today my email sent out a bunch of spam to all my contacts. I scanned with AVG but nothing showed up as a threat. I am worried that it will happen again. Below is my hijackthis log.
Thanks for the help!

The email content was something like "hey check this out this is intense... (link to job offering)" I deleted all of it before I copied it down.

[HJT log removed by Broni]
 

Answer:Email sending spam to all contacts

Okay thank you
 

4 more replies
Relevance 82%

Ive noticed that once a month, feb, april, and may, my hotmail email has been sending out spam to all my contacts. It even appears in the hotmail sent folder. I rarely use my hotmail email address, and have never had a similar issue before with my other email addresses (that I know of-eg Ive never sent spam to my contacts which has also appeared in the 'sent' folder on yahoo etc). I have changed my hotmail password as a result, and scanned this machine fully/kept it updated with adaware, avira, malwarebytes, spywareblaster. Is it likely to be an infection on the pc, or the result of some automated system working out my password and using my hotmail on its own to send out its own spam? Im not 100% on how it works exactly

Answer:most likely cause for hotmail sending out spam to all my contacts?

theDarkness

For some reason if you don't select a strong password for hotmail then it's a target for spammers as it is Microsoft I think.
Create a password with letters, upper and lower case, digits and symbols that are accepted. Example:
Mhall,ll,ll,Mhall,wfwwas.
Mary had a little lamb,
little lamb, little lamb,
Mary had a little lamb,
whose fleece was white as snow.
Easy to remember but make it a personal poem.

4 more replies
Relevance 82%

hello folks

Problem :
My hotmail recently started sending spam and junk mails to all my contacts. I noticed this because my sent folder was full of this spam messages. It has been doing this for past 2 days.

Steps I have taken to try and solve this
I tried changing my Hotmail password, alternative email and secret question ... without any results

Warning my Google Chrome gave me this morning

This is probably not the site you are looking for!
You attempted to reach by151w.bay151.mail.live.com, but instead you actually reached a server identifying itself as a248.e.akamai.net. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of by151w.bay151.mail.live.com.
You should not proceed, especially if you have never seen this warning before for this site.
After seeing that warning i suspected that my DNS had been changed by some virus and my sites were being redirected to some shady server. However the result of my ipconfig/all showed that I still have the right DNS on my NIC.

Also some of these spam emails are sent when my PC is turned off sometimes.

Your Help in solving this will be HIGHLY appreciated
I am attaching my HijackThis log to this post also the TSG Sysinfo :

HJT:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:58:20 AM, on 28/04/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.... Read more

More replies
Relevance 82%

Here's what's going on with my laptop:My Web email is sending bogus emails to my contacts.  I can see some of these emails in the Sent folder of my Web email, but not in my Outlook Sent folder. I use Norton 360, always keep it up to date. Since the email spam began, I've run several different spyware and malware programs and my computer comes up clean. I don't access my email at public spots, only at home. I've tried working with my email provider (AT&T) on this problem, but the technicians haven't been able to help and suggested I contacted Yahoo for help, which I know is a dead-end street. Here are some oddities that no one at AT&T can explain (and I don't know if they have anything to do with the spam coming from my email). AT&T and Yahoo ask users to create a sign-in seal as a way to verify that you're on a legit site when you want to check your Web mail. My sign-in seals always disappear from one day to the next. Also, in my settings for my AT&T Webmail, there's an email address there that I didn't enter and that I can't change or delete. The AT&T tech told me it's Yahoo's Hong Kong office; however, several months ago, I received spam from the same address. I'd really like to find a way to stop the spam and would greatly appreciate any help.  Thanks --- ChrisP.S. I have a Lenovo ThinkPad with Vista Home Premium.

More replies
Relevance 82%

What should one do in this situation?

What should I recommend the person who owns that email address to do?

How did this happen in the first place and how can it be avoided?

Thanks, I need help a friend.
 

Answer:Email sending spam to all contacts

Make a new email address. Most ISP's allow for 10 sub accounts.
 

10 more replies
Relevance 81.59%

A virus or something is sending a message to all my contacts in gtalk. the message includes a link which is a virus.

Answer:Sending mail to contacts on gmail

If you access your email and gtalk from the web (using web browser) and not Outlook, Outlook Express or Windows Live Mail; You need to change your Gmail password ASAP! That will resolve the issue.I would also download Malwarebytes from www.filehippo.com and do a full scan on your computer just in case.http://www.filehippo.com/download_m...

2 more replies
Relevance 80.77%

Outlook 2007 sending spam weekly to all my contacts from ME without my knowledge.

Answer:Outlook 2007 sending spam to all my contacts from ME...

http://www.computerhope.com/forum/index.php/topic,46313.0.html

1 more replies
Relevance 80.77%

Hi, I don't know how it happened but my Uncle seemed to get his MSN email sending porn spam to some of his contacts. Seeing I can't monitor what he does on the computer there is really noway of knowing how he happened to accomplish this. I ran spyware scans with Superantispyware and Malwarebytes. All it found was cookies and no virus or anything that would lead me to believe he had a virus. I also scanned with AVG and it came up clean. How do you keep a web-based email from sending spam to your contacts under your name? I do know his password is saved. If he changes his password and types it in from now on will that stop it? Thanks.
 

Answer:MSN email sending porn spam to some contacts

I believe that sometime last week a lot of MSN/Hotmail accounts were hacked and their contact lists taken over.
I have read that the first thing to do is to change your email address. Personally, I would get a different address and close that one...Perhaps someone else here has a better idea.
Vicks
 

3 more replies
Relevance 80.77%

In researching why someone's Yahoo account was sending spam to all of their contacts, I discovered a neat tool that Yahoo offers. If you go to "Account Info," there is a section that says, "View Your Recent Login Activity." We found that someone from India and/or Indonesia was logging into the account (see screenshot attached). The WY logins are the actual legit user in the USA, but the India and Indonesia logins are not legit. Before cancelling the account, we suggested a VERY strong password consisting of letters, numbers, symbols, capital letters, etc. We will monitor to see if any strange activity recurs.
 

More replies
Relevance 80.77%

For the last two days, all of my hotmail contacts have been receiving spam from my hotmail account. I have changed my password and used ad-aware, malwarebytes, and avg to search for malware but have come up with nothing.

Thank you in advance for looking at my log and giving any advice you might have.

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by Zach at 9:48:42.17 on Tue 05/17/2011
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_24
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4095.1839 [GMT -4:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG10\avgchsva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetwo... Read more

Answer:Hotmail is sending spam to everyone on my contacts list

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

3 more replies
Relevance 80.77%

some canadian drug company is sending all my contacts emails almost daily. Is there some way to stop this?

Answer:yahoo mail sending my contacts spam

Change your password for a start, but apart from that there's not a lot else you can do, the addresses have already been harvested so you cannot stop the mails - just tell all of the recipients to add the Canadian's domain to their junk sender's list"I've always been mad, I know I've been mad, like the most of us..."

2 more replies
Relevance 80.77%

A few people have told me that they received a spam message sent through my hotmail account....after investigating a bit Ive discovered that I must have some kind of malware sending out this spam from my hotmail.....Ive already changed the hotmail password.....here's a copy of my HJT log.....does anyone see anything that could be causing this? Thanks in advance for your generous help....Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:04:54 PM, on 2/16/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16876)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Vongo\VongoService.exeC:\WINDOWS\system32\mqsvc.exeC:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exeC:\WINDOWS\system32\mqtgsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS ... Read more

Answer:Malware sending spam to hotmail contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 80.77%

I have been using this PC for about 9 months. Windows 7 Ultimate - 64 bit. I haven't had an issue in 9 months but lately after using Outlook express to connect to a hotmail, I have noticed something suspicious. Outlook has been sending out spam to my contacts (Saw this through Sent).

I have attached the attach.zip and here is the DDS Log
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.4.1
Run by Daniel at 20:08:29 on 2012-06-25
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8163.4846 [GMT -4:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atie... Read more

Answer:E-mail sending out SPAM through contacts list.

72 hour bump.

9 more replies
Relevance 80.77%

Hello, TechSupport Forum

I hope you can resolve my issue where my hotmail is sending my contacts links to follow into spam. I can confirm this because i have added myself to my contacts list and i have recived one from myself. On top of that, my contacts responded back telling me that they are recieving it. I have re-installed windows (not in hopes of repairing the problem, due to actual OS mis-functions)

EDIT: I also do have access to a recovery disk/re installer

Here is my DDS log:

DDS (Ver_10-12-12.02) - NTFSx86
Run by Luka at 21:28:40.34 on Wed 02/23/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2942.1452 [GMT -5:00]

AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k... Read more

Answer:Hotmail Sending Spam Links to Contacts

Bump.

3 more replies
Relevance 80.77%

My mother's gmail account seems to have contracted a virus that sends an email with the subject line '+hi+' to everyone in the contacts book and with the url 'http://sites.google.com/site/s3895yhf56eydya/aovq7a' in the message body. The site appears to be Canadian and is selling vyagra.

I don't think it's likely to have done any harm to the computer itself, and we noticed the problem when she received several failed message emails. The machine we noticed the problem was a mac so I guess that makes it even less likely the virus is affecting the actual computer but obviously it's not great for my Mum to be sending everyone she knows links to vyagra sites and also I don't know if the emails themselves contain the virus and would infect the recipients.

Is it possible to disinfect the account or does one just have to start over with a new one. That would be hugely inconvenient given how long my mother has used this account.

Answer:Email virus sending spam to contacts

Hi,

Gmail account password and secret question has to be changed. Also, check email filters (in Gmail settings) that there're no unfamiliar ones set.

2 more replies
Relevance 80.77%

My friend has been complaining to me that "someone hacked into her account" and is sending spam to all of her contacts from MSN, Hotmail and Facebook.

I understand that a lot of spam only appears to be sent from a specific account when in fact the "from" field is really just one of the many e-mail addresses that have been stolen.

But, the fact that the recipients of the spam are all on her contact list and it the e-mails are coming from several different contact lists makes me wonder if this is true. Perhaps someone has "stolen" her contact lists?

How does this all work, and is there anything she can do about it?

Answer:E-Mail Contacts Stolen and Sending Spam?

Mailer virus.

Please follow this sites pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, please post the requested logs in the Virus/Trojan/Spyware Help forum, not here.->

http://www.techsupportforum.com/f50/

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 79.95%

My friend just let me know that my windows live messenger has been sending my contacts spam messages like "Are you finally ready to lose some weight with no effort, well I am living proof that those acai berry pills everyone is talking about actually work, I lost 22 pounds in two weeks and it only cost me five dollars over at [url="http://hellsec.com""]http://hellsec[/url]I have know Idea how this has happened. How can I stop this from happening? Is my computer infected with a virus? I have tried searching for answers but haven't been successful. I would be really appreciative if anyone could help me with this problem.

Answer:My windows live messenger is sending me contacts spam?

MSN VirusPlease download MsnCleaner.zip and save to your Desktop. (in addition to removing infected files, it will remove certain restrictions on your system often disabled by malware.)Extract (unzip) the file to your desktop. (click here if you're not sure how to do this) but DO NOT use it yet.Reboot your computer in "Safe Mode" using the F8 key. To do this restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A boot menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".Double-click MsnCleaner.exe to run the tool.Click the "Analyze" button.A report will be created after the scan and will be saved to C:\MsnCleaner.txt.If it finds an infection, click the "Deleted" button.Reboot normally and post the contents of MsnCleaner.txt in your next reply.Now run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any ... Read more

1 more replies
Relevance 79.95%

I've been having a problem recently with spam messages being sent from my Gmail account to all my contacts. I've narrowed it down to 2 computers I use, my work and personal laptop.I'll start with my work PC (and later followup with my personal). I've run Malwarebytes Anti-Malware and TrendMicro's Housecall Scan and it found nothing. I'll attach the HijackThis log.Any sagely advice? PS. I searched the forum and found 2 others with my problem, but no solution or replies were given.

Answer:Malware/Virus emailing all my Gmail Contacts spam

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

2 more replies
Relevance 79.54%

they are pretending to be me saying i have been mugged in britain and need them to send money. I cant get into my acct because they have changed my password.

Answer:someone is sending emails to my contacts

ok, so contact you e-mail clientSome HELP in posting on Computing.net plus free progs and instructions Cheers

2 more replies
Relevance 79.54%

Not sure how or what I have virus/malware but about a month ago my computer started sending emails out to my contacts with out me knowing it.
I stopped it from sending anymore by unplugging from my router.I then found your site and ran the steps for malware removal. Malwarebytes found a Trojan scar which it deleted. I keep running the scans for the next week nothing was found so I plugged back into the router all was good for several days then the emails started up again. I did not go on line other then to let the programs update. This was about a week ago. I have been running scans everyday and can find nothing but I know it is still there. Two days ago I plugged back in to the router and they started up again.
Not sure what else to try, hopefully you can help....
 

Answer:Sending emails out to contacts

Here is the zip file.
 

11 more replies
Relevance 79.54%

can't figure out how to add info into new smart phone, never used one before.

Answer:Receive Gmail account emails from inoperative cell phone to my outlook.com emails instead, why?

Settings > email + accounts > add an account > fill in the details for the gmail and it will get a new "App" on the All Apps list that you can pin to the Start Screen

more replies
Relevance 79.54%

Something has got through onto my pc, and is sending out emails with links to people in my address book.
It started at 1.20pm today, and has so far sent about 30 emails.
The links all vary slightly but basically take you to sites that sell medicines.
Any ideas on how to stop this, as I scanned last night and all came back clear and ok.
Thanks
Steve

Answer:Pc sending out spam emails

I very much doubt that your Pc is originating these but it is more likely that someone has got hold of your e-mail address and is spoofing that they are from you. Regret that this is fairly typical and very difficult to stop without changing e-mail address. Is this hotmail? If so change password.
Download and run Malwarebytes Free version and run that. Also do a thorough anti-virus scan.

8 more replies
Relevance 79.54%

Hi,

My computer is sending emails to everyone in my AOL address book. I've run McAfee and Spybot. Nothing found.

Any suggestions?

Answer:My PC is sending spam emails

I would run MBAM first and then run SUPERAntiSpyware next. It's possible that either spyware or malware has gotten past your antivirus software.

5 more replies
Relevance 79.54%

i noticed last night that i sent an email to all of my contacts, some spam mail of course. I did did a few scans with both updated AVG antivirus and Malwarebytes without any luck. :/ i just changed my hotmail password but i wanted to know if you guys could give me advice about it. Here's the spam email i sent We are a large wholesaler who mainly sell electrical product ,such as digital cameras, mobile, LCD TV, Laptops, Digital Video, Mp4, GPS, etc.The quality of our products is the best, our service is perfect, and our price is the best,the speed of our shipping is very fast.You can buy for your end use or sale . We're always be your side to support the best service.our contact information as below :WEB: <<china365buy.com>>So sorry for any inconvenience caused.Logfile of HijackThis v1.99.1Scan saved at 5:38:07 PM, on 04/04/2011Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Unable to get Internet Explorer version!Running processes:C:\Program Files (x86)\iTunes\iTunesHelper.exeC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Hijackthis\HijackThis.exeR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = F2 - REG:system.ini: UserInit=userinit.exeO2 - BHO: Windows Live ID Sign-in Helper ... Read more

Answer:sending spam emails

We do not analyze HijackThis logs in this forum. Please see the rules at the top of this topic.

As for your hack, were the emails that were sent found in your Sent folder in hotmail? If so, then the account itself was hacked and changing the password should resolve it.

1 more replies
Relevance 79.13%

I read through previous queries about this on PC advisor and followed the advice. I have changed passwords on btinternet and BT.com. But now there are are even more random emails today. I am not sure what else to do. I have linked my email through outlook on laptop, iPhone and iPad. I have checked my sent box and all seems to be okay there, it's just my inbox
Any further assistance would be greatly appreciated
Thank you

Answer:I have been receiving spam emails from my contacts

It is my guess that someone on your contact list has had their address list hi-jacked and that is why you are receiving these emails.Changing your password only affects the email that you send out, not the ones being received.
Have a look at the addresses and if they are not the ones you know, set up the JUNK mail to filter them out.

4 more replies
Relevance 79.13%

Hi,
Recently my hotmail account keeps getting blocked for sending spam.
I checked my "Sent" box and there are about 20 different emails being sent from my email.
However I have never sent these messages to anyone.
I checked the message source and it says:
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_1a613422-2e77-467a-a31b-aed5fe9d8b46_"
X-Originating-IP: [60.56.82.85]

My IP isn't anything close to the IP that sent the emails.
I have ran malware bytes, Ccleaner, Registery cleaners and Kaspersky internet security.
No malware detected, I have ran HiJackThis,
The Log File says this:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:54:43, on 12/05/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Video Web Camera\traybar.exe
C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe
C:�... Read more

Answer:Spam Emails to hotmail contacts?

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===HijackThis is not able to provide accurate information for 64 bit systems.In your case we need to see a DDS Log.I would remove HijackThis using the Add/Remove Programs list.Please download and run this DDS Scanning Tool. Nothing will be deleted. It will just give me some additional information about your system.Download DDS and save it to your desktop from here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop.Please just paste the contents of the DDS.txt log in your next post.===Third party programs if not up to date can be an open door for an infectionPlease run this security check for my review.Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.===Recently my hotmail account keeps getting blocked for sending spam.I checked my "Sent" box and there are about 20 different emails being sent from my email.If this persists all you can do is get a new e-Mail address.Inform your contacts and ask them to confirm.When they have ... Read more

2 more replies
Relevance 78.72%

Help, my hotmail account keeps sending ads to all my contacts regarding a work at home scam.

Answer:Hotmail keep sending emails to my contacts

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/14/2010 4:51:36 PM
System Uptime: 3/25/2011 3:46:18 PM (4 hours ago)
.
Motherboard: TOSHIBA | | Portable PC
Processor: Intel(R) Pentium(R) M processor 1.86GHz | uFC-PGA Socket | 1861/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 93 GiB total, 64 GiB free.
D: is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\8352943900
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\8352943900
Service: NIC1394
.
==== System Restore Points ===================
.
RP283: 12/26/2010 1:49:29 AM - Software Distribution Service 3.0
RP284: 12/27/2010 12:58:39 PM - Software Distribution Service 3.0
RP285: 12/29/2010 12:46:56 AM - System Checkpoint
RP286: 12/29/2010 12:51:25 AM - Software Distribution Service 3.0
RP287: 12/30/2010 12:55:11 AM - System Checkpoint
RP288: 12/30/2010 2:08:32 AM - Software Distribution Service 3.0
RP289: 12/31/2010 10:45:33 AM - Software Distribution Service 3.0
RP290: 1/1/2011 11:43:10 AM - System Checkpoint
RP291: 1/2/2011 12:50:52 AM - Software Distribution Service 3.0
RP292: 1/3/2011 1:43:14 AM - System Checkpoint
RP293: 1/3/2011 4:35:40 AM - Software Distribution Service 3... Read more

3 more replies
Relevance 78.72%

Hello,

I recently discovered that I have been having a problem with my AOL mail. I believe it's just that email, although I also use Outlook Express and Gmail. I started by seeing several dozen bounced emails back in my inbox that I never sent out, then got a few notes from people who said they received sketchy emails from me.

In the past, I've received this type of email from other people before, usually containing a few words and a link to some kind of bogus website. I never click on the link, but I guess they caught up to me somehow.

I have McAfee and the software has not detected any problems. I also ran a scan with Malwarebytes and that did not detect any problems either.

Logs below as requested. Please note, I also attached an image screenshot for gmer, which did not allow me to check all of the requested fields as per your instructions. They were shaded out and could not be clicked. Thanks in advance for the help.
DDS (Ver_10-12-12.02) - NTFS_AMD64
Run by JME at 19:32:49.86 on Mon 01/31/2011
Internet Explorer: 9.0.7930.16406 BrowserJavaVersion: 1.6.0_23
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.8151.5995 [GMT -5:00]

AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80... Read more

Answer:Sending Unwanted Emails to All Contacts

Hello jme248Welcome to BleepingComputer ==========================I do not see any malware present in the logs.Please change the password for the account and let me know if it continues.

1 more replies
Relevance 78.72%

Hi. I'm at something of a wit's end. I've had a situation for a bout a week where my Hotmail account has sent multiple emails to various members of my contacts list without my permission. I have changed my password on multiple occasions and am fairly confident that the problem is not one of my account being compromised in the traditional fashion.

I have run multiple Spyware/Malware removal tools to no avail and have Microsoft Security Essentials installed with definitions up-to-date.

Any help would be hugely appreciated.
Dean

Answer:Hotmail sending emails to contacts

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/455395 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 78.72%

My grandmother has a compaq running Windows ME (yes I know it stinks). It has Outlook Express version 6. She has comcast email and internet.

I have scanned it with Adaware, Spybot S&D, as well as Norton AV with updated definitions and the system is fairly clean.

From time to time when she tries to send an email to single contact, multiple people in her address book will recieve the same email.

There are a couple of things that might be a clue to the problem. About a year ago, I backed up her address book and emails and reformated then imported the account details using the process found here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q270670

The other thing I noticed, she has some contacts that are invalid. An example would be
[email protected]
Comcast mail server returns an error to outlook if this name is in the recipient list.

Any thoughts?

Thanks.
 

Answer:OE sending emails to multiple contacts

anyone?
 

2 more replies
Relevance 78.72%

My hotmail account started sending random emails that contain some kind of malware. They went out to every person in my contact list. The emails have no subject and contain a single link such as: http://maryIndrenth8516.t35.com. When the person opens the link, they get infected as well and start sending emails to all their contacts. Each email has a different link, but is structured the same. I'm not sure what other damage the malware is doing, but I am worried about what kind of access it is getting to my personal files and what type of communications it is making.
 

Answer:Sending infected emails to all my contacts

Additional log for infected email problem

Here is the MGLogs zip. Thanks.
 

2 more replies
Relevance 78.72%

Hello everyone,

I am working on my mother in laws computer and it keeps sending emails (spam) to everyone in her address list. I ran the AVG rescue CD and it found no issues and just ran combofix, here is the log file
ComboFix 10-12-04.02 - Joe 12/05/2010 17:50:26.1.4 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3070.2330 [GMT -5:00]
Running from: c:\documents and settings\Joe\My Documents\Downloads\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Files Created from 2010-11-05 to 2010-12-05 )))))))))))))))))))))))))))))))
.

2010-11-30 23:48 . 2010-11-30 23:48 -------- d-----w- c:\documents and settings\Joe\Application Data\Uniblue
2010-11-30 23:48 . 2010-12-05 19:06 -------- dc-h--w- c:\documents and settings\All Users\Application Data\~0
2010-11-30 23:47 . 2010-11-30 23:47 -------- d-----w- c:\program files\Uniblue
2010-11-30 23:47 . 2010-11-30 23:47 -------- d-----w- c:\documents and settings\Joe\Local Settings\Application Data\PackageAware
2010-11-15 16:45 . 2010-11-15 16:45 -------- d-----w- c:\program files\iPod
2010-11-15 16:45 . 2010-11-15 16:46 -------- d-----w- c:\program files\iTunes
2010-11-12 15:38 . 2010-11-12 15:38 -------- d-----w- c:\program files\Common Files\Adobe
2010-11-06 16:37 . 2010-11-06 16:37... Read more

Answer:XP virus sending emails to all of my contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic and do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for postin... Read more

2 more replies
Relevance 78.72%

Can anyone please advise me if they are aware of a bug that currently effects hotmail.I'm having all contacts in my email list sent emails and this has now happened three times.

Answer:Hotmail sending emails to contacts

It sounds like you got a virus, check out these results from google search click here

2 more replies
Relevance 78.31%

Ok, so I have someones computer I am working on and the problem with it is that it keeps sending off emails. Not through outlook or anything like that, the client noticed because the virus scan kept tryong to scan outgoing messages. The screen will FILL UP with the little scan box (norton). I ran active ports to see what process was doing it and it appears to be WinLogon.exe. It also sends emails while in SAFE MODE!!!What exactly do I do about this? Logfile of HijackThis v1.99.1Scan saved at 2:07:02 PM, on 7/12/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ewido anti-spyware 4.0\ewido.exeC:\Program Files\Grisoft\AVG Free\avgwb.datC:\Documents and Settings\Clark Computer\Desktop\Hijack This\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywayR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/mywayO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program... Read more

Answer:Computer Is Sending Off Spam Emails!

Also, NOTHING picks this up.. AVG, Ewido, NOrton, Trend, Windows Defender.... NOTHING...

3 more replies
Relevance 78.31%

help, i keep getting a bunch of popups from symantec stating that the emails were not able to be sent, the subject line is spam and it is trying to be sent to hundreds of email addresses that i do not know. also, i have been having problems with my temp folder. i delete everything listed but as soon as it deletes, it starts to fill up again immediately......sometimes as much as a thousand. i am also having problems emptying my recycle bin on the different users because it states that it is either write protected or being used by another user, even a few of my other user accounts can't delete some files in the temporary internet folder. here is my log that i just did, all help would be greatly appreciated.


Logfile of HijackThis v1.99.1
Scan saved at 9:59:16 PM, on 2/1/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.... Read more

Answer:computer sending out spam emails

bump!

19 more replies
Relevance 78.31%

Hello. Recently, my hotmail account sent random emails to my contacts. This has happened before with me and I changed my password, and it was fixed but it is happening again now.

First step I took was contacted hotmail...and they looked into my running processes and told me: under the "user name", if it doesn't show your name, then someone is controlling your computer or in other words, they are running something on your machine. The technician pointed out a few processes:

1. atieclxx.exe
2. csrss.exe
3. winlogin.exe
4. VESMgrSub.exe

I googled these and some sites say they are malware/trojan and others say they are part of the computer.

So, in the end my questions are:
1. how did hotmail account sent those emails randomly?
2. Are these processes "ok" or are they really a threat to the computer?
3. If they are, what should I do to remove them.

Note: I do have Norton Anti-Virus software running.

Answer:Hotmail Sending Spam Emails

Can anyone help me with this?

15 more replies
Relevance 78.31%

I have had a problem recently with numerous spam emails being sent from my mailbox similar to this:
 
Hello!
 
New message, please read hxxp://www.sdfholistic.com/black.php[/url]
 
I have checked with my ISP and it appears that this is not a case of spoofing, but these emails are actually being sent from this mailbox, which leads us to the conclusion that this is a virus infection. All the usual checks by Antivirus software has revealed no infection, but we had another episode of mass mailing yesterday.
 
FRST log is as follows and additional.txt is attached
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015
Ran by Mike (administrator) on MIKELAPTOP (21-10-2015 08:41:48)
Running from C:\Users\Mike\Desktop
Loaded Profiles: Mike (Available Profiles: Mike & mikeadmin)
Platform: Windows 10 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
(Red Bend Ltd.) C:\Progr... Read more

Answer:Virus sending out spam emails

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1830723692-352577568-1597100134-1001\...\Run: [AdobeBridge] => [X]
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggXcg9bBQtGRRgVJlgNTA1GRQcOIgsMURQXEQIWJltZAAoSQFQFIk0FA1ADB0VXfVBdFElXTwhuIVdBM1wCVFlXM3FNAw==
HKU\S-1-5-21-1830723692-352577568-1597100134-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggXcg9bBQtGRRgVJlgNTA1GRQcOIgsMURQXEQIWJltZAAoSQFQFIk0FA1ADB0VXfVBdFElXTwhuIVdBM1wCVFlXM3FNAw==
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQ0KV1oVEwJHbQ9eAAxcFQJHchRaUw1BDFMTdwxeA1gQElZCIR9aFQQTSEcFME0FCFwEURNNfXRZD0AjREZWLE1LKUwT&q={searchTerms}
... Read more

6 more replies
Relevance 78.31%

My ISP provider support sent me a notification that my computer has been sending out massive spam emails. The notification had an "important-details.zip" attachment.

Your e-mail account was used to send a huge amount of unsolicited spam messages during the recent week. If you could please take 5-10 minutes out of your online experience and confirm the attached document so you will not run into any future problems with the online service. If you choose to ignore our request, you leave us no choice but to cancel your membershipClick to expand...

I did not open the attachment. But will contact my provider's support team tomorrow, to find out what is going on.

I am using a loaner as my current business/personal computer has been down since early September. The loaner's owner kept it clean and secure....as so do I. All anti spyware and anti virus programs are kept up to date. We both only use Firefox as the browser of choice. He never enabled his "Outlook 6" and uses online email services instead. For any mail sent through my ISP Provider, I use an online email resource (Mail2Web.com) to access them with (after all, it is not my computer) I pay extra to use my provider's "Postini" as a security filter...on top of my present anti virus program. All firewalls are up.

I keep up to date on what new narsties pop up through this site and others like it. But know the culprits making these are getting sneakier.
-------------------------... Read more

Answer:Solved: ISP says Sending Spam emails?

8 more replies
Relevance 78.31%

For several weeks, my email address has been receiving bounce messages indicating that I am sending out spam.  My IP address has also been blacklisted.
 
I have run Microsoft Security Essentials, Spybot and AntiMalwareBytes, and AMB has identified (and quarantined) several Trojan programs.  However, the spam bounce messages keep coming from time to time and I think I have a virus which is well hidden from my usual tools.
 
Please can someone kindly help identify and remove any malware from my machine which may be responsible?
 
Many thanks.
 
Squeakmail.
=^..^=
 
============================================
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17239
Run by Paul at 7:52:18 on 2014-08-31
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.16383.11673 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\VPDAgent_x64.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe ... Read more

Answer:My computer is sending out spam emails

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Nothing suspicious was found on your DDS log.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Pleas... Read more

19 more replies
Relevance 78.31%

I have discovered that my computer is sending email out to many addresses on an intermittent basis. I believe that the virus is not active all the time. It will be quiet for a while, but every 5-10 minutes, it starts a lot of internet activity.

Tracking down the process involved using netstat -b showed all the network activity and the process involved. What I found was that normally there were only 2-3 Established connections, but when the virus went active that there were many many established connections. These connections were made by the program services.exe.

I have attached my hijackthis.log here:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:19:56 PM, on 1/4/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile D... Read more

More replies
Relevance 78.31%

Hi I was sent here by Gizmo after sending them scans of my regersty. Since mid week My computer ha been sending out my address box with a message to click on a link. I do not have a copy but have seen them because I was getting the same thing from people I know but I never clicked on link and deleted them. Not sure what started this I am very careful with spam or anything that looks like spam.
thank you for any help you can offer

Answer:Malware? sending out spam emails

If your email account has been hacked or spoofed (email address forged as the sender), you need to change or reset your email account password. I suggest you create a strong password. Sometimes just doing that will resolve the issue.Spam from your friends: hacked and spoofed e-mailWhat to Do if Your Email Account Gets Hijacked and Sends Out SpamIs Your Hacked Email Account Sending Spam to Your Friends?Hacked and Hijacked: What to Do if Your E-mail Account Gets CompromisedHelp! My Email was Hacked!

5 more replies
Relevance 78.31%

Services.exe is sending spam emails - Malware, Trojan, Zombie
I have discovered that the services.exe process is sending email out to many addresses on an intermittent basis. My ISP (Time Warner) has shut down my modem 3 times already due to complaints that my IP was sending spam. After I got them to re-open my connection, The problem then comes up again in another 30 days. So it would seem to be intermittent, but what I found out today is that the trojan isn't active all the time. It will quiet for awhile, but every 10-15 minutes, it starts a lot of internet activity.

Tracking down the process involved using netstat -ano which shows all the network activity and the process involved. What I found was that normally there were only 2-3 Established connections, but when the virus went active that there were many many established connections. When I ran netstat w/o arguments so it would look up to whom the computer was connected, I noticed that all of the connections were to SMTP ports on a myriad of services (I'm attaching that file showing a quiescent period followed by all the connections). I'm also attaching a picture of the task manager showing that the problem process ID, 608, is services.exe

I used runscanner to determine if the files that were present were signed correctly, but it didn't notice anything about services.exe. i.e. it gave no report whether the hash on the file was good or not (Does anyone know what the SHA1 should be?)

All of the conn... Read more

Answer:Services.exe is sending spam emails

Hiya and welcome to Tech Support Guy

Are you still having this problem? If so, can you do the following:

Download TFC by OldTimer to your desktop

Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
It will close all programs when run, so make sure you have saved all your work before you begin.
Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by M... Read more

1 more replies
Relevance 78.31%

Hi,

This started 1 week from now - when i received an email from AT&T saying that SPAM emails were being sent from our IP address (we have a static one). We have all XP - SP3 machine, with AVG Anti-virus software, which i removed and upgraded to Microsoft Security Essentials. I was also running Network Magic Software on all the computers and saw constant network activity through out the night from one of the computer. I check the report on my computer and it was fine. So i decided to run Windows Defender, Ad Aware, but all of them came back with nothing. I still see a constant internet activity through out the day and night from that computer.

So i ran the DDS script and RootRepeat Tool. Can someone check and let me know if there is some malware or our computers have become BOTS?

If there is anything else required or if anything else I need to do please let me know.

Thanks in advance for all the help
Shawn

Answer:Our Computers Being Used for Sending SPAM Emails

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No inp... Read more

2 more replies
Relevance 78.31%

Started a couple days ago...ran Spybot S & D and Malwarebyte and removed recommended items. I thought I had the problem fixed but this morning another spam email went out. I'm not very computer literate :0) .Here are scan logs...DDS (Ver_10-03-17.01) - NTFSX64 Run by Hinzman at 11:04:48.01 on Thu 06/10/2010Internet Explorer: 8.0.6001.18904 BrowserJavaVersion: 1.6.0_20Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.4085.1978 [GMT -4:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\... Read more

Answer:Computer sending spam emails

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

2 more replies
Relevance 78.31%

cant i delete all the emails in the spam folder instead of only 100 at a time?
 

Answer:thousands of emails in gmail spam

Hi


So if you click in the spam folder the link "Delete all spam messages now" it doesnt delete all spam messages?

To be honest if your getting 1000s of spam emails a day/week/month I would be creating a new Gmail account as that one will only keep getting those volumes of spam as its now on many spam email lists, which is why its wise to keep your main email account only for friends and create a sperate one/s for signing upto forums, newletters etc
 

3 more replies
Relevance 77.9%

I've set up my Gmail account for reading emails via IMAP and sending emails all with Mozilla's Thunderbird. I followed Google's directions on how to setup the client to work with Thunderbird. It reads the emails correctly but when I send emails I get:
"An error occured while sending mail. The mail server responded: INCORRECT DOMAIN IN MAIL/RCPT COMMAND. Please verify that your email address is correct in your Mail preferences and try again."

As it suggests I check the outgoing mail setting and try again with the same results.

Has anyone else run into this issue and how did you resolve it?
 

Answer:Thunderbird and Gmail, sending emails

Not sure. I remember setting my GMail up for pop, but not IMAP. I would post something over on the Mozilla support forums - more people read that and could help.
 

3 more replies
Relevance 77.9%

Hey tech guys,
I want to send emails to long list of recipients by Gmail, each of them will be shown and receive the email as [To his email address], would like to ask if there is any idea or suggestion about this?
Thanks,
 

More replies
Relevance 77.9%

.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 8.0.7600.16385
Run by Alyx at 18:06:45 on 2011-07-20
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3767.1520 [GMT -7:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\... Read more

Answer:computer sending out emails (gmail)

Hi alyxthegreat, and welcome to Bleeping Computer.Firstly,Please launch Malwarebytes' Anti-Malware, click the Update tab, and then Check for Updates. Then choose the Scanner tab and select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Secondly,Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.

2 more replies
Relevance 77.9%

Stop virus from sending e-mails to my contacts

Answer:Stop virus from sending emails to my contacts

change your password and probably make a new account as you never said if it is web-based or whateverSome HELP in posting on Computing.net plus free progs and instructions Cheers

2 more replies
Relevance 77.9%

 Attach.txt   1.81KB
  1 downloadsI had some virus or trojan send emails to everybody on my hotmail contacts, with the text below:- Fresh life of shopping!i would like to introduce a good company who trades mainly in electornic products.Now the company is under sales promotion,all the products are sold nearly at its cost.They provide the best service to customers,they provide you with original products of good quality,and what is more,the price is a surprising happiness to you!It is realy a good chance for shopping.just grasp the opportunity,Now or never!The web address www.sxds#wz.comI put the # in just so nobody clicks that addy by accident, suspect it may not be healthy for your pc. DDS (Ver_09-02-01.01) - NTFSx86 Run by Skunkport at 22:27:27.90 on 20/02/2009Internet Explorer: 7.0.6000.16809Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.44.1033.18.2046.898 [GMT 0:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)AV: Tesco Internet Security *On-access scanning disabled* (Updated)FW: Platinum 2007 Personal Firewall *disabled*============== Running Processes ===============C:\Windows\SYSTEM32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\... Read more

Answer:Trojan/virus sending emails to my contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

2 more replies
Relevance 77.9%

Hi,

I logged on to my work email this morning to discover I'd been sent an email from my girlfriends hotmail account. The email had been sent to me and everyone else in her hotmail contacts and all it contained was a brief statement that requested people to visit a website (which was blank). The thing is, the email was sent when I know for a fact my girlfriend wasn't logged onto hotmail and she certainly never sent it or knows anything about it. Does anyone know why this has happened? Or has anyone else come accross this? She only ever accesses her hotmail account at home and no-one else could have used that computer.

Many thanks for any advice!
 

Answer:Hotmail sending hoax emails to all contacts - Can anyone help?

What is most likely to have happened is that her email address has been "harvested" from an infected computer on which the address was stored (from an incoming email). Or from any public forum or webpage where it may have been posted.

The harvested email has been used by a spammer or virus writer as a "spoofed" :From address, which only looks as if it came from her.

If the email website link was blank, it may have been an error by the perpetrator or the website may have actually contained some nasty script that you have protection against the vulnerability that it was trying to exploit.

There are a large number of permutation on the theme.
 

2 more replies
Relevance 77.9%

I replied to a spam email from a friend telling him he was infected. The subject was something like "Rocky, this is the best financial decision I ever made". I thought I was safe to do this because I use McAfee Security Center, Malwarebyte's Anti-Malware and Ad-Aware and a firewall. My PC is now sending out similar emails, to everyone in my contacts, stating things like "I have a way to reach financial security" and "best career decision I ever made" in the subject line. I believe 3 have sent since Tues. or Wed. None of my antivirus/ malware software can detect/remove it. I performed a "restore" to March 12, before the infection, to no avail. Sorry I cannot give you more info regarding the infection. Any help you can offer is greatly appreciated and I thank you and the other volunteers for this invaluable resource and most of all their time. Sincerely, Rocky.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Rocky at 15:29:19.01 on Sun 03/27/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.334 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\sy... Read more

Answer:Unidentified infection sending emails to contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

16 more replies
Relevance 77.9%

I depirately need help! I have a HUGE Windows Outlook 2010 email contact list; and, hundreds of people are complaining about my computer sending emails such as:

"how are things going this method is almost guaranteed to work even my mom is doing it and she just got a computer a few months ago http://www.cnbc22.com/ get back to me"
Please find all the information necessary to identify the virus included in this forum post. I am posting ALL INFORMATION requested by this forum except for GMER since it have a 64bit OS.

--- Hijackthis.log ---
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:32:47 AM, on 4/30/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\SUA\usr\sbin\init
C:\Windows\SUA\usr\sbin\inetd
C:\Windows\SUA\usr\sbin\cron
C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files (x86)\Promixis\Girder\girder.exe
C:\Program Files (x86)\Posibolt Software\Clock-on-Tray\ClockOnTray.exe
C:\Program Files (x86)\Hot Keyboard Pro\HotKeyb.exe
C:\Program Files (x86)\eFax Messenger 4.4\J2GTray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\FirefoxPreloader\FirefoxPreloader.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\watchDirectory\w... Read more

Answer:Please HELP!! Virus keeps sending emails to Outlook Contacts

13 more replies
Relevance 77.9%

Hi,
Just noticed today that my email address is being used ot send mail to my address book. Im receiving tons of return mail from aol becasue of this. I tried changing my aol password and runnnig superantispyware which found 217 infections wehich I cleared. The problem is still there. I dont know if this is a hijack problem so I ran hijack this, here is the report. What can I do to resolve this issue. Thanks.
windows 7
sony vaio
using google chrome
250 GB hard drive
3GB memory
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:20:42 PM, on 9/29/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
C:\Program Fil... Read more

More replies
Relevance 77.9%

Recently, a few of my Contacts have responded to emails sent from my computer saying that they are unable to open the attchment I have sent to them. I did not knowingly send them anything. How can I make this stop. I don't want to infect others with this problem.

I have run a DDS and GMER scan of the computer as suggested and the results are included below.

DFWood
.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by David Wood at 4:57:43 on 2011-05-20
Microsoft? Windows Vista? Ultimate 6.0.6002.2.1252.1.1033.18.2045.1060 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k ... Read more

Answer:Computer is sending unauthorized emails to my contacts

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

15 more replies
Relevance 77.49%

Hi thereIt seems as though I have a virus on my computer that is sending spam emails to everyone I've ever emailed, two at a time. It's getting rather embarrassing! I've followed the instructions and include the DDS.exe results here and attach the Attch.exe file. My computer seizes up every time I try to run the GMER scan so I haven't been able to attach that too. Please can you help? Please note that I'm NOT techy at all so please be patient!! ThanksDDS (Ver_10-03-17.01) - NTFSx86 Run by RACHEL at 19:28:15.83 on 2010-04-18Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.979 [GMT 1:00]AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\S24EvMon.exesvchost.exesvchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEsvchost.exeC:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\A... Read more

Answer:Virus infection - sending spam emails

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.----------------------------------------------Please try running Gmer again but only check the SECTIONS option

15 more replies
Relevance 77.49%

A friend of mine has a laptop running XP SP3, and his wife a netbook.

They are connected to the internet by a wireless router.

A week or so ago he received a number of bounced emails apparently sent from his Hotmail account advertising various drugs - the emails were sent to addresses from his Windows Live Mail Contacts.

The 'dead' address ones were returned but he wasn't too happy about his business contacts receiving Viagra ads apparently from him

This has been repeated twice.

His wife also uses Windows Live Mail to access the same Hotmail account.

He has Panda Cloud AV and she Norton Security 2009, both up-to-date.

I have run MalwareBytes, SuperAntiSpyware, Sophos Rootkit Remover and Trend Housecall online scanner on both machines and found nothing worse than a few relatively harmless bits of adware.

The only other thing is that one of their neighbours shares their wireless connection and I wonder if that could be a problem.

He does use utorrent.

I'm at a loss asd to what else to do to find the source of the problem

Any advice most welcome.
 

Answer:Friend's laptop is sending spam emails..

12 more replies
Relevance 77.49%

Hello

Well I logged into hotmail, and noticed that I had about 10 delivery failure messages...The message was basically spam.

I'm running Windows Vista, I have McAfee security center that I got with my ISP
Any more information you need, please let me know.
Thanks in advance

Matt.

Answer:Just noticed hotmail has been sending spam emails

up

4 more replies
Relevance 77.49%

Hi all,

My PC was infected with XP 2008 and a bunch of other stuff.

I seem to have removed the viruses but now when I start the computer it starts sending spam email in the background.
The only reason I even know it is sending anything is my avast email scanner is turned on and it shows every message sent or recieved being scanned.

There is no record of sent emails in my sent folder, outlook express.

I figured out how to make it stop sending emails by killing the svchost.exe that it is running, but as soon as I restart the pc it starts sending them again.

My PC is an old thinkpad T22 with XP Pro with service pack 3 installed.

I have tried many programs to find the problem but no more virus's are found.

Any ideas what is doing this or how to get rid of it?

Thanks

Answer:Got Xp 2008 Virus, Now Pc Is Sending Spam Emails

Would you try a scan from safe mode with avast?http://www.malwareremoval.com/tutorials/safemodeboot.phpafter that a scan with MBAMhttp://www.bleepingcomputer.com/forums/ind...st&p=876163post the log please

3 more replies
Relevance 77.49%

Hi I'm a newbie here and I have a questionI manage a small business network for a client of mine and they have been blacklisted by Spamhous.org a few times in the past 2 years for sending spam from their network most of the time I can figure out th offending computer and clean it and get us de-listed. The IP they are blocking is the public IP of our Router, they all send emails through to a POP account from their hosted domain.Wondering if there is an application that I can run or a utility that I can install on the network or run a their PC's that will tell me if they have a something that is using their PC's to send spam emails? or a network monitoring utility that can monitor the network for suspicious activity. This is the 3rd time Spamhaus has shut us down in the past 2 years and it is getting annoying, the issue is that they are a temporary staffing agency and they send emails with the words job and career in them all the time. But that should not be enough to get them flagged as a spammer.Any help would be appreciatedThanks73

Answer:How do I find a computer that is sending spam emails

bump?

Anyone got any suggestions?

2 more replies
Relevance 77.49%

I'm being attacked by hackers lately....twice in the last week on two different laptops.

My firewall program (Zone Alarm) notified me that an attemp to modify my registry and add two programs called <nexom.exe> and <princo.exe> I told ZA to block both changes but they were installed anyway and show up in my WINNT/system32 folder. shortly afterward Norton Antivirus started popup up numerous windows telling me it was scanning outgoing emails with titles that are obviously spam.

I cannot remove these two files ...or fix them ...with with NAV...or by using the cmd prompt and dos command "delete". Norton antivirus says it also cannot remove them. I WAS successful in renaming the files to <nexom.exo> and <princo.exo>

After re-booting .....and running HIJACKTHIS....here is my logfile.

Logfile of HijackThis v1.98.2
Scan saved at 2:25:31 PM, on 1/13/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\N... Read more

Answer:Help: Laptop Hijacked ---sending spam emails

Get the newest verion of HijackThis and post a new log
http://merijn.org/files/HijackThis.exe
 

1 more replies
Relevance 77.49%

Resolved. you can remove.

Answer:Virtumonde possibly sending out spam emails

Malwarebytes log:
Malwarebytes' Anti-Malware 1.34
Database version: 1890
Windows 5.1.2600 Service Pack 2

2009-03-24 00:54:24
mbam-log-2009-03-24 (00-54-24).txt

Scan type: Full Scan (C:\|)
Objects scanned: 581325
Time elapsed: 1 hour(s), 43 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 18

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Trend Micro\HijackThis\backups\backup-20090316-190407-525.dll (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\rei\PostRebootExecuter.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP307\A0122430.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP308\A0127523.0LL (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9... Read more

1 more replies
Relevance 77.49%

Hello, I hope you can help me!

I use Outlook 2007, and everyday it sends a lot of spam emails from my account that I cant see in sent emails folder or outbox. I noticed only with the mail delivery system messages when some of the target addresses are wrong.

THANKS!!!

Answer:Outlook 2007 sending spam emails

Hello, what is your operating system?Are you using a router?Change your Email password immediately.Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List Installed Programs List Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1 <<<== Use this one first.Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-Malwar... Read more

1 more replies
Relevance 77.49%

Hello All!So today I received an infection (which I thought I removed) but now I have my symantec endpoint protection popping up and stating the emails cant be sent because they are recognized as spam and etc. I cannot locate what is going on. Can someone PLEASE look at my log file? This is my work computer! Logfile of Trend Micro HijackThis v2.0.4Scan saved at 12:29:38 AM, on 7/27/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\windows\System32\smss.exeC:\windows\system32\winlogon.exeC:\windows\system32\services.exeC:\windows\system32\lsass.exeC:\windows\system32\Ati2evxx.exeC:\windows\system32\svchost.exeC:\windows\System32\svchost.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\Symantec AntiVirus\Smc.exeC:\windows\system32\Ati2evxx.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\windows\system32\spoolsv.exeC:\Program Files\ActivIdentity\ActivClient\accoca.exeC:\WINDOWS\system32\agrsmsvc.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\windows\System32\svchost.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exeC:\windows\Expl... Read more

Answer:Computer sending spam emails!! Malware is somewhere

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

2 more replies
Relevance 77.49%

Hi everyone - this seems the site where I may be able to get my problem fixed. My pc is connected to my husband's router but during the past few days, I seem to have attracted a malicious prog, virus, trojan, spyware or malware thingy, which is sending out emails at a rapid rate. I know this because my screen is covered with Norton Antivirus dialogue boxes saying scanning email and each one before it disaapears attracts another box saying it could not be sent because it was blocked by either our ISP or by our router's firewall. I have run all our antispyware tools and of course Norton Systemworks scanner (2005) which all reveal nothing untoward. I am not capable of resolving this any further and wonder if you guys could help a damsel in distress? I do not want to mention this to my husband or he will go up the wall saying such things as where the h**l have you been surfing for god's sake etc etc and so after doing some research, here I am.

I have followed everything in your Sticky and the following is the HijackThis log which I have run just now.

-------------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 16:14:44, on 15/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe... Read more

Answer:Malicious Program Sending Spam Emails From My PC !!!

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please submit the following file to Jotti File Scan

C:\WINDOWS\system32\logonui.dll

At the top of the window you should see "File to Upload & scan" and a blank box. Copy and paste the red text from above into the box. Then click "submit".

When it is finished, please copy and paste the information listed under "Service" and "Scanner Results" here.

---------------------------------------------------------------------------------------------

Download Ewido Anti-MalwareInstall Ewido Anti-Malware
When installing, under "Additional Options" uncheck..Install background guard
Install scan via context menu

Double-click the icon on Desktop to launch Ew... Read more

19 more replies
Relevance 77.49%

I've been reading posts on this site for quite a while. It's really helped me get rid of viruses on many computers.This one I am stumped on. I ran Malwarebytes Antimalware and it states that I have the Vundo virus on this computer.Here's the two files it found:C:\windows\system32\ci.dllC:\windows\system32\lc.iniIt tries to remove them, but they stick around after reboot.Thanks for your help.Deckard's System Scanner v20071014.68Run by Kmichaels on 2008-04-16 00:16:26Computer is in Normal Mode.---------------------------------------------------------------------------------- Last 5 Restore Point(s) --5: 2008-04-16 03:44:13 UTC - RP290 - Windows Update4: 2008-04-16 03:38:19 UTC - RP289 - Installed SUPERAntiSpyware Free Edition3: 2008-04-16 01:36:48 UTC - RP288 - Windows Update2: 2008-04-15 21:26:56 UTC - RP287 - ComboFix created restore point1: 2008-04-15 19:46:49 UTC - RP286 - Windows Vista Service Pack 1Backed up registry hives.Performed disk cleanup.-- HijackThis (run as Kmichaels.exe) -------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 00:18, on 2008-04-16Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\rdpclip.exeC:\Program Files\Hewlett-Packard\IAM\bin\asghost.exeC:\Windows\system32\Dwm.exeC:\window... Read more

Answer:Vista Pc With Vundo Sending Out Spam Emails

Hello AISJon and welcome to BleepingComputer,Let's do this step by step 1. * Clean your Cache and Cookies in IE:Close all instances of Outlook Express and Internet Explorer Go to Control Panel > Internet Options > General tabUnder Browsing History, click Delete. Click Delete Files, Delete cookies and Delete historyClick Close below.* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):Go to Tools > Options.Click Privacy in the menu..Click the Clear now button below.. A new window will popup what to clear.Select all and click the Clear button again.Click OK to close the Options window* Clean other Temporary files + Recycle bin Go to start > run and type: cleanmgr and click ok. Let it scan your system for files to remove. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.Press OK to remove them.2. Please download Malwarebytes' Anti-Malware from Here or HereDoubleclick mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.Wh... Read more

1 more replies
Relevance 77.49%

I intend to stop using my GMail account and would like to send details of the email account that I plan to use to all my GMail contacts. Is there a way to to this en bloc or would I need to contact each one separately?

Answer:gmail account contacts

Select "compose" in Gmail program and then click on "to" where you address the new email and click on "select all" right on the top of the box and then send a message to all!

2 more replies
Relevance 77.08%

Until two days ago I had no problems sending gmail via SMTP.gmail.com. Now I get an error message saying 'Your outgoing server does not support SSL-Secured connections." No changes were made to the email account settings. I have checked them : the ports are correct and the SSL box is ticked for both incoming and outgoing ports. I use Norton and MS and both do automatic updates from time to time. I wonder if some update is causing the difficulty? Any ideas about what could be blocking my outgoing messages would be appreciated.
 

More replies
Relevance 77.08%

Hi WV,

Had the same problem with my Yahoo account, which passed the ekantoy message on to my Yahoo contact list on December 1st, 2008.

Fortunately for me, my Yahoo contact list is very small as I use Yahoo mostly for receiving "forwarding" jokes that some friends insist on sending and also for registering for and receiving newsletter mailings. But even with my small contact list, it was embarrassing to have this happen through my mail!

I have spent some time today looking for more information on this, so far without much luck apart from your posting. There are other reference out there to an older outbreak of hackers getting mailbox passwords and exploiting the contact lists, but little else about this latest variant.

One positive note - my other email, the one used for my important correspondence, has not yet exhibited any bad behaviour. This makes me suspect that this worm/virus/trojan targets Yahoo and Hotmail. I hope I am correct.

I will watch this post in hope that someone else can shed light on this and identify the "ekantoy" mail.

More replies
Relevance 77.08%

I am new to the forum and I joined because my wife's yahoo account started sending spam to her contacts with a "Hello" subject and a website link in the body.
 
What can I do to fix that?
 
Tom

Answer:Yahoo email worm sending emails to contacts

Has she changed her password?

3 more replies
Relevance 76.67%

I have received multiple letters from my service provider that mass spam emails were being sent from my computer. I have since installed a new antivirus program, a firewall, and a couple anti-spyware programs, and the letters have stopped coming. However, I have a rootkit infection (yqxvbm.sys) in my system32/drivers folder that I cannot get rid of. I would greatly appreciate any help in getting rid of it and any other issues my computer might have. Thanks.DDS (Ver_10-03-17.01) - NTFSx86 Run by Jay at 22:56:10.25 on Sun 04/04/2010Internet Explorer: 8.0.6001.18904 BrowserJavaVersion: 1.6.0_19Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2038.1015 [GMT -4:00]SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\sy... Read more

Answer:rootkit infection, sending out spam emails from my computer

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

7 more replies
Relevance 76.67%

I can see the emails being sent out by outlook on my computer (computer accessing smtp and sending them when outlook is open... sending 1 of 1823). I cleaned the PST, created a new PST and copied my inbox into it. I did a malwarebytes scan, antirootkit scan, adw, found nothing at all.
 
I was receiving tons of chinese spam, blacklisted the domains from China, but I'm at a loss at how to make the stupid outlook stop sending spam by itself. How does it do it?
 
Edit: closed outlook, renamed pst, opened outlook, created new empty pst, it's still trying to send 1800 emails....
 
Edit2: Ok so I went to the webmail, there was still 1000+ mails there in chinese, deleted those, blocked 126.com/163.com/qq.com in the admin panel, then on the computer, I flushed the Outlook Files and recreated the PST.... in the admin panel, it shows 0 sent for today... which is good....
 
Why am I (seemingly) not detecting any infection if I (was) sending spam? I confirmed that the IP from which the emails were sent was the office's IP... and there's only two computers here and only one with this account... and I physically SAW outlook trying to send loads of emails... I also reset the password...

Answer:Outlook 2016 sending chinese spam emails

Someone may have your email password.. Change that first.MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP conf[igurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.TDSSKillerDownload TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.AdwCleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double click on AdwCleaner.exe to run th... Read more

1 more replies
Relevance 76.67%

I'd like to thank everyone in advance for taking your personal time to help others with their problems. Background:Windows 7 Pro 64-bitMy Outlook 2010 work account started receiving Mailer Daemon emails referencing failed delivery attempts of emails sent by me using subjects about purchasing prescription pills and such. Repair Attempts:Malwarebyte's Anti-Malware - Updated 2013-07-19 - No threatsCombo-Fix  - Log Attached <<Email addresses removed>>  Combo-Fix Log:ComboFix 13-07-18.04 - Peter Korovessis 07/19/2013  14:21:27.1.8 - x64 NETWORKMicrosoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.8149.6906 [GMT -5:00]Running from: c:\users\Peter Korovessis\Desktop\ComboFix.exeAV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point..(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))..c:\programdata\ntuser.datc:\users\Peter Korovessis\AppData\Local\Microsoft\Windows\Temporary Internet Files\plot.logc:\users\Peter Korovessis\AppData\Local\[email protected]!-7959f36f-4e05-444b-bb87-df5c94651114.tmpc:\users\Peter Korovessis\AppData\Local\[email protected]!-38487800-f922-4b03-ab4c-c4f9de6a3133.tmpc:\users\pkorovessis\AppData\Local\Microsoft\... Read more

Answer:Outlook sending spam emails, no threats from MABM

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/501606 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

15 more replies
Relevance 76.67%

Hi there, I have been at this for days now and cannot figure out what to do. I have run all the AVG version8, Spydoctor, Ad-Aware, Spybot, TrojanHunter etc etc, My System is sending spam emails and i dont know how to stop it. I have a wireless router and a second laptop wich my daughter uses for MSN, i have run these programmes on both machines.
please help as i am not sleeping. Too buisy trying to fix this bug..

Regard,s nig.




StartupList report, 05/07/2008, 17:57:17
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.16674)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\S... Read more

Answer:New here. System is sending vast amounts of spam emails.

I know you are all very busy people but i am in need of help?

1 more replies
Relevance 76.67%

I am running Windows 7, 64-bit version. I added my hotmail account to my Windows Live Mail. I noticed a delivery failure mail, then realized what was going on. Please advise. Thank you!

Answer:Hotmail sending spam emails to my contact list

Hello and welcome. What antivirus is runing here.?Let's get an NBAM scan. You should chenge your Hotmail password.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.Before you save it rename it to say zztoy.exe alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave ... Read more

3 more replies
Relevance 76.67%

I think my computer is infected with a virus that spam sends emails from my Hotmail account I've run norton/MBAM/superantispyware and Spybot search and destroy but they came up with nothing.

would appreciate any help anyone could give.

Answer:MSN/Hotmail virus, Auto sending spam emails

Ignore this, I got help in another part of the forums.

1 more replies
Relevance 76.67%

For a good couple of months now, my mother's Yahoo email account has been periodically sending spam emails to her entire address book. I told her she should change her password as it appeared that her password had been phished, but that didn't fix the problem. I've done several avast! scans, including a couple of boot-time scans, but they have all turned up clean. The emails are being sent about once a week, and contain a link to a web site claiming to sell Viagra and such.The DDS log for the computer is below, and Attach.txt is attached. GMER had some issues while running. It scanned for a good 20 minutes or so, but then the computer had a BSOD. After restarting, I tried to run GMER again, but Windows said that it had a problem that prevented it from running. I tried to run it a third time, but as soon as I pressed the Scan button, the computer bluescreened again. So Ark.txt is not attached.DDS (Ver_10-03-17.01) - NTFSx86 Run by kerry at 15:53:42.43 on Sat 06/19/2010Internet Explorer: 8.0.6001.18928 BrowserJavaVersion: 1.6.0_20Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.1013.197 [GMT -4:00]AV: avast! antivirus 4.8.1229 [VPS 081125-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: avast! antivirus 4.8.1229 [VPS 081125-0] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes =====... Read more

Answer:Computer is sending spam emails from a yahoo address

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 76.26%

My mum asked me today, why was I sending her spam mail and true enough, I checked my hotmail account and I've sent out 2 spam emails with links to a website.

In a panic I immediately changed my password and started virus scanning.
I have a paid NOD32 running on my machine, I also did a check with spybot and malwarebytes and all they found were some tracking cookies.
I also did a scan just before christmas with pandascan online scanner and that found nothing but cookies.

Now the only thing that's changed been then and christmas was me receiving a reconditioned Iphone 4, which has turned into a bit of a saga, the phone was sold by a reputable store chain, but when I tried to activate it on the 3 network, they told me the phone had been registered as "lost" so it had been blocked. I synced this phone up with my machine and itunes account before the truth came out.
Whether there's a connection I don't know.

I'm running windows 7 64-bit, but I did run gmer, most of the options were greyed out, but it didn't report anything suspicious.

I'm greatful for any help, I need to know how they got into my hotmail account

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24
Run by Darren at 21:07:18 on 2011-12-29
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.6135.2660 [GMT 0:00]
.
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivi... Read more

Answer:My hotmail account is sending out spam

BUMP, please

2 more replies