Computer Support Forum

Virus sending emails to my contacts on gmail

Question: Virus sending emails to my contacts on gmail

My gmail account has been compromised. Something is sending emails from my gmail account to my contacts. In the sent mail folder there are four emails I didn't write that were sent to my contacts. They included links and little else. My inbox was also full of returned mail items that said "Malier Delivery System - Permanent delivery failure". My logs are below. Thanks in advance!!!

DDS (Ver_2012-11-05.02) - NTFS_x86
Internet Explorer: 9.0.8112.16450 BrowserJavaVersion: 10.9.2
Run by pep at 15:10:18 on 2012-11-05
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2968.833 [GMT -8:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\ibmpmsvc.exe
C:\Program Files\SafeNet\HighAssurance RemoteLT\IPSecMon.exe
C:\Program Files\SafeNet\HighAssurance RemoteLT\IreIKE.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\GFI Software\GFIAgent\SBAMSvc.exe
C:\Program Files\GFI Software\GFIAgent\SBPIMSvc.exe
C:\Program Files\Photodex\ProShow Gold\ScsiAccess.exe
C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\Program Files\Lenovo\System Update\SUService.exe
C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskhost.exe
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\GFI Software\GFIAgent\SBAMTray.exe
C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
C:\Windows\System32\TpShocks.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe
C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\SafeNet\HighAssurance RemoteLT\SafeCfg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\SCHTASK.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\GFI Software\GFIAgent\SBAMUI.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files\UnHackMe\hackmon.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\pep\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\program files\windows defender\MpCmdRun.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/ig?hl=en
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [Adobe Acrobat Synchronizer] "c:\program files\adobe\acrobat 10.0\acrobat\AdobeCollabSync.exe"
uRun: [Google Update] "c:\users\pep\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [MobileDocuments] c:\program files\common files\apple\internet services\ubd.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SBAMTray] "c:\program files\gfi software\gfiagent\SBAMTray.exe"
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 10.0\acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 10.0\acrobat\Acrotray.exe"
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [TrackPointSrv] c:\program files\lenovo\trackpoint\tp4serv.exe
mRun: [TpShocks] TpShocks.exe
mRun: [picon] "c:\program files\common files\intel\privacy icon\PIconStartup.exe"
mRun: [PWMTRV] rundll32 c:\progra~1\thinkpad\utilit~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
mRun: [LENOVO.TPKNRRES] c:\program files\lenovo\communications utility\TPKNRRES.exe
mRun: [SmartAudio] c:\program files\conexant\saii\SAIICpl.exe /t
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\highas~1.lnk - c:\program files\safenet\highassurance remotelt\SafeCfg.exe
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Add to Evernote 4.0 - c:\program files\evernote\evernote\EvernoteIE.dll/204
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\thinkpad\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\thinkpad\bluetooth software\btsendto_ie.htm
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - c:\program files\evernote\evernote\EvernoteIE.dll/204
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\thinkpad\bluetooth software\btsendto_ie.htm
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} - hxxp://support.lenovo.com/Resources/Lenovo/AutoDetect/Lenovo_AutoDetect2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 216.228.160.5 216.228.160.6 216.228.160.7
TCP: Interfaces\{8125AF4C-F08F-4EC7-B6F6-8E0A8A641D53} : NameServer = 10.0.0.247,204.57.142.10
TCP: Interfaces\{FFDD2733-00CE-407A-995D-508BA04822AF} : DHCPNameServer = 216.228.160.5 216.228.160.6 216.228.160.7
TCP: Interfaces\{FFDD2733-00CE-407A-995D-508BA04822AF}\E6F62736C696666656 : DHCPNameServer = 75.75.75.75 75.75.76.76 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxdev.dll
SSODL: WebCheck - <orphaned>
Hosts: 10.0.0.247 pinest.psgsea.local
Hosts: 10.0.0.247 pinest
.
============= SERVICES / DRIVERS ===============
.
R0 DozeHDD;DozeHDD;c:\windows\system32\drivers\DOZEHDD.SYS [2012-6-5 25416]
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [2011-3-29 20592]
R1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\drivers\smiif32.sys [2012-6-5 13680]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2011-8-30 101624]
R1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [2012-2-1 78936]
R2 Crypto;Crypto;c:\windows\system32\drivers\Crypto.sys [2012-1-28 536635]
R2 IPSECDRV;SafeNet IPSec Plugin;c:\windows\system32\drivers\IpSecDrv.sys [2012-1-28 139832]
R2 sbapifs;sbapifs;c:\windows\system32\drivers\sbapifs.sys [2011-8-30 74104]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2012-6-5 45736]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2012-6-5 29472]
R3 DniVapCo;Deterministic Networks CoWAN Miniport (Virtual);c:\windows\system32\drivers\vapco.sys [2012-1-28 27408]
R3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y6232.sys [2012-6-5 223960]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-10-25 22856]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-11-5 40776]
R3 NETwNs32;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit;c:\windows\system32\drivers\NETwNs32.sys [2011-10-31 7522304]
R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [2012-6-5 24872]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [2009-12-3 625224]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
.
=============== Created Last 30 ================
.
2012-11-05 23:08:59 56200 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a426c3c5-8ee5-4f83-9c72-4fa0a48f8718}\offreg.dll
2012-11-05 22:46:52 39184 ----a-w- c:\windows\system32\Partizan.exe
2012-11-05 22:46:52 35816 ----a-w- c:\windows\system32\drivers\Partizan.sys
2012-11-05 22:46:43 12800 ----a-w- c:\windows\system32\drivers\UnHackMeDrv.sys
2012-11-05 22:03:33 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-11-02 15:40:20 6918632 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a426c3c5-8ee5-4f83-9c72-4fa0a48f8718}\mpengine.dll
2012-10-31 21:11:46 -------- d-----w- c:\program files\MSECache
2012-10-31 17:05:49 -------- d-----w- c:\program files\LinkedIn
2012-10-25 15:35:28 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-25 15:35:27 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-10-22 18:32:28 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-19 15:52:39 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-10-19 15:52:39 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-10-16 22:32:39 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2012-10-16 22:30:45 -------- d-----w- c:\program files\iPod
2012-10-16 22:30:42 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2012-10-16 22:30:42 -------- d-----w- c:\program files\iTunes
2012-10-11 21:36:35 -------- d-----w- c:\windows\pss
2012-10-09 22:51:36 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-10-09 22:51:28 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-09 22:51:28 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-10-09 22:51:28 103936 ----a-w- c:\windows\system32\cryptnet.dll
.
==================== Find3M ====================
.
2012-11-05 22:46:49 2 --shatr- c:\windows\winstart.bat
2012-10-22 18:31:59 821736 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-10-22 18:31:59 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-09 15:34:48 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-09 15:34:48 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-14 18:28:53 2048 ----a-w- c:\windows\system32\tzres.dll
2012-08-31 17:18:09 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-08-30 17:12:02 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-30 17:12:02 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-24 06:59:17 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 06:51:27 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 06:51:02 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 06:47:26 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 06:47:12 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 06:43:58 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-22 17:16:54 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 17:16:46 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 17:16:46 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 17:16:36 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 20:12:27 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-08-21 20:01:22 106928 ----a-w- c:\windows\system32\GEARAspi.dll
2012-08-20 17:40:31 169984 ----a-w- c:\windows\system32\winsrv.dll
2012-08-20 17:40:01 293376 ----a-w- c:\windows\system32\KernelBase.dll
2012-08-20 17:37:58 271360 ----a-w- c:\windows\system32\conhost.exe
2012-08-20 15:33:28 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-08-20 15:33:28 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-20 15:33:28 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-08-20 15:33:28 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-08-10 23:56:14 542208 ----a-w- c:\windows\system32\kerberos.dll
.
============= FINISH: 15:18:48.56 ===============

Relevance 100%
Preferred Solution: Virus sending emails to my contacts on gmail

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Virus sending emails to my contacts on gmail

Greetings pep7702 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary. If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance. Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me about it.
When you post your reply, do not use the button but use the button instead.
In the upper right hand corner of the topic you will see the button. Click on this then choose Immediate E-Mail notification and then Proceed and you will be sent an email once I have posted a response.If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.I would like to remind you to make no further changes to your computer unless I direct you to do so.Now let's get started ===================================================Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.Thank you for your patience thus far. Please allow me some time to review the information you have provided. I will post back as soon as possible.

16 more replies
Relevance 103.32%

My Gmail account started sending out spam from my email. I believe it's related to this Epsilon breach. I have changed my email password and deleted any suspicious emails. Is there anything else I need to do?
Thanks

Answer:Gmail account sending out spam emails to contacts

If you've changed your password and no further e-mails get sent out then you should be fine.

8 more replies
Relevance 93.89%

Hello everyone,

I am working on my mother in laws computer and it keeps sending emails (spam) to everyone in her address list. I ran the AVG rescue CD and it found no issues and just ran combofix, here is the log file
ComboFix 10-12-04.02 - Joe 12/05/2010 17:50:26.1.4 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3070.2330 [GMT -5:00]
Running from: c:\documents and settings\Joe\My Documents\Downloads\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Files Created from 2010-11-05 to 2010-12-05 )))))))))))))))))))))))))))))))
.

2010-11-30 23:48 . 2010-11-30 23:48 -------- d-----w- c:\documents and settings\Joe\Application Data\Uniblue
2010-11-30 23:48 . 2010-12-05 19:06 -------- dc-h--w- c:\documents and settings\All Users\Application Data\~0
2010-11-30 23:47 . 2010-11-30 23:47 -------- d-----w- c:\program files\Uniblue
2010-11-30 23:47 . 2010-11-30 23:47 -------- d-----w- c:\documents and settings\Joe\Local Settings\Application Data\PackageAware
2010-11-15 16:45 . 2010-11-15 16:45 -------- d-----w- c:\program files\iPod
2010-11-15 16:45 . 2010-11-15 16:46 -------- d-----w- c:\program files\iTunes
2010-11-12 15:38 . 2010-11-12 15:38 -------- d-----w- c:\program files\Common Files\Adobe
2010-11-06 16:37 . 2010-11-06 16:37... Read more

Answer:XP virus sending emails to all of my contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic and do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for postin... Read more

2 more replies
Relevance 92.66%

 Attach.txt   1.81KB
  1 downloadsI had some virus or trojan send emails to everybody on my hotmail contacts, with the text below:- Fresh life of shopping!i would like to introduce a good company who trades mainly in electornic products.Now the company is under sales promotion,all the products are sold nearly at its cost.They provide the best service to customers,they provide you with original products of good quality,and what is more,the price is a surprising happiness to you!It is realy a good chance for shopping.just grasp the opportunity,Now or never!The web address www.sxds#wz.comI put the # in just so nobody clicks that addy by accident, suspect it may not be healthy for your pc. DDS (Ver_09-02-01.01) - NTFSx86 Run by Skunkport at 22:27:27.90 on 20/02/2009Internet Explorer: 7.0.6000.16809Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.44.1033.18.2046.898 [GMT 0:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)AV: Tesco Internet Security *On-access scanning disabled* (Updated)FW: Platinum 2007 Personal Firewall *disabled*============== Running Processes ===============C:\Windows\SYSTEM32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\... Read more

Answer:Trojan/virus sending emails to my contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

2 more replies
Relevance 92.66%

Stop virus from sending e-mails to my contacts

Answer:Stop virus from sending emails to my contacts

change your password and probably make a new account as you never said if it is web-based or whateverSome HELP in posting on Computing.net plus free progs and instructions Cheers

2 more replies
Relevance 92.66%

I depirately need help! I have a HUGE Windows Outlook 2010 email contact list; and, hundreds of people are complaining about my computer sending emails such as:

"how are things going this method is almost guaranteed to work even my mom is doing it and she just got a computer a few months ago http://www.cnbc22.com/ get back to me"
Please find all the information necessary to identify the virus included in this forum post. I am posting ALL INFORMATION requested by this forum except for GMER since it have a 64bit OS.

--- Hijackthis.log ---
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:32:47 AM, on 4/30/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\SUA\usr\sbin\init
C:\Windows\SUA\usr\sbin\inetd
C:\Windows\SUA\usr\sbin\cron
C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files (x86)\Promixis\Girder\girder.exe
C:\Program Files (x86)\Posibolt Software\Clock-on-Tray\ClockOnTray.exe
C:\Program Files (x86)\Hot Keyboard Pro\HotKeyb.exe
C:\Program Files (x86)\eFax Messenger 4.4\J2GTray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\FirefoxPreloader\FirefoxPreloader.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\watchDirectory\w... Read more

Answer:Please HELP!! Virus keeps sending emails to Outlook Contacts

13 more replies
Relevance 84.87%

Hi, 
Will appreciate any help regarding this issue. 
My Gmail account is auto sending an email to all my gmail contacts without my knowledge until I saw reply posts of unsuccessful emails. Contents as such:
"Good Day.I just Uploaded a file,I would like you to view.Click Here to view. "
I too opened a similar email afew weeks back. Nothing seems wrong at first so I never really thought much about it.
Can someone help me on this? 
I have just changed my password for my Gmail. hopefully it stops the sending. but I want to know if my computer is infected or by using smartphones or tablets, will it affect the gadgets too? 
Thank you! 
 

Answer:Gmail auto sending to my contacts, and auto deleting a virus link

A SPAMmer does not need access to your Gmail account in order to use your email address.
 
They can use whatever SPAM-sending program they like to send out email using *-your-* email address in the Sender's field.
 
Then, if any of the email addresses they sent the email to happen to be invalid, the unsuccesful delivery messages would be returned to you simply because your email address was in the Sender's field.
 
In order to stop this, you would have to find the person using your email address and hang them by the neck until dead. ;)

1 more replies
Relevance 81.59%

A virus or something is sending a message to all my contacts in gtalk. the message includes a link which is a virus.

Answer:Sending mail to contacts on gmail

If you access your email and gtalk from the web (using web browser) and not Outlook, Outlook Express or Windows Live Mail; You need to change your Gmail password ASAP! That will resolve the issue.I would also download Malwarebytes from www.filehippo.com and do a full scan on your computer just in case.http://www.filehippo.com/download_m...

2 more replies
Relevance 81.59%

I have a problem where an automated mail is sent from a third party software (SPAM) that goes to all my contacts in my address book.

What should I do?

I want to stop this program from sending automated messages. This is from a website Desktop Dating. It keeps sending a message that Did you receive my Invite to all my contacts.

How do I ensure that these mails do not go out.

Answer:Gmail sending SPAM to all my contacts

Wish I knew-the same exact thing has happened to my hotmail account and has sent this "invite" to my contacts on my hotmail account! I am very angry about this and when I tried contacting all of my contacts to let them know not to open the email invite to desktop dating that was supposedly from me, microsoft sent me a message saying I exceeded my 300 email messages a day so my email account is now suspended for 24 hours!!That is ridiculous because as now 374 other contacts on my list will not get the warning message about not opening up the desktop dating invite and thus their contact lists will probably be hijacked too because I can't warn them in time about this bogus email message. Let me know if someone tells you what to do--wish we could sue all these jerks for the problems they have caused us by their scams.

1 more replies
Relevance 80.36%

I'm not sure if this is a malware issue or not, had no idea where to post it. A couple of my friends have sent me messages (not through email) letting me know they are getting spam from my email address. And sure enough, when I logged into my email I got a ton of "delivery to the following recepient failed" messages".

This has happened twice within the last week or so, I'm sure all of my contacts are getting pretty annoyed by now, but I have no idea how to stop it!

Help?
 

Answer:My gmail is sending spam to my contacts list

I'm pretty sure that you will be better off by getting down all your contacts info > create a fresh email account. But if you wish to check for malware then you can do the following:

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.


After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:


If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet c... Read more

3 more replies
Relevance 79.54%

Not sure how or what I have virus/malware but about a month ago my computer started sending emails out to my contacts with out me knowing it.
I stopped it from sending anymore by unplugging from my router.I then found your site and ran the steps for malware removal. Malwarebytes found a Trojan scar which it deleted. I keep running the scans for the next week nothing was found so I plugged back into the router all was good for several days then the emails started up again. I did not go on line other then to let the programs update. This was about a week ago. I have been running scans everyday and can find nothing but I know it is still there. Two days ago I plugged back in to the router and they started up again.
Not sure what else to try, hopefully you can help....
 

Answer:Sending emails out to contacts

Here is the zip file.
 

11 more replies
Relevance 79.54%

they are pretending to be me saying i have been mugged in britain and need them to send money. I cant get into my acct because they have changed my password.

Answer:someone is sending emails to my contacts

ok, so contact you e-mail clientSome HELP in posting on Computing.net plus free progs and instructions Cheers

2 more replies
Relevance 78.72%

Hello,

I recently discovered that I have been having a problem with my AOL mail. I believe it's just that email, although I also use Outlook Express and Gmail. I started by seeing several dozen bounced emails back in my inbox that I never sent out, then got a few notes from people who said they received sketchy emails from me.

In the past, I've received this type of email from other people before, usually containing a few words and a link to some kind of bogus website. I never click on the link, but I guess they caught up to me somehow.

I have McAfee and the software has not detected any problems. I also ran a scan with Malwarebytes and that did not detect any problems either.

Logs below as requested. Please note, I also attached an image screenshot for gmer, which did not allow me to check all of the requested fields as per your instructions. They were shaded out and could not be clicked. Thanks in advance for the help.
DDS (Ver_10-12-12.02) - NTFS_AMD64
Run by JME at 19:32:49.86 on Mon 01/31/2011
Internet Explorer: 9.0.7930.16406 BrowserJavaVersion: 1.6.0_23
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.8151.5995 [GMT -5:00]

AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80... Read more

Answer:Sending Unwanted Emails to All Contacts

Hello jme248Welcome to BleepingComputer ==========================I do not see any malware present in the logs.Please change the password for the account and let me know if it continues.

1 more replies
Relevance 78.72%

Hello all,

this is the second time this has happened to me in a short period of time and I am hoping that somebody can help me.

Something is sending emails to all my hotmail contacts. The email:

Hey friend,
How are you doing recently? I'd like to introduce you a very good foreign trading online company and the website is www.ui-mall.com
It can offer you so many kinds of electronic products which you may be in need,such as laptops, gps, TV, cell phones, ps, MP3/4, motorcycles even several kinds of musical instruments and etc..
You can take some time to have a check ,there must be something you are interested in and you 'd like to purchase .
The contacts:
XXXXXX
XXXXXX
Hoping you can enjoy your shopping from that company !
Regards

When I go to "Sent emails", I do see these emails there.

I am attaching some logs (followed the instructions). Hope i did everything correct.

Is this a virus??

Please help!!

Thanks in advance,
Marzena
 

Answer:Self-sending spam emails to contacts. HELP!

http://forums.majorgeeks.com/showthread.php?t=35407

I think you may have malware on your computer go to this link and follow the instruction to clean your computer
 

6 more replies
Relevance 78.72%

Can anyone please advise me if they are aware of a bug that currently effects hotmail.I'm having all contacts in my email list sent emails and this has now happened three times.

Answer:Hotmail sending emails to contacts

It sounds like you got a virus, check out these results from google search click here

2 more replies
Relevance 78.72%

Help, my hotmail account keeps sending ads to all my contacts regarding a work at home scam.

Answer:Hotmail keep sending emails to my contacts

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/14/2010 4:51:36 PM
System Uptime: 3/25/2011 3:46:18 PM (4 hours ago)
.
Motherboard: TOSHIBA | | Portable PC
Processor: Intel(R) Pentium(R) M processor 1.86GHz | uFC-PGA Socket | 1861/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 93 GiB total, 64 GiB free.
D: is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\8352943900
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\8352943900
Service: NIC1394
.
==== System Restore Points ===================
.
RP283: 12/26/2010 1:49:29 AM - Software Distribution Service 3.0
RP284: 12/27/2010 12:58:39 PM - Software Distribution Service 3.0
RP285: 12/29/2010 12:46:56 AM - System Checkpoint
RP286: 12/29/2010 12:51:25 AM - Software Distribution Service 3.0
RP287: 12/30/2010 12:55:11 AM - System Checkpoint
RP288: 12/30/2010 2:08:32 AM - Software Distribution Service 3.0
RP289: 12/31/2010 10:45:33 AM - Software Distribution Service 3.0
RP290: 1/1/2011 11:43:10 AM - System Checkpoint
RP291: 1/2/2011 12:50:52 AM - Software Distribution Service 3.0
RP292: 1/3/2011 1:43:14 AM - System Checkpoint
RP293: 1/3/2011 4:35:40 AM - Software Distribution Service 3... Read more

3 more replies
Relevance 78.72%

My hotmail account started sending random emails that contain some kind of malware. They went out to every person in my contact list. The emails have no subject and contain a single link such as: http://maryIndrenth8516.t35.com. When the person opens the link, they get infected as well and start sending emails to all their contacts. Each email has a different link, but is structured the same. I'm not sure what other damage the malware is doing, but I am worried about what kind of access it is getting to my personal files and what type of communications it is making.
 

Answer:Sending infected emails to all my contacts

Additional log for infected email problem

Here is the MGLogs zip. Thanks.
 

2 more replies
Relevance 78.72%

My grandmother has a compaq running Windows ME (yes I know it stinks). It has Outlook Express version 6. She has comcast email and internet.

I have scanned it with Adaware, Spybot S&D, as well as Norton AV with updated definitions and the system is fairly clean.

From time to time when she tries to send an email to single contact, multiple people in her address book will recieve the same email.

There are a couple of things that might be a clue to the problem. About a year ago, I backed up her address book and emails and reformated then imported the account details using the process found here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q270670

The other thing I noticed, she has some contacts that are invalid. An example would be
[email protected]
Comcast mail server returns an error to outlook if this name is in the recipient list.

Any thoughts?

Thanks.
 

Answer:OE sending emails to multiple contacts

anyone?
 

2 more replies
Relevance 78.72%

Hi. I'm at something of a wit's end. I've had a situation for a bout a week where my Hotmail account has sent multiple emails to various members of my contacts list without my permission. I have changed my password on multiple occasions and am fairly confident that the problem is not one of my account being compromised in the traditional fashion.

I have run multiple Spyware/Malware removal tools to no avail and have Microsoft Security Essentials installed with definitions up-to-date.

Any help would be hugely appreciated.
Dean

Answer:Hotmail sending emails to contacts

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/455395 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 77.9%

.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 8.0.7600.16385
Run by Alyx at 18:06:45 on 2011-07-20
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3767.1520 [GMT -7:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\... Read more

Answer:computer sending out emails (gmail)

Hi alyxthegreat, and welcome to Bleeping Computer.Firstly,Please launch Malwarebytes' Anti-Malware, click the Update tab, and then Check for Updates. Then choose the Scanner tab and select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Secondly,Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.

2 more replies
Relevance 77.9%

I've set up my Gmail account for reading emails via IMAP and sending emails all with Mozilla's Thunderbird. I followed Google's directions on how to setup the client to work with Thunderbird. It reads the emails correctly but when I send emails I get:
"An error occured while sending mail. The mail server responded: INCORRECT DOMAIN IN MAIL/RCPT COMMAND. Please verify that your email address is correct in your Mail preferences and try again."

As it suggests I check the outgoing mail setting and try again with the same results.

Has anyone else run into this issue and how did you resolve it?
 

Answer:Thunderbird and Gmail, sending emails

Not sure. I remember setting my GMail up for pop, but not IMAP. I would post something over on the Mozilla support forums - more people read that and could help.
 

3 more replies
Relevance 77.9%

Hey tech guys,
I want to send emails to long list of recipients by Gmail, each of them will be shown and receive the email as [To his email address], would like to ask if there is any idea or suggestion about this?
Thanks,
 

More replies
Relevance 77.9%

I replied to a spam email from a friend telling him he was infected. The subject was something like "Rocky, this is the best financial decision I ever made". I thought I was safe to do this because I use McAfee Security Center, Malwarebyte's Anti-Malware and Ad-Aware and a firewall. My PC is now sending out similar emails, to everyone in my contacts, stating things like "I have a way to reach financial security" and "best career decision I ever made" in the subject line. I believe 3 have sent since Tues. or Wed. None of my antivirus/ malware software can detect/remove it. I performed a "restore" to March 12, before the infection, to no avail. Sorry I cannot give you more info regarding the infection. Any help you can offer is greatly appreciated and I thank you and the other volunteers for this invaluable resource and most of all their time. Sincerely, Rocky.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Rocky at 15:29:19.01 on Sun 03/27/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.334 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\sy... Read more

Answer:Unidentified infection sending emails to contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

16 more replies
Relevance 77.9%

Hi,
Just noticed today that my email address is being used ot send mail to my address book. Im receiving tons of return mail from aol becasue of this. I tried changing my aol password and runnnig superantispyware which found 217 infections wehich I cleared. The problem is still there. I dont know if this is a hijack problem so I ran hijack this, here is the report. What can I do to resolve this issue. Thanks.
windows 7
sony vaio
using google chrome
250 GB hard drive
3GB memory
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:20:42 PM, on 9/29/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
C:\Program Fil... Read more

More replies
Relevance 77.9%

Recently, a few of my Contacts have responded to emails sent from my computer saying that they are unable to open the attchment I have sent to them. I did not knowingly send them anything. How can I make this stop. I don't want to infect others with this problem.

I have run a DDS and GMER scan of the computer as suggested and the results are included below.

DFWood
.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by David Wood at 4:57:43 on 2011-05-20
Microsoft? Windows Vista? Ultimate 6.0.6002.2.1252.1.1033.18.2045.1060 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k ... Read more

Answer:Computer is sending unauthorized emails to my contacts

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

15 more replies
Relevance 77.9%

Hi,

I logged on to my work email this morning to discover I'd been sent an email from my girlfriends hotmail account. The email had been sent to me and everyone else in her hotmail contacts and all it contained was a brief statement that requested people to visit a website (which was blank). The thing is, the email was sent when I know for a fact my girlfriend wasn't logged onto hotmail and she certainly never sent it or knows anything about it. Does anyone know why this has happened? Or has anyone else come accross this? She only ever accesses her hotmail account at home and no-one else could have used that computer.

Many thanks for any advice!
 

Answer:Hotmail sending hoax emails to all contacts - Can anyone help?

What is most likely to have happened is that her email address has been "harvested" from an infected computer on which the address was stored (from an incoming email). Or from any public forum or webpage where it may have been posted.

The harvested email has been used by a spammer or virus writer as a "spoofed" :From address, which only looks as if it came from her.

If the email website link was blank, it may have been an error by the perpetrator or the website may have actually contained some nasty script that you have protection against the vulnerability that it was trying to exploit.

There are a large number of permutation on the theme.
 

2 more replies
Relevance 77.08%

Until two days ago I had no problems sending gmail via SMTP.gmail.com. Now I get an error message saying 'Your outgoing server does not support SSL-Secured connections." No changes were made to the email account settings. I have checked them : the ports are correct and the SSL box is ticked for both incoming and outgoing ports. I use Norton and MS and both do automatic updates from time to time. I wonder if some update is causing the difficulty? Any ideas about what could be blocking my outgoing messages would be appreciated.
 

More replies
Relevance 77.08%

I am new to the forum and I joined because my wife's yahoo account started sending spam to her contacts with a "Hello" subject and a website link in the body.
 
What can I do to fix that?
 
Tom

Answer:Yahoo email worm sending emails to contacts

Has she changed her password?

3 more replies
Relevance 76.26%

Someone has stolen my contacts list in my Email program, which is microsoft mail and is sending out bogus emails. They indicate that they are being sent by me. These appear to be spam messages for making fast money. Anyone know how I can block this and what is it?
 

Answer:Hacker has stolen my contacts list and sending out bogus emails

Email Spoofing

Email Spoofing

How do Spammers Harvest Email Addresses

Seems Like You Volunteered to Receive Spam?

You can't do much about it, at least not with the actual account. These links are to give you all the facts about email spoofing and how it is achieved, along with advice on how to avoid it, or at least limit it.
 

1 more replies
Relevance 74.62%

As I have a couple of Gmail accounts, I use Outlook 2010 (running under Windows 7) to consolidate them together and use it for reading, sending and archiving all my emails.
Until recently I have been able to manage my emails without problem, but within the past few weeks I have run into problems sending emails using Outlook for my Gmail accounts. Messages are stored in my Outbook but will not send. This does not happen all of the time, only intermittently, and even if I press the send/receive button, or reboot Outlook 2010, the messages remain in the outbox.
The only way I have managed to send them is to reboot my PC and then restart Outlook - then the messages send automatically as they normally should do and the outbox is cleared. However after a while, and not on every Outlook session, the messages do not send from Outlook unless I reboot my PC again.
I have checked my email settings and as far as I can tell they are OK (as they normally work):
Incoming mail server: pop.gmail.com and port 995
Outgoing mail server: smtp.gmail.com and port 465
and outgoing server set to require authentication.
I get no error messages - the emails just remain in the outbox until I reboot the PC.
Can anybody advise how I can resolve this issue?
Many thanks for your help.

Answer:Windows 7/Outlook 2010 - Intermittent problem sending GMail emails

Does your antivirus software scan emails? If so try disabling that part of the software.

4 more replies
Relevance 68.88%

For the past couple of weeks, I have noticed that an unknown virus has been sending unauthorized e-mails from my account to my yahoo contacts list with subjects titles such as "Amazing! You will feel something new and unforgettable!" or "no subject" or just the number "1" or "9". The body of the e-mails will have something to the effect of "...Do you want to have funny time tonight? So, this is especially for you! http://www.liscen.com/friends.page.php?ulyahooID=83up8".

If anyone can help with removing this I would greatly appreciate it.

D. Santoro

Answer:Virus sending e-mails to my yahoo contacts

One important question...
Do you actually see those messages in "Sent" folder, or you know it because your friends told you?

7 more replies
Relevance 68.88%

Hi there,

Ried from here recently resolved a case of WindowsRestore virus on my PC. You can see the thread here:

Windows Restore Virus- Any Advice Thanks?

However last night my hotmail account was hacked and a virus email was sent to all my contacts (without my knowing ofcourse). I have since changed my password.

Is this coincidence or are having the windows restore virus and having my account hacked connected? Ried did a great job cleaning my machine but could there have been something left over? Involving a keylogger maybe?

Thanks.

More replies
Relevance 68.88%

Hello, I'm on an LG laptop VISTA business 32, IE7, FF, 1,8 Ghz, RAM 2046.

I was so stupid to click on the link from a friend of mine. Now a link is forwarded to one of my contacts on my MSN messenger. It is not forwarded to all my contacts, only one of them as far as I know. He keeps getting this over and over again.

I have uninstalled my MSN live messenger. My friend took in this screenshot:
I am using Trend micro PC-cillin antivirus and firewall and has not picked up anything.

I appreciate any help!
Kind regards
Askeladden
 

Answer:My MSN Messenger sending virus link to my contacts

I'm so sorry I didn't think of adding my hijackthis log in the first post. And now I was reluctant to make a reply!

It has gone two days without any reply, but I know you guys have a lot to do in my problem doesn't look as urgent as some of the other problems. Anyway here is my log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:40:59, on 02.05.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\RtHDVCpl.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Program Files\LG Software\On Screen Display\HotKey.exe
C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
C:\Program Files\lg_swupdate\GiljabiStart.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe
C:\Windows\System32\LGDMEBTN.exe
C:\Windows\System32\kmw_run.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\LG Software\LG Magnifier\Maglev.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarN... Read more

2 more replies
Relevance 68.88%

My mother's gmail account seems to have contracted a virus that sends an email with the subject line '+hi+' to everyone in the contacts book and with the url 'http://sites.google.com/site/s3895yhf56eydya/aovq7a' in the message body. The site appears to be Canadian and is selling vyagra.

I don't think it's likely to have done any harm to the computer itself, and we noticed the problem when she received several failed message emails. The machine we noticed the problem was a mac so I guess that makes it even less likely the virus is affecting the actual computer but obviously it's not great for my Mum to be sending everyone she knows links to vyagra sites and also I don't know if the emails themselves contain the virus and would infect the recipients.

Is it possible to disinfect the account or does one just have to start over with a new one. That would be hugely inconvenient given how long my mother has used this account.

Answer:Email virus sending spam to contacts

Hi,

Gmail account password and secret question has to be changed. Also, check email filters (in Gmail settings) that there're no unfamiliar ones set.

2 more replies
Relevance 68.06%

Hi, I have a virus when I keep sending my contacts a website. It also makes my internet slow, and gets disconnected sometimes. Could anyone please tell me how I can get rid of it?This is the website with the virus on://www44.emoprofile.net/emo.php?msn=asnozz at hotmail.com//Mod edit to sanitize the URL above

Answer:I Have A Virus When I Keep Sending My Contacts A Website, But I Don't Know The Name Of The Virus

Install Super Antispyware. Run it in safe mode.http://www.superantispyware.com/Run an online scan with Bit Defenderhttp://www.bitdefender.com/scan8/ie.htmlAllow both programs to quarantine or remove whatever they find.Post a Hijack This log in the appropriate forum by following the instructions in the link below.http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

1 more replies
Relevance 68.06%

Hello,
Thank you so much for your help. Recently alot of my email contacts have written to me saying that they got an email from me with no subject attached, just Re: . Some of their computers have alerted them that the email was suspicious and not to open it. Other people DID open it and there were Viagra ads or animated russian websites, etc...I've gotten alot of notifications in my spam box with the title: [email protected]....failure notice. If I click on it, it usually shows the email contacts that messages tried to be sent to and the website that was trying to be sent....usually all different.
We have ESET NOD32 Antivirus 4.0.467.0...we've run two separate scans and no virus or threats are detected.
Just this evening, about 30 emails were sent out between 6:33 and 6:34 pm.....!
I appreciated any help you can give me!
Thank you.
 

More replies
Relevance 68.06%

I've been having a problem recently with spam messages being sent from my Gmail account to all my contacts. I've narrowed it down to 2 computers I use, my work and personal laptop.I'll start with my work PC (and later followup with my personal). I've run Malwarebytes Anti-Malware and TrendMicro's Housecall Scan and it found nothing. I'll attach the HijackThis log.Any sagely advice? PS. I searched the forum and found 2 others with my problem, but no solution or replies were given.

Answer:Malware/Virus emailing all my Gmail Contacts spam

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

2 more replies
Relevance 67.65%

Hello,

I am recently having a problem with some kind of virus that is using my contacts email addresses and sending me random emails. Could someone please help me scan to see if there is something wrong with my computer. Thank you very much for your time.

William

More replies
Relevance 67.24%

In the last 2 weeks a couple emails have been sent out by my Yahoo email address to my entire contact lists containing different links which are probably viruses or some other harmful info. These do seem to be coming from my computer as the messages are not showing up in my sent folder. However, I am trying to make sure it is not something on my end.

My OS is Vista home and I mostly use Firefox 3.0 for browsing. I also run AVG 1 time a week and it has picked up 2 potential trojans in the last 2 weeks.

Thanks in advance for any help!

Here is the DDS info:

DDS (Ver_09-02-01.01) - NTFSx86
Run by Mike at 9:47:55.35 on Sat 03/07/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_12
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2046.835 [GMT -6:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:&#... Read more

Answer:Yahoo email account is sending out virus links to my contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

2 more replies
Relevance 66.83%

Hi all,

I'm having some problems with malware on my Toshiba laptop (with Windows Vista).

On Monday morning, the contacts in one of my hotmail email addresses let me know that they recieved emails from me that I had not sent. The subject was "don't miss this!" and the content contained a URL address (stikkso.com). The emails are still present in my sent folder, although I never sent them myself.

My computer has been acting quite slow lately, with around 40-50% CPU usage but with no particular program showing to be using it. It was particularly slow on start up (with around 90% CPU usage) and AVG (my antivirus) appeared to be constantly using a lot of the CPU at start up. So I uninstalled AVG last weekend (it was also taking over 6 hours to do a scan which was unusual).

There was maybe a day between uninstalling AVG and installing Avast! (antivirus that I'm trying out instead). Could this have been enough to let the virus in? I am very careful with my emails and never click on any links or emails that are suspcious. I can't imagine where I got the virus from, if this is indeed what's causing my email to send out unauthorised emails.

I scanned my computer with Avast! with nothing detected. I also tried to scan with Ad-Aware but it kept telling me that it was being used by another user (which isn't true to my knowledge) and that there was no definition file.

I then went through your "READ & RUN ME FIRST&... Read more

Answer:Virus sending out emails

Here is the log file from MGtools. I hope this is the right file.
 

2 more replies
Relevance 66.83%

While browsing the web, I contracted some sort of bug in which my Symantic Antivirus shows that it is scanning outgoing emails that I am not sending. If I turn off the scan email function it stops and it doesn't seem to do anything if I turn my internet off. But when I turn the email scan off, my computer is still running slow and picks up trojans easily. My Symantic only tells me about the emails being sent, but a scan of my computer shows nothing.I have run combofix and maleware bytes yet my computer still does this. Only while I am on safemode will it not send those messages.Once earlier my symantic said it picked up a atapi.sys vir but that has been since removed.Could this still be causing a problem? Or is there a hidden virus I need to manually removed?KevinEdit: Moved topic from XP to the more appropriate forum. ~ Animal

Answer:Virus sending emails

Maybe fully update the Malwarebytes program, reboot the computer and run a Malwarebytes scan and see if it gives any pointers for the problem and go from there ?

2 more replies
Relevance 66.83%

Also, My PC Crashed with the blue screen sayin MEMORY DUMP, etc, that happended 3 times so far, I just deleted some Spysheriff.exe spyware.Here's My Hi-Jack Log: (By THe Way, Thanks In Advance)Logfile of HijackThis v1.99.1Scan saved at 17:18:52, on 07/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exeC:\Program Files\Ezurio\Bluetooth Software\bin\btwdins.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exeC:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exeC... Read more

Answer:My Pc Keeps Sending Out Emails, Virus?

Download the trial version of Ewido Security Suite http://www.ewido.net/en/download/ (W2K/XP Only)? Install ewido.? During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".? Launch ewido? It will prompt you to update click the OK button and it will go to the main screen? On the left side of the main screen click update? Click on Start and let it update.? DO NOT run a scan yet. You will do that later in safe mode.Restart your computer into safe mode now. Perform the following steps in safe mode:(Start tapping F8 at the first black screen after power up)Run Ewido:? Click on scanner? Click Complete System Scan and the scan will begin.? During the scan it will prompt you to clean files, click OK? When the scan is finished, look at the bottom of the screen and click the Save report button.? Save the report to your C: DriveThis will take some time to run!Boot to normal modePost that log and a new HiJack log

1 more replies
Relevance 66.83%

I have something sending out emails on a newly setup computer that hasn't even been used for email yet.

Removed a couple of virus with norton but could someone have a look?

thanks!!
Logfile of HijackThis v1.99.1
Scan saved at 7:31:12 PM, on 12/9/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINNT\system32\Brmfrmps.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINNT\system32\regsvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Symantec\ACT\SideACT.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Webroot\S... Read more

Answer:Virus sending out emails

Run ActiveScan online virus scan:
http://www.pandasoftware.com/products/activescan.htm

Once you are on the Panda site click the Scan your PC button.
A new window will open...click the Check Now button.
Enter your Country.
Enter your State/Province.
Enter your e-mail address and click send.
Select either Home User or Company.
Click the big Scan Now button.
If it wants to install an ActiveX component allow it.
It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
When download is complete, click on My Computer to start the scan.
When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.
Post the contents of the ActiveScan report.
 

1 more replies
Relevance 66.83%

Hi expert,

My ISP suspends my internet connection if I don't fix the virus email spreading problem. Please take a look at this log. Thanks for any help.


Logfile of HijackThis v1.99.1
Scan saved at 12:15:26 AM, on 3/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\ScsiAccess.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Q2\Fahid.exe
C:\Program Files\C... Read more

Answer:Virus keeps sending emails out

Hello and welcome to TSF

I reccommend you Subscribe to this thread so you are notified of any replies via email. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

Viewing Hidden Files
Go to My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option.

Downloads(make sure to save these in a permanent location)
Cleanup! (Alternate Link)- Install it. You will use this later.

*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does not make backups.

Open Cleanup! by double-clicking the icon on your desktop (or from Start > All Programs). Set the program up as follows:

Click Options
Move the slider button down to Custom CleanUp!

Check the following:Empty Recycle Bins
Delete Cookies
Delete Prefetch files
Cleanup! All Users
Uncheck the following :Scan local drives for temporary files

Click OK, Press the CleanUp! button to start the program.If prompted to reboot, click YES.

Online Scans
Please submit the following files to Jotti File Scan one at a time:
C:\Q2\Fahid.exe
C:\Q2\quick2.exe

This will produce a report after the scan is complete, please copy and... Read more

16 more replies
Relevance 66.83%

Hello,Yesterday an email was sent from my email address to all contacts in my address book. I didn't send this. It was sent one time only, and each email contained just a URL link, but different people reported receiving a different link.I think it was sent from my local email client rather than web mail, because I don't have the complete address book in webmail.I use Kaspersky Internet Security 2011. After this happened, I ran a virus scan: no viruses found. I also ran Trend Micro's online scan: again, no viruses found. I also ran Panda's online scan, and it found a couple of inactive items. That path showed that these were located in my email data files (Thunderbird files) . These must have been executables that were sent to me through email that I didn't open, but deleted or that Kaspersky deleted automatically. I know that I didn't open these files; I am very careful about email and never open anything that I am not 100% sure what it is. Below is the entry in the Panda report (including the path) for one of these. Could this be what caused the email?03682905 Generic Malware Virus/Trojan Active: No Severity: 0 Disinfectable: Yes No c:\documents and settings\user1\application data\thunderbird\profiles\ubkr56y7.default\mail\local folders\inbox[tube.zip][videotube.com.avi.exe]Thanks,Mike

Answer:Emails sent to all contacts; no virus found

email address book hijacked by spammershttp://www.google.com.au/#hl=en&cp=...http://answers.microsoft.com/en-us/...http://www.techrepublic.com/blog/he...

2 more replies
Relevance 66.01%

I have had a problem recently with numerous spam emails being sent from my mailbox similar to this:
 
Hello!
 
New message, please read hxxp://www.sdfholistic.com/black.php[/url]
 
I have checked with my ISP and it appears that this is not a case of spoofing, but these emails are actually being sent from this mailbox, which leads us to the conclusion that this is a virus infection. All the usual checks by Antivirus software has revealed no infection, but we had another episode of mass mailing yesterday.
 
FRST log is as follows and additional.txt is attached
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015
Ran by Mike (administrator) on MIKELAPTOP (21-10-2015 08:41:48)
Running from C:\Users\Mike\Desktop
Loaded Profiles: Mike (Available Profiles: Mike & mikeadmin)
Platform: Windows 10 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
(Red Bend Ltd.) C:\Progr... Read more

Answer:Virus sending out spam emails

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1830723692-352577568-1597100134-1001\...\Run: [AdobeBridge] => [X]
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggXcg9bBQtGRRgVJlgNTA1GRQcOIgsMURQXEQIWJltZAAoSQFQFIk0FA1ADB0VXfVBdFElXTwhuIVdBM1wCVFlXM3FNAw==
HKU\S-1-5-21-1830723692-352577568-1597100134-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggXcg9bBQtGRRgVJlgNTA1GRQcOIgsMURQXEQIWJltZAAoSQFQFIk0FA1ADB0VXfVBdFElXTwhuIVdBM1wCVFlXM3FNAw==
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQ0KV1oVEwJHbQ9eAAxcFQJHchRaUw1BDFMTdwxeA1gQElZCIR9aFQQTSEcFME0FCFwEURNNfXRZD0AjREZWLE1LKUwT&q={searchTerms}
... Read more

6 more replies
Relevance 66.01%

Hey.

I've got this annoying virus. Everytime I connect to the internet, my anti virus program (Symantec Antivirus) blocks tons of email, which are being sent from my computer. A lot of popups comes up, one of them sounds like this:
Your email message to [email protected], with the subject of: You can be the babe bedding champion. was unable to be sent because the connection to your mail server was interrupted. Please open your email client and re-send the message from sent message folder.

There are a lot of these messages that comes up. when they do i instantly unconnect from the internet. I don't know any of the email adresses and i never sent messages like this, so it is not mine.

This all started after I got antimalware doctor, which I removed with the help of a article here, and it seems to have disappered. But this email sending virus I can't get rid off. I have run several full scans with both Malwarebytes Anti-Malware and Symantec Antivirus and they show no viruses.

What do I do?? Sorry for any writingerrors as english is not main first language

Hope to get a quick reply

More replies
Relevance 66.01%

need some help please???my hotmail account has started to send out spam mail??

More replies
Relevance 66.01%

My case is very much like
http://icrontic.com/forum/showthread.php?t=50076

I did try everything mentioned here

The final solution to this was Running SDFIX
the log is as follows

SDFix: Version 1.240
Run by varun malhotra on Thu 03/12/2009 at 04:45 PM

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\Documents and Settings\varun malhotra\My Documents\Downloads\SDFix\SDFix

Checking Services :

Name :
FCI

Path :
C:\WINDOWS\system32\svchost.exe:ext.exe

FCI - Deleted

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

Checking Files :

Trojan Files Found:

C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp12.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp19.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp54.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp5A.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp7.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp8.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmp9.tmp - Deleted
C:\DOCUME~1\VARUNM~1\LOCALS~1\Temp\tmpE.tmp - Deleted
C:\WINDOWS\Temp\temp.dat - Deleted

Removing Temp Files

ADS Check :


Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-12 16:48:41
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

disk error: C:\WINDOWS\system32\config\system, 0
scanning hidden registry entries ...

disk error: C:\WINDOW... Read more

Answer:Virus sending mass emails.

Welcome to Major Geeks!

You should not be trying to delete files on your own. C:\WINDOWS\system32\KGyGaAvL.sys is not a problem. It is for DivX.


Please follow the instructions in the READ & RUN ME FIRST link given futher down and attach the requested logs when you finish these instructions.

If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First.
TDSSserv Non-Plug & Play Driver Disable

If something does not run, write down the info to explain to us later but keep on going.
Do not assume that because one step does not work that they all will not.
READ & RUN ME FIRST. Malware Removal Guide

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD.... Read more

1 more replies
Relevance 66.01%

I ran a virus scan on my computer, zero viruses. I ran hijack this and here are the results. What should I do next?edited by moderator: remove un-requested log

Answer:hotmail virus sending out emails from me

hotmail virus sending out emails from mehttp://moourl.com/7x0vw

2 more replies
Relevance 66.01%

 hijackthis.log   9.51KB
  18 downloadsI seem to have a serious virus infection in windows XP PC. It is sending out hundreds of emails without my knowledge. Symantec antivirus is giving continuous message regarding this. I have run many antivirus and malware programs, but everything comes out as fine. Temporarily I have installed a software firewall and stopped SMTP traffic and it has blocked the traffic, but I know the virus is still there. I have run hijackthis and the log is attached. Please help.

Answer:Virus sending out unwanted emails

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand cor... Read more

2 more replies
Relevance 66.01%

Hi there,

I believe there is a virus sending emails through my AOL account. I noticed for the last 5 days, there have been ~10 emails sent a day to random people in my contact list with a webaddress to random google sites. I have run multiple virus scans including McAfee, Norton, and Housecall and have found nothing on my system. I haven't noticed any weird processes running either. I can change my password; however, it seems the person who has gotten into my account has changed my secret question as to gain access when needed. I am in the middle of sorting that out with Aol. I do have a hijackthis log; however, I do not see anything in it that shouldn't be there.

Thanks!

Steve

More replies
Relevance 66.01%

When I checked my inbox today it told me that I had 31 new messages. This is very unusual! I looked and they are all postmaster delivery failures. I also got an email from my sister, saying that apparently emails are being sent from my address, that I did not send!Can this be a virus? I use hotmail, so it is internet based. I changed the password, but I'm afraid it might not be enough?I hope someone can help me!TIA 

Answer:My computer is sending out emails! Virus?

start reading and following the instructions from this post herethen a malware specialist can help you faster with your issues.

14 more replies
Relevance 66.01%

Hi,

I use Outlook and for some reason my email sends messages to all those on my address book regarding some wierd sites. I followed this forum and ran spybots and cws shreader and then ran hijack this appending my log please check if something needs to be fixed:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:03:24 PM, on 7/18/2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16764)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Users\Puneet\AppData\Roaming\Google\Google Talk\googletalk.exe
C:\Program Files\DAP\DAP.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Common Files\Roxio... Read more

Answer:Virus sending emails automatically

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 66.01%

currently i am using yahoo for my emails and home page.my friends are telling me they are receiving suspect emails from me but i not sending them at the times they have said.i did a full system check with my Avast-Antivirus and it came up that there had been one folder with a virus but that it had cleaned it up?any ideas on how i can stop these emails going out?thanks for any help.
i am running windows 7.
 

Answer:Solved: virus sending emails

it is unlikely that it is due to anything on your computer
Yahoo was recently hacked & thousands, if not millions of users had their email accounts hacked and sent spam.
All you can do is log into Yahoo email & change password & hope that Yahoo eventually fix the problem that they are denying even exists

but to be double safe, you might want to start a new topic in Malware cleaning & follow advice here and post the logs those programs make
 

3 more replies
Relevance 66.01%

hi,

my hotmail is sending messages

Answer:hotmail virus sending emails

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the ... Read more

2 more replies
Relevance 66.01%

My computer is sending out emails to random people on my contact list. When they try to open the email it will not let them. I am afraid that this is a virus. What can I do to fix this problem?

Answer:computer sending out virus emails

Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can. If you have performed any of the scans below post the logs for those scans, and then perform the ones you have not done.Please download and run Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.Malwarebytes Anti-MalwareNOTEMalwarebytes is now offering a free trial of their program, if you want to accept it you will need to enter some billing information, so that at the end of the trial you would be charged the cost of the product. Please decline this offer, if you are unable to provide billing information. If you want to try it out, then provide the billing information.Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screensho... Read more

2 more replies
Relevance 66.01%

Started having re-direct virus about a month ago, kept trying to use spy-bot and trend micro to rid myself of it without success. Today, my computer started emailing everyone in my contact list thru hotmail! Must find a way to get rid of it now! I am afraid to open my email on this computer.

Thanks in advance for everything!

Jacob

Here is the DDS:
DDS (Ver_10-12-12.02) - NTFS_AMD64
Run by Jacob at 16:06:37.86 on Sat 01/08/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4057.2630 [GMT -6:00]

AV: Trend Micro Titanium *Enabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Titanium *Enabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e19b3ab5cd326817\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows ... Read more

Answer:redirect virus and now sending out emails too!

reformatted HD and changed email password....looks like everything is fine now

2 more replies
Relevance 66.01%

Hello everyone,One of the workstations at the place I work is behaving weirdly. It is sending out emails with virus attachments to people on the address book.We have been receiving calls from our clients and the fact that the machine is of a person higher up in the organization is just making life miserable.A few days back, the person ran a scan with avg and said that 6 viruses were removed. We have AVG professional 8.5 installed on the machines. I ran the preliminary Malware bytes quick scan and it didnt find anything.On running DDS. scr, the machine froze for a bit.I am attaching the hijack this and dds.scr logs.I would be obliged if anyone could help me out with this.

Answer:virus sending automatic emails

just ran combofix and got this following log..

7 more replies
Relevance 66.01%

I have run most of the online scanners in both safe mode and regular mode.

Kaspersky comes up negative but notes locked items.

Panda came up negative as well.

AVG found nothing.

The same 4 files come up in my cookies when running CCleaner: atdmt[2].txt, doubleclick[1].txt, bluestreak[1].txt and tribalfusion[1].txt

Emails end up coming back to me because the "send to" address is incorrect. One came back to me because the recipient had spam blocker and asked for more information. The email has the sender name of Alywn Shantanu and then my email address next to it. That is obviously not my name.

Please find attached all the reports requested on the Windows XP Cleaning procedure. Many of the log files indicated suspicious files.

I left off the SASlog.txt as I can only attach 3 files and I felt the other were more important. Please let me know if you would like me to attach it to another post.

I would greatly appreciate your help.
Thank you
David
 

Answer:Unknown Virus sending emails

Welcome to Major Geeks!

Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 6
Java(TM) 6 Update 3

Now reboot your PC.

After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O18 - Protocol hijack: flowto - {C7101FB0-28FB-11D5-883A-204C4F4F5021}

After clicking Fix, exit HJT.


Now we need to use ComboFix some files.

Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
If it is not on your Desktop, the below will not work.

Open Notepad and copy/paste the text in the below quote box into it:




KILLALL::

File::
C:\WINDOWS\Downloaded Program Files\as2stubie.dll
C:\WINDOWS\Downloaded Program Files\as2stubie.inf
C:\WINDOWS\Downloaded Program Files\IEGetPlugin.ocxClick to expand...


Sa... Read more

5 more replies
Relevance 66.01%

this is what I posted the other day in the security forum:computer started acting weird yesterday; it shut off by itself, showed a screen saying it was "updating" software.After that it started freezing, being really slow, especially the internet.I use A2 squared and decided to run a check, found out it had somehow been turned off for about 10 days.Tried running a scan several times, it always froze on a file in hkey local machines - z2 r2pc server (i think)I did an online scan with panda that informed me I had sdbot.jed worm and that is was disinfectableIn safe mode, I ran an non up-to-date norton that found nothing. I also tried a2 squared. In quick scan, just some minor stuff. In deep scan, I gave up, it took about 8 hours just to go 2%. It wasn't freezing, just being really slow.I just finished running symantec online virus check and nothing was foundbooted my computer up in regular mode, got a pop-up window from A2 squared about c:\windows\explorer.exe seeming to be acting maliciously, i didn't block it or quarantine, just restarted in safe mode. (As I tried shutting it down, new "updates" tried to install but I pushed the power button to stop it.) Also, in regular mode, the internet was still insanely slow, absolutely nothing loaded. -- chrome or ieAs of now, I am doing another panda scan. It's at 35% on on suspicious file is detected, fifteen files infected.So, I think I have something, but just not sure because I am getting co... Read more

Answer:infected with virus that sends emails to contacts

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open wit... Read more

2 more replies
Relevance 65.19%

Hi All,
A few days ago (22.05.13) a virus in my computer used my entire mail box to send out a "fake email"...
 
This used my name - no subject - and just contained an odd looking address link...
 
Most people picked it as a "virus" and did not open it...
 
However a few contacts did open it - and it turned out to be a scam website offering amazing "weight loss" pills
that have only baking powder in them - according to one on my contacts...
 
I have not posted the link here - but I could if further identification is required...
 
I run Windows 7 Home Premium - on a HP Pavilion g6 Notebook PC
 
I would greatly appreciate if someone on Bleeping Computer can help...
 
Best regards
 
ronno21

Answer:Virus in my Computer sending out Fake Emails

It doesn't seem like a virus. It seems more like your email was hacked. The solution is to change your email password.

2 more replies
Relevance 65.19%

what is a semi viris

Answer:Semi virus sending out goofy emails

You'll need to provide a lot more detail than this.

3 more replies
Relevance 65.19%

My outlook is sending out emails that when the receiver gets them it says it has a virus in it. I am not sending them rather they are automatically sent with out my knowledge from my email account. How can I fix this problem from start to finish, I have a virus protection on my computer.Someone please help me fix this...thanks

Answer:Outlook is sending out virus emails from my account

Just for starters download this freebie (green icon top right of webpage), install it, then run the quick scan:http://www.filehippo.com/download_m...My hope is that it might at least stop it doing so temporarily but almost certainly more attention will be necessary. Please keep the log it produces.Let us know what Anti-Virus you are using and whether you have run a scan.Always pop back and let us know the outcome - thanksmessage edited by Derek

4 more replies
Relevance 65.19%

Here is a HiJackThis log.I can't seem to stop it and nothing will detect it.Please helpLogfile of Trend Micro HijackThis v2.0.2Scan saved at 5:43:47 PM, on 4/30/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Google\Update\GoogleUpdate.exeC:\Documents and Settings\Jeffrey Brown\gthmnlw.exeC:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeC:\PROGRA~1\APC\POWERC~1\agent\pbeagent.exeC:\PROGRA~1\APC\POWERC~1\server\PBESER~1.EXEC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Fil... Read more

Answer:Trojan / Virus sending rogue emails every 2 -5 min

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 65.19%

Hi all,

My PC was infected with XP 2008 and a bunch of other stuff.

I seem to have removed the viruses but now when I start the computer it starts sending spam email in the background.
The only reason I even know it is sending anything is my avast email scanner is turned on and it shows every message sent or recieved being scanned.

There is no record of sent emails in my sent folder, outlook express.

I figured out how to make it stop sending emails by killing the svchost.exe that it is running, but as soon as I restart the pc it starts sending them again.

My PC is an old thinkpad T22 with XP Pro with service pack 3 installed.

I have tried many programs to find the problem but no more virus's are found.

Any ideas what is doing this or how to get rid of it?

Thanks

Answer:Got Xp 2008 Virus, Now Pc Is Sending Spam Emails

Would you try a scan from safe mode with avast?http://www.malwareremoval.com/tutorials/safemodeboot.phpafter that a scan with MBAMhttp://www.bleepingcomputer.com/forums/ind...st&p=876163post the log please

3 more replies
Relevance 65.19%

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:54:50 AM, on 7/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllhost.exe
C:\HP\KBD\KBD.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Secunia\PSI (RC3)\psi.exe
C:\... Read more

More replies
Relevance 65.19%

I picked up a virus somewhere - my Outlook 2007 is sending out a virus laden email to my contacts. I have done a virus, malware, rootkit scan with 5 different programs - avg, superantispam, threatfire, ad-aware and vipre. These programs yielded no results, so I thought I was safe - that was 7 days ago. But this morning when I turned on my laptop and opened Outlook - it sent out another email blast.Your help is greatly appreciated.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH ITDDS (Ver_10-03-17.01)Microsoft Windows 7 Professional Boot Device: \Device\HarddiskVolume2Install Date: 12/23/2009 1:51:53 AMSystem Uptime: 4/24/2010 5:08:05 AM (8 hours ago)Motherboard: Dell Inc. | | 0HP728Processor: Intel® Core™2 Duo CPU T7500 @ 2.20GHz | Microprocessor | 2201/200mhz==== Disk Partitions =========================C: is FIXED (NTFS) - 112 GiB total, 11.308 GiB free.D: is CDROM ()F: is FIXED (NTFS) - 1397 GiB total, 1240.923 GiB free.G: is FIXED (NTFS) - 466 GiB total, 354.744 GiB free.==== Disabled Device Manager Items =============Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}Description: Broadcom NetXtreme 57xx Gigabit ControllerDevice ID: PCI\VEN_14E4&DEV_1673&SUBSYS_02001028&REV_02\4&D323B72&0&00E5Manufacturer: BroadcomName: Broadcom NetXtreme 57xx Gigabit ControllerPNP Device ID: PCI\VEN_14E4&DEV_1673&SUBSYS_02001028&REV_02\4&D323B72&0&00E5S... Read more

Answer:Outlook 2007 Sending Virus Emails

Well, I thought this virus was connected to Outlook 2007, and it still may be, but I had another email blast go from my machine today.I did not have Outlook open and have NOT had it opened since my first post.HELP!!

37 more replies
Relevance 65.19%

Hi there
Yesterday i received a weird doc through a friend by msn, it was "img61-j8-JPeG.zip"
Like an idiot I opened it... and now my Avast detects each 3 min that I am sending 15 or 20 mails like "enlarge your ***** without surgery"
I made a few scans, detected 3 viruses, but my PC is still sending that s**t...
I followed the 5 steps, but Panda can't even finish its scan!
Could you please help me?????
I don't remerber the name once unzipped, simply it disappeard.
Thanks!!
here is my log with Deckards:

Deckard's System Scanner v20071014.68
Run by Balthazar on 2007-12-17 01:21:06
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
93: 2007-12-17 00:21:13 UTC - RP169 - Deckard's System Scanner Restore Point
92: 2007-12-15 22:24:08 UTC - RP168 - DirectX est install?
91: 2007-12-15 11:59:36 UTC - RP167 - Point de v?rification syst?me
90: 2007-12-14 07:31:52 UTC - RP166 - Point de v?rification syst?me
89: 2007-12-12 19:10:26 UTC - RP165 - Point de v?rification syst?me


-- First Restore Point --
1: 2007-09-18 11:00:39 UTC - RP77 - Point de v?rification syst?me


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Balthazar.exe) ----------------------------------------... Read more

More replies
Relevance 65.19%

hey mate, it fixed half of my problmes, the blue bg came out, and the popup messages on the clock bar stoped, but for some reason my computer still have problems, every time i connect to the interent it start to send emails all over the shop. My norton 2005 start to showing that thing when it scans for messages that are being send...

and what its even stranger is the fact that outlook is not even on...

do you have any magic tricks for that????

cheers, dan
 

Answer:virus sending emails - impossible to clean

hi everyone,

i'm having this problem with virus on my computer. and I can't fix it. Norton 2005 won't pick it up, i've tried spybot, ad-aware, hijackthis, ewido, microsoft anti-spyware, online sacan housecall trend micro, now i'm downloading mcafee. but nothing seems to work.

I got a virus, that had that blue screen with a black box on the desktop, saying your computer is infected... i've fixed this one with some instructions from this forum.

But, my computer still infected, every time i conect online, my norton start scannig for email messages that my computer is sending [even with outlook off..] i get those yelow little boxes saying scaning message 1 of 1, and that fills my screen with it. Than some errors start to show: "couldn't send this message because server not responding..."

All message have on the subject somehting like Re[8]:.

So i can't remove this virus, tried everything, i know what are you thinking, just format the computer... You are probablly right, if you get all the time i spent on this computer trying to fix it, i've would have finished reinstalling everything.

But now it's a metter of honour, i need to get this thing out of my computer, and my pc has so many programs and files that will take me one week to have everything back the way it is, if i format it... if you know what i mean...

Well, the question is. does anyone had this problem b4, and fix it without formating????

can someone hel... Read more

2 more replies
Relevance 65.19%

Hi thereIt seems as though I have a virus on my computer that is sending spam emails to everyone I've ever emailed, two at a time. It's getting rather embarrassing! I've followed the instructions and include the DDS.exe results here and attach the Attch.exe file. My computer seizes up every time I try to run the GMER scan so I haven't been able to attach that too. Please can you help? Please note that I'm NOT techy at all so please be patient!! ThanksDDS (Ver_10-03-17.01) - NTFSx86 Run by RACHEL at 19:28:15.83 on 2010-04-18Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.979 [GMT 1:00]AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\S24EvMon.exesvchost.exesvchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEsvchost.exeC:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\A... Read more

Answer:Virus infection - sending spam emails

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.----------------------------------------------Please try running Gmer again but only check the SECTIONS option

15 more replies
Relevance 65.19%

I have a clients computer and she is claiming people on her contact list are getting emails she did not send and which also turn out to be virus's. I have formatted the system and it is still doing it. How would we go about stopping this? Has her account been compromised? Does she need to change her password maybe?
 

Answer:email contacts are receiving virus emails via yahoo

i would start by changing all her personal passwords,bank, email etc.. anything important and use keypass for extra protection for a while till all the problems go away....

http://keepass.info/
 

9 more replies
Relevance 65.19%

Hi,

problem with my girlfriends laptop which doesnt seem to be to obvious. the only sign so far is that emails were sent from her gmail account to every email address she had ever sent to. PLease see the following logs. ANy help would be so appreciated. Cheers!

DDS (Ver_09-07-30.01) - NTFSx86
Run by admin at 23:57:30.75 on 10/09/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.3068.1707 [GMT 1:00]

SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\vfsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Acer\Acer Bio Protection\C... Read more

Answer:Probable Virus - Emails sent to all gmail sentbox

BUMP. can anyone help?

2 more replies
Relevance 64.78%

Hi, my computer keeps sending people on my contact list emails and they have a virus in them, how do i stop this i am getting grief from eveyone please help kerry.

More replies
Relevance 64.78%

I think my computer is infected with a virus that spam sends emails from my Hotmail account I've run norton/MBAM/superantispyware and Spybot search and destroy but they came up with nothing.

would appreciate any help anyone could give.

Answer:MSN/Hotmail virus, Auto sending spam emails

Ignore this, I got help in another part of the forums.

1 more replies
Relevance 63.96%

Hi Guys,

thanks for taking the time to read this.

Okay so here's what's happened:

2 days ago I recieved an email from a friend's hotmail address. With her being a friend I naturally opened it and that's where the fun started! I clicked on a link which looked innocent enough until it redirected me to a page promoting vi*gra. I also noticed that in the "CC" field, the same email had been sent to all her facebook friends. It seems as if the virus has harvested all the email addresses on her friends list.

I have since tried the following:
Avg 2011 free version
MBAM
Superantispyware
Ccleaner
Avast! - removed peternova.class trojan and java open connection trojan.

However it still seems to be sending out emails without my knowledge, the only tell tale sign is that I'm getting loads of mail delivery failure notifications coming back to my email account.

There are no obvious error messages coming up, so it's a bit difficult for me to google a specific remedy when I don't know the name of the virus causing the problem!
Anyway if anyone can help I'd really appreciate it, if not please take heed of my experience and watch out for it!

More replies
Relevance 63.96%

The tittle of the topic is wrong but I could not edit it, the only problem that I have is with gmail. Emails were sent without my authorization from my gmail account to some of my contacts; the content of the email was a link to strange web sites; the activity showed that someone from Trinidad & Tobago has logged in ( I do not know anyone there).I did not installed any programs or software on several weeks prior to these problems. I have not made any changes to my pc. I do not receive any kind of error message. I have run several online antivirus, all of them show zero infections, with the exception of Onecare from Microsoft that showed one error but was unable to see the kind of error. Before this I have never had any kind of problem or strange behavior. .Thanks in advance for all your help.

I am using Windows XP SP3, Avast, Firefox.

More replies
Relevance 63.14%

All my contacts within my Yahoo Email Address Book are getting a bogus email with either no title or just a name in the title and then just a link in the body of the email that usually contains the word viagra or the word "love" or "lo.ve" etc in the link. I've downloaded antivirus programs inluding MS Shield and Norton Antivirus and they often find a Trojan or other files that they clean up but after a few days I get emails from my friends saying they are getting spam/virus email from me again.
DDS (Ver_10-11-10.01) - NTFSx86
Run by Tous at 19:29:12.28 on Thu 11/11/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.901 [GMT -5:00]

AV: Norton AntiVirus *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.e... Read more

Answer:Email Virus Keeps Sending Bogus Emails to Entire Address Book

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

6 more replies
Relevance 63.14%

PC is infected with so many different things I dont think it'll be good to try to list them all here. But I had trojan-gen and virtumonde and the bsod screensaver. It's just that in the last three days I have run spybot and av scanners so many times, in normal and safe modes, and there is still something here that I can not find. I hope someone can help. Here are the log files from the dss scan and I am sorry but I am unable to connect to kapersky. I keep getting kicked out. Don't know if it's my system or if the site is unavailable. Deckard's System Scanner v20071014.68Run by Compaq_Owner on 2008-07-31 17:03:47Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --8: 2008-08-01 00:03:55 UTC - RP8 - Deckard's System Scanner Restore Point7: 2008-07-31 23:36:50 UTC - RP7 - Software Distribution Service 3.06: 2008-07-31 23:16:21 UTC - RP6 - Software Distribution Service 3.05: 2008-07-31 22:34:10 UTC - RP5 - Software Distribution Service 3.04: 2008-07-31 17:07:44 UTC - RP4 - Removed Google Earth-- First Restore Point -- 1: 2008-07-31 15:06:09 UTC - RP1 - System CheckpointBacked up registry hives.Performed disk cleanup.Total Physical Memory: 504 MiB (512 MiB recommended).-- HijackThis (run as Compaq_Owner.exe) ----------------------------------------logfile has ... Read more

Answer:Infected With I Dont Know What. Hijacked My Desktop And Screensaver And Is Sending Virus Emails

Hello and welcome to BCWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. We aim to provide the valuable service known to come from BC to every member we can, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay. Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator priv... Read more

2 more replies
Relevance 62.32%

Helping a friend move to Windows 8. We cannot figure out how to move contacts from Gmail on XP to Gmail on Windows 8. We have Exported to a thumb drive (.wab) and plugged into the Windows 8 computer. Dialog box asked if we wanted to import and we said yes. Going to gmail there is NO contacts list.

What do we need to do to get the contacts transferred to Gmail?

Answer:Move contacts from gmail on XP to gmail on windows 8

Gmail supports importing contacts from CSV format so you need to export the contacts to a CSV file from XP then from the brower, log into gmail, click on Contacts then click on More->Import then click again on Import and select the CSV file.

Once you have setup the Gmail from Windows 8, the contacts should be there.

13 more replies
Relevance 61.5%

Basically my email is sending emails away, I found out cause some didn't make it to the senders and my MSN Messenger is sending out virus links to friends. Here's my DDS and other info.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Owner at 11:07:47.71 on Sun 01/03/2010
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.510.159 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\TELUS eCare\bin\mpbtn.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Hewlett-P... Read more

Answer:Hotmail sending SPAM emails, and Messenger sending Links, please help.

Hello and welcome to Tech Support Forum.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please post a fresh DDS Log

3 more replies
Relevance 60.68%

The question really says all about what I want to do, or need help on. I recently signed up for a new outlook account to try out the new outlook preview and I've set up gmail to automatically forward new messages to my outlook account so that I can use outlook to manage my gmail account.

Do any of you know how I would be able to forward the old messages, and not the new ones, to my outlook? I already know that they can be fetched into outlook by outlook's very own service, forwarding would be faster, so..?! Also, since I now use outlook to send email on behalf of my gmail account, how do I make it sync each email I send using outlook with my gmail - so that gmail has it all?

TY in advance. Please do help.

More replies
Relevance 59.86%

can't figure out how to add info into new smart phone, never used one before.

Answer:Receive Gmail account emails from inoperative cell phone to my outlook.com emails instead, why?

Settings > email + accounts > add an account > fill in the details for the gmail and it will get a new "App" on the All Apps list that you can pin to the Start Screen

more replies
Relevance 59.45%

Logfile of HijackThis v1.99.1Scan saved at 6:28:52 PM, on 7/26/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Toshiba\Power Management\CeEPwrSvc.exeC:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\System32\svchost.exec:\toshiba\ivp\swupdate\swupdtmr.exeC:\WINDOWS\wanmpsvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Apoint2K\Apoint.exeC:\Program Files\TOSHIBA\Power Management\CePMTray.exeC:\Program Files\EzButton\CplBTQ00.EXEC:\Program Files\TOSHIBA\E-KEY\CeEKey.exeC:\Program Files\TOSHIBA\TouchPad\TPTray.exeC:\WINDOWS\system32\LVCOMSX.EXEC:\Program Files\Logitech\Video&#... Read more

Answer:Computer Sending unknown emails without ME sending them.

Hey bio_hazard. The log looks pretty good except for 1 bad service. I think I'll use you as a guinea pig to test my new script. Now we need to remove a service.Open Notepad and Copy/Paste the contents of the quote box below into the new document:  Const title = "Service Removal Tool"Set oWS = CreateObject("Wscript.Shell")sService = inputbox("Removing Service:",title,"ASP.NET Admin Service")If sService = "" thenmsgbox "Script halted. No changes were made.", vbInformation, titlewscript.quitEnd IfstrComputer = "."Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")Set colListOfServices = objWMIService.ExecQuery _("Select * from Win32_Service Where Name = '" & sService & "' or displayName = '" & sService & "'")If colListOfServices.count > 0 ThenFor Each objService In colListOfServicesobjService.StopService()wscript.Sleep 10000objService.ChangeStartMode("Disabled")wscript.Sleep 5000objService.Delete()Msgbox "The " & sService & " service has been removed or marked for deletion.", vbInformation, titleNextElseMsgbox "The " & sService & " service was not found.", vbInformation, titleEnd IfSave the file to your desktop as remsvc.vbs and close Notepad. Locate the remsvc.vbs file on your desktop ... Read more

3 more replies
Relevance 59.04%

MS Office Outlook sending emails but no emails to send? I have added a few new accounts to my outlook and have had nothing but problems since. It is important that I keep these emails in my outlook, because I work from home and need to access these accounts. I have recently noticed, whenever I hit send receive, the number rises everyday, which now has me concerned. Each account has a different amount "sending", but nothing is in the outbox. IE: account A: sending 1 of 135, Account B: sending 1 of 1020 and so on. I also read online somewhere that if I was a torrent user, that "is" my problem, but I have stopped using it for weeks and there is no traffic going in or out, and I've turned the program off completely.

I've used Outlook for years, with many accounts and have never had problems. I've noticed more problems since this 'sending' message has started. I also noticed, I was the ONLY one at work not getting any SPAM for at least 2 yrs, UNTIL, I took a few days off, went back to work and BAM, hit with SPAM. Its a bloody nuisance because my accounts are linked with "rules and alerts", so if one is infected, all others follow behind! Has one or all of my accounts been compromised? If so, can it be fixed?

Klinker
CC
 

Answer:MS Office Outlook sending emails but no emails to send?

6 more replies
Relevance 57.81%

I would like to send a letter (email) to about 80 people to whom I have already sent letter that now appear in the "to" section of the OE folder where they are stored. Is there a way to "capture"all of the names in the "to" of these emails and send the letter to all of them at once? Thanks.
 

Answer:Sending Additional Emails to People Whom I have Already Sent Emails to

15 more replies
Relevance 56.17%

Hello,

I'm using the old Gmail Chat.

A long time ago I added my own account to the Chat List so that I'd be able to send myself a message from that list.
I had to add a "." (dot) after the User Name; - instead of "[email protected]", "[email protected]".

In the last few days, whenever I send mail to "[email protected]" - I get a "Delivery to the following recipient failed permanently" message.
I'd appreciate your help.

Regards.

More replies
Relevance 55.76%

I am sending around 5/10 emails a day but my ISP is telling me I am using 5GB per day sending emails. Even when im not sending emails my usage is going up and it is showing up as emails. I have changed all my passwords which hasnt helped. I got redirected to this forum from http://www.bleepingcomputer.com/forums/t/497565/using-over-1gb-an-hour-sending-56-emails/ . I have attached the dds scan to this post.
 attach.txt   6.25KB
  3 downloads
 dds.txt   29.97KB
  5 downloadsDDS (Ver_2012-11-20.01) - NTFS_AMD64Internet Explorer: 10.0.9200.16537 BrowserJavaVersion: 10.5.0Run by carlm_000 at 9:39:10 on 2013-06-12Microsoft Windows 8 6.2.9200.0.1252.44.1033.18.3975.1822 [GMT 1:00].AV: AVG Internet Security 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: AVG Internet Security 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}FW: AVG update module *Disabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}.============== Running Processes ===============.C:\PROGRA~2\AVG\AVG2013\avgrsa.exeC:\Program Files (x86)\AVG\AVG2013\avgcsrva.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svch... Read more

Answer:Emails using 5GB per day when only sending 5 small emails

Greetings malinboy and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter probl... Read more

29 more replies
Relevance 55.76%
Question: Gmail Contacts

I am having problems with Google Email. About 50% of the time, when I log into Google Mail and try to select a contact, the list displays for an instant, then disappears completely. If I minimize mail, the Contact list is displayed on my Home page. I have a Dell 1555 Studio laptop, Windows 7, Kaspersky 2011, updated Java and Adobe Flash Player. I also made sure that my Google browser was the latest version.

Again, this does NOT happen each and every time but when it does, it's a royal pain. Any recommendations would be greatly appreciated. Thanks
 

Answer:Gmail Contacts

10 more replies
Relevance 55.76%
Question: Gmail contacts

In gmail, it shows the quick contacts area and I wonder if there is a way to just display people you want to chat with. I have one person I sent an email to and now she is on there...
 

Answer:Gmail contacts

the following directions worked for me.

Gmail Tip #23: Cleaning Your Contacts
One of Gmail's "features" can leave you with extra entries in your Contacts list. Read on for more information...

Gmail has a (debatably) nice feature that automatically adds to your Contacts list the email addresses of those to whom you send emails. While this can be helpful at times, just remember that EVERY unique email address you send to gets auto-added. So, if someone or some company sends you an emai and you reply to it, the email address will get added. For clarification, it only gets added once. We're talking about "unique" email addresses here. But how do you know what gets added?

Log into your Gmail account and click on the "Contacts" link at the top of any Gmail page. A window will open displaying any Contacts you may have. Any you have manually edited will typically have a "Name" and possibly a "Note" associated with it. By default, any Contact Gmail auto-adds and is unedited will not contain any "name" or "note" information, just the email address. Visually scan down the list and look for any that fall into this category. If you find one, determine what to do with it: Delete is, Edit it, or leave it alone. Obviously what you do with it is up to you, but I make it a personal rule to always edit any email addresses I want to keep and add names (and sometimes notes). Any I don't want, I just delete. ... Read more

1 more replies
Relevance 55.76%

I have been all over the place trying to find a way to get my Gmail contact listed with last name first. I sure hope I do not have to reenter all 400 + contacts. Wow, what a job that would be. I do not have a Blackberry or anything like that.
Conrad

Answer:gmail contacts by last name

from what i've read over and over online the simple answer is you can't do this.

2 more replies