Over 1 million tech questions and answers.

hijackthis log, email getting hacked

Q: hijackthis log, email getting hacked

ive recently had a wow account hacked, now twice in 3 days. ive ran 4 different scans in safe mode to see if it was a keylogger, and they found nothing. this second time around, my email accounts getting affected, and are getting banned because of it. ive ran my scans in safe mode with system restore off to see if there is anything on my computer. so far, i havent found anything, and im running out of options. any help would be extremely appreciated.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:27:47 PM, on 8/20/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1125.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1125.0\msneshellx.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Josh\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Josh\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/
O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} (System Requirements Lab Class) - http://srtest-cdn.systemrequirementslab.com.s3.amazonaws.com/bin/sysreqlabdetect.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5DAFED4D-6ABC-428C-8307-8DD8E585F944}: NameServer =,
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

End of file - 6752 bytes

Read other answers
Preferred Solution: hijackthis log, email getting hacked

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)


Hello, my Yahoo email was hacked into early this morning, resulting in everyone in my contact list getting multiple emails from "me". I changed my password as suggested by Yahoo, and then generated a HijackThis log file. Please help me resolve this mess. I don't want to shut down my email account. Also, our computer has been running extremely slow from time to time and we have Trend Micro Internet Security installed, but it was somehow turned off when I checked the computer this morning. Thanks for your help.[log attached]

A:HijackThis Log please help with diagnostics - email was hacked

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

Read other 6 answers

Hi, I'm new to this site. Also, I'm not very good with computers (but I guess if I was I wouldn't be here, right?) So, I guess I'm supposed to post my log from Hijackthis, and someone here will tell me what to delete, right?

Ok, I have an HP laptop running on Windows Vista and I used to think that there was nothing wrong with my computer. I have anti-virus software (Trend Micro Officescan), anti-malware software (Malwarebytes), and I also have CCleaner, and I defrag about every day. When I run all of this software, it tells me that my computer is fine. My laptop isn't slow and it doesn't act strange; except a few days ago, someone hacked into my email account (hotmail.com) and sent an email, that was supposedly from me, to all my contacts; probably spreading around a virus. So, I used Hijackthis and I have attached the results to this topic.

If anymore information is needed, I will be glad to provide it, if I can.

Please, please help me!!! I don't want this to happen again!!!

A:Hijackthis Results - Someone hacked into my email account

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a

Having problems with spyware and pop-ups? First Steps

link at the top of each page.


Please follow our pre-posting process outlined here:


After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please start a new thread in our Virus/Trojan/Spyware forum along with the required logs

Read other 1 answers

Here is my HJT log, not sure if there is anything suspicious there, comp running very slow and somehow my gmail account was compromised a couple weeks ago and accessed from Brazil. Thanks for looking this over.

 hijackthis.5.22.2012.txt   16.38KB

A:Hijackthis log - running slow, email password hacked?

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 21 answers

My WoW account was recently hacked into. After dealing with blizzard i had my password changed and my account restored. The hacker then hacked my account again and this time changed my Battle.net address along with the password. He also attempted to steal my hotmail at this point in time. I then began to look for keyloggers and viruses with hijackthis and various virus programs including Spybot, Kaspersky, Microsoft Security Essentials, and MalwareBytes. I deleted a bunch of toolbars using hijackthis and am stumbling across various files that i am unsure of. I do not want to mess up my new computer so i am going to stop deleting things until further notice.

A:My WoW account was hacked along with my email. am i still hacked?

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 1 answers

Hi guys,
'Boopme' had me run MiniToolBox and he wrote that he found "errors and other issues" and he bumped me to this thread.
Norton now seems to be removed and the restart was successful w/ out a restore.
This is what I wrote in under the from "Am I infected?" thread;

Been having problems with my laptop running Vista Home premium svc pack2.
One day, a month ago, Norton was not updating properly. Upon the next boot-up windows would not start and I was forced to restart in safe mode with a system restore. This was successful but Norton Security Suite was still not updating properly.
Since then, on a few occasions, I have attempted to uninstall Norton without success thru the program uninstaler. Norton is unresponsive. I even got the Norton rep. to do a remote deletion of all registry files of Norton. But they all returned after the reboot of my PC because windows would not open and I had to start-up thru system restore.
Since then my yahoo email been hacked and spam sent to the contacts of my address book.
I know I got something but I don't know what.. Can anyone take a stab at what I might need to do?
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16421
Run by Owner at 20:22:53 on 2013-03-19
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.3062.1338 [GMT -5:00]
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *En... Read more

A:Email was hacked-contacts in my address book were sent spam email

Greetings Brian and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me about it.When you post your reply, do not use the butt... Read more

Read other 26 answers

Running Win 7 .  Opened spam email by mistake and email account hacked. Acct locked by server after 1600 email sent. Account has been recovered.  I ran full scan with Microsoft Essentials and Malwarbytes and both clean.  Then I did a full scan with Kapersky and it showed 1 malware  of Trojan.JS.Agent.cfl located on my external harddrive in my backup files location and possibly 2 other locations on the report.  I have pdf ofKapersky report if want to see.
I also ran AVG 2015 and it was clean.
Not sure if I should just delete the backup files from my external hard drive.
What other scans can I do to make sure everything is OK?? - I have not noticed anything unusual with computer yet but want to ease my mind.

Read other answers

I use WLM on Windows 7 for my main email (ntlworld.com) address. I don't keep an address book, i just reply to the latest email from whoever in my inbox. I am on one list of old school friends, pretty much all the rest in my inbox at any one time are from individuals or companies.
Recently, i have been receiving a lot of 'delivery failures' for emails that i have supposedly sent to addresses on this list. Some on the list have confirmed they have been receiving spam from my address. This list activity is the only malfunction i have noticed in WLM. I have a hotmail account and a yahoo account that both seem to be performing fine.
My ISP suggested i changed the passwords on my ntlworld accounts (I have two) and i did that under their guidance over the phone the other night. Within minutes of doing so i got yet another batch of bounced emails.
The only difference was this time instead of "Mail delivery failed: returning message to sender", "Undelivered Mail Returned to Sender" or "Undeliverable: Fw: new message" in the subject line, i got "Warning: message XXXXXX-XXXXXX-XX delayed 24 hours".
My ISP suggested i changed my passwords again and when i reiterated that i had just done so and it had made no difference, he insisted that this was all he could suggest or to "open another email account". He did say that my PC must be infected with a virus, but i scan regularly with avira and malwarebytes and occssionally with ESET and Adwcleaner.
Can someone please explain in not too techn... Read more

A:Has my email been hacked? What can I do about it?

  It's entirely possible your email address is being spoofed.  Some person or persons "borrowed" your email address is and is sending emails from another computer to your WLM contacts; or, your computer could have a 2nd email engine [set up somehow] that is doing the sending.  I don't know which because I have never used WLM; however, I have used earlier older email programs for some time now.

Read other 10 answers

Second time my email has been hacked. Sending emails I dont authorize. Isnt Norton supposed to catch this? What can I do.

A:email hacked again


What email provider is it?

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds file to run the tool.
When done, DDS will open two (2) logs:

Save both reports to your desktop. Post them back to your topic.


Read other 1 answers

A few days ago my email id got hacked dunno how. I am not sure whether its a virus or not as my computer has adequate security softwares

A:Email Id was Hacked

A few days ago my email id got hacked dunno how. I am not sure whether its a virus or not as my computer has adequate security softwares Here are the logs you requested.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.1.0Run by Warrior at 19:22:49 on 2011-12-06Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3069.2069 [GMT 5.5:30].AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}FW: COMODO Firewall *Enabled* .============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\COMODO\COMODO Internet Security\cmdagent.exeC:\WINDOWS\system32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\AVAST Software\Avast\AvastSvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\COMODO\COMODO Internet Security\cfp.exeC:\Program Files\AVAST Software\Avast\avastUI.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\AllToTray\ALLTOTRAY.EXEC:\Program Files\Taskbar Shuffle\taskbarshuffle.exeC:\Program Files\... Read more

Read other 14 answers

Someone hacked into my hotmail account. I can not check my email because it says my password is incorrect. Can you help?

Read other answers

i would like to know how passwords are being broke in gmail or yahoo...? i'm eager to know that because, my mail box has been hacked...please tell me...

A:I think my email has been hacked

If you email account has been compromised i would take it up with the site that hosts your email account.

As for the passwords make sure that you create a strong hard to guess password. Also, you can check to see if your computer is malware free. http://www.techsupportforum.com/f50/...lp-305963.html

Read other 1 answers

The first sign was when my Microsoft account told me that i needed to confirm it was me when ive logged in on it on my old laptop several times when i was on my laptop....

Then it told me that my Microsoft account was compromised or my email was compromised. So i promptly change all my passwords on all my accounts....

And next thing i know there's a monthly subscription being charged on me that i did not do or ever even hear of the company.... and they mentioned video games when its been nearly two months since got one. And its supposed to be a company helping fund construction projects.... which puzzles me....

has anyone ever heard of something like cndnotes.com? Thats supposedly their website i was told by the mostly unhelpful customer support but whenever i try to go it it to see what exactly the company iscomes up as either the site has been removed or dosen't exist.... and by an unknown search provided ive seen once more before.... very weird....

and oddly another site that used to work fine suddenly gives me errors....

id give the link for when i try to search the site but just in case i dont want to get you guys infected with a virus on your computer....

I have canceled the charge as of now and have got a new email address, this site is on my spare email i havent used in a long time, thank goodness.

Read other answers


I posted my problem I am having in the "General Computer Security" sub forum and was requested to post my scan and logs results in here.

This was my original post in that forum ;

I have noticed that today someone has gained access to my Aol email account, and sent 5 spam emails to all my contacts in my address book.

I have since tried changing my password, but when I answer the security question, Aol then tell me access is denied, but will allow me to carry on using my account as per normal with my password. So there is no way for me to change my password.

I was allowed to set up a new security question though, but when I get to the page of answering it, the same thing happens, access denied. As I am not with Aol any more, there is no way of deleting the account. I just want to make sure this does not happen daily as have a lot of contacts on there.

I do not use Aol as my Internet Provider, just for emails.

I have ran SUPERantispyware and Malwarebytes scans, which both came up clean.

Any ideas on why or how I can stop this happening?

I also use Avira Anti Virus.

DDS (Ver_10-03-17.01) - NTFSx86
Run by Stu and Chrissie at 11:27:19.16 on 24/04/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.1536.789 [GMT 1:00]

SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-40... Read more

A:Aol email been hacked


Read other 6 answers

recently i jus got a spyware or viruses that jus hacked my email and all my bank's acct was changed so are there anyway to get my email back?

A:Email Hacked :(

Have you taken the appropriate action over your bank accounts?If you think you are infected submit a hijackthis log here.How to submit a hijackthis logDownload HijackthisTry running the following from safe mode (Getting to safe-mode) Sysclean you'll also need the virus template file from here lpt***.zip remember to extract the contents of the zip file into the same folder as Sysclean.comorDrWeb CureITIf your good with the command line also try Sophos Command Line scanner this command will scan all of your hdd's SAV32CLI.EXE -F -di -remove -dn -mbr -all -zip -p=avscanlog.txt and give you a log file to review afterwards.If you can't get into safe mode download the following - Ultimate Boot CD however you will need to update the definitions on the disk see here how to do that. Alternatively download a archive version of Public AntiVirus again this will need updating but full instructions are here.If you want a smaller download look here for instructions on how to create your own boot CD.Also try installing and running A2 Free and EwidoI'd also run Spybot(Spybot Tutorial) and AdawareIf your using Win2K/XP run adaware/spybot from "safe mode with command prompt"At the C:\ prompt type the following:-cd\C:\progra~1\spybot~1\spybotsd.exe /autocheck /autofixcd\C:\progra~1\lavasoft\ad-awa~1\ad-aware.exe

Read other 8 answers

Hello! So, my email has been sending spam to everyone on my list...
I know because of the gazillion delivery failure notifications I got. xD
Oh and my other email is sending spam to my main email. .__.
My cousins email was taken over too. O.o
Does just changing the password solve this? Or is it some kinda virus or something?

I accidentally clicked a link from my cousin without thinking (It was a weird automated IM thing asking me to take an IQ test), so I'm guessing that's where it started. Now all her friends are sending spam to each other and it's like this endless spam chain. Xwo

I'm usually pretty careful about these things, but that message had been incredibly convincing at first. XD


A:Email has been hacked?

Hello.I would start by changing your passwords using a clean computer.Let's check your normal computer out just to be sure.Please download RKill by Grinler from one of the 4 links below and save it to your desktop.Link 1Link 2Link 3Link 4Before we begin, you should disable any anti-malware software you have installed so it does not interfere with RKill running. This is because some anti-malware software mistakenly detects RKill as malicious. Please refer to this page if you are not sure how to disable your security software.Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed. If nothing happens or if the tool does not run, please let me know in your next reply***************************************************Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download linkIMPORTANT!!! - when you save the file, rename it to something random, such as bubbles.exe This must be done before beginning the download!MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you ... Read more

Read other 1 answers

Our email account has been hacked and we can't seem to get rid of it. We have spyware programs as well as antivirus protection. What do I need to get rid of these horrible email being sent out?

A:email hacked

Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-MalwarePlease download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Full Scan"... Read more

Read other 1 answers

hi im having trouble with my hotmail account everyone in my contacts list is getting emails from me but its spam i'm not sending out nothing if tried reseting my password but that didn't work I don't know what to do please help.

regards thefab

P.S. Im using Mac os x if that matters

Read other answers

Hi and thanks for your help. Last week I had a yahoo email account hacked and they sent a spam to my contacts. The message was -I have a present for u- or something similar with link to I don't know what. I changed all my yahoo passwords and ran a full scan of ms security essentials and came up zip. Today 1 of gmail accounts got hacked and they tried to send spam but gmail did not let it go through. I have several emails and will go and change all passwords now. My computer seems to be doing fine with no noticeable slow down or pop ups. would like to be sure I don't have a keylogger or something thanks, John I have Vista and use firefox

Read other answers


I have been hacked twice on my email. First I received a spam email from a Canadian pharmacy company, coming from someone in my contact list. When I asked if he had sent the email, he said no. Then his email was deleted from my contact list.

This happened again from another contact. Same spam company, same deleting her email.

I have changed my password to the email account.

Can you please help?

Thank you


A:email hacked

Malwarebytes' Anti-Malware 1.46

Database version: 4749

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

10/5/2010 5:45:43 PM
mbam-log-2010-10-05 (17-45-43).txt

Scan type: Quick scan
Objects scanned: 174458
Time elapsed: 12 minute(s), 22 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 7
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 4
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{014da6c1-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MsSC2 (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\wkey (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.M... Read more

Read other 4 answers

I have been the victim of a common problem on here - my email has been hacked. I try to get in through my password and secret question, but it has been changed. I realize that the account is probably lost, but is there any way to determine who might have done this? In particualr, is there a way to determine the IP addresse(s) from which my account was accessed? Any thoughts or suggestions are appreciated.

A:Email hacked

Read other 9 answers

Hi, thanks for the help. My ex-hubby just handed me two printed copies of emails that I sent to a friend from my yahoo and earthlink mail boxes.

How can I make sure he will not read my emails again (he is not a pc pro and he did NOT have a clue re: my passwords)?

Also, how can I return the favor and check his email? Now that he has been reading my mail, I fear he might want to start another custody battle.

Thank you

A:Help Email was hacked

Hi Nuttymom, welcome to Bleeping Computer.Sorry it is under such circumstances, though.I had Earthlink a few years ago and I'm not sure if it's the same now or not. But, once you connect to the internet, ANYONE and EVERYONE can read email. That's crazy. STOP USING EARTHLINK EMAIL.Yahoo is not the safest or most secure of the free email accounts available. Go to hotmail and create a brand new account. Create a password that nobody could ever guess in a million years...something totally off the wall. For example, 'plane22' or 'fall49'. Just be sure you can remember it and use both letters and numbers. Also, it is vital that you set your preferences so that you must ALWAYS sign in and give your password. That way, nobody can gain access to even your account name. Even if you have a hotmail account right now, make a brand new one and let your closest friends know.At the top of this page, you will see "Search", "Favorites", etc... On the right of "Media", you'll see History. It records each and every page you visit and it saves it by the day and week, etc...Under Tools (at the very top of this page) and Internet Options, under the General tab, near the bottom, you'll see History. Click the button "Clear History" before you go offline EVERYTIME you are online. Just know that your Address bar/scroll bar will have NO addresses there so you'll have to type out where you want to go each time, etc...Seriously, STOP USING EARTHLINK AND YAHOO EMAIL... Read more

Read other 3 answers

My hot mail was hacked a few days ago, after following the necessary steps to get it back. After changing my security pass word. the language is now in Abra mic. question is how do I get it back in English?

Read other answers

Tech Support Guy System Info Utility version
OS Version: Microsoft® Windows Vista? Home Premium, Service Pack 2, 32 bit
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+, x64 Family 15 Model 107 Stepping 1
Processor Count: 2
RAM: 3517 Mb
Graphics Card: NVIDIA GeForce 6150SE nForce 430, 64 Mb
Hard Drives: C: Total - 294963 MB, Free - 183923 MB; D: Total - 10239 MB, Free - 4720 MB; F: Total - 953866 MB, Free - 926502 MB;
Motherboard: Dell Inc., 0RY206
Antivirus: Microsoft Security Essentials, Updated and Enabled

Every once in a while in my email i get hundreds of email from Mailer Daemon saying my mail didn't go through. When i see the hundreds of email addresses they were tried to send, they were all strange email addresses not recognizable to me. Recently this has started happening more frequently. It is very time consuming to delete all Mailer Daemon while trying to save my normal email from my inbox. Is my email hacked? How can i correct this problem? Thank you.

A:Email hacked?

To be safe, change your email password and make it a strong password.

However it could be just that a spammer that has gotten your email address and using it to make it appear that his emails are coming from you, if that's the case it has nothing to do with your account and there's nothing you can do to stop it.

You can generally sort email by subject or sender and then select and delete the emails in one or two clicks.

Read other 2 answers

My 90+ year-old mother may have had her email hacked. I have 3 email addresses and each one had an email that was from her actual address as far as I can tell. Each email had a different subject line ("respond to this", "what you're loving", and "limited space") The email said the message couldn't be displayed and to click a link to view it.
I didn't click the link, but my sister did, and it took her to an infomercial for a product called Geniux that supposedly has been endorsed by Stephen Hawking. I hope my sister didn't get hacked as a result!
My mom changed her password, so I hope that's the end of it, and she will scan for viruses.
Any idea if this could've been hacking or can spoofers access email contacts now???
Thanks for your help!

Read other answers

I use yahoo mail and last week, I got an email from yahoo alerting me of a suspicious login from another country as well as delivery failure messages from the yahoo mailer-daemon, since my email was trying to send over 400 spam emails to my contacts. So, I immeditaely changed my email password.  However, yesterday when I logged in I got a flood of emails from my contacts saying that I had sent them spam mail, but when I checked my sent email folder, it was empty. Once again I changed my password, using combinations of characters,numbers and letters. But when I logged in today, the same incident happend again.  I am currently using windows 764bit with Avast free antivirus and Comodo firewall and I have scanned my pc with Avast free antivirus, malwarebytes anti-malware, norton power eraser and comodo scanner, however none of these picked up anything.Edit: Moved topic from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum, due to the absence of any malware logs included with this topic. ~ Animal

Read other answers

I'm beginning to think more and more that one of my email accounts has been invaded. I don't know how this could happen because I hardly ever share my computer, I've never given anyone my passwords, none of my passwords are easy to guess, and I use PC protection. I have an activated firewall (ZoneAlarm), I've scanned my system with Spybot S&D, Ad-Aware, and AVG anti-virus and no problems were found. I just downloaded and scanned my computer with the trial version of Adware Spyware SE, and it did find stuff that the others didn't, but the screen was all garbled so I couldn't find the remove button to remove whatever problems it detected. I also use SpywareBlaster.

I'm wondering how this could happen, and why now, since I have more protection now than I ever did. I've never had email security problems in the past. Is it a keylogger or whatever? What can I do to possibly find out what happened, and are there any programs that would be better than the ones I have, since none of them are detecting whatever's happening to my computer? Would running HijackThis help?

Thanks in advance.

A:email hacked?

An explanation of WHY you think you Email accounts have been "invaded" would help members answer your question with any degree of accuracy. Has this recently begun ,for example, and does it occur in a consistent manner, and what precisely happens?

Read other 7 answers

Spam is being sent to the contacts in my Outlook contacts list from my email address. If I launch Outlook, minutes or hours later, I'll get returned mail from contacts that are outdated and active contacts have emailed back to let me know I've been hacked. My machine is running Windows 7 (32 bit) and Office 2007 Small Business (which includes the full version of Outlook.

You folks have been a great and much-appreciated help when my son's machine has picked up malware and I'm hoping you can help with this problem as well.


Tom Rossi

A:hacked email

Hello Tom.. ost likely you have Spoofed/Forged Email amd you need to change your email password and ket it die off.But we will check for a malware cause too...Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List last 10 Event Viewer log List Installed Programs List Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet and double-click on the renamed file to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.Malwarebytes will automatically start ... Read more

Read other 5 answers

Recently both my gmail and hotmail passwords were changed by someone not me. Gmail told me there are some suspicious actions being done by my account. When I followed gmails steps and got my accoutn back I saw someone spammed my contact list with well spam. My hotmail account was hacked. Do I have a keylogger? My hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:52:23 PM, on 9/29/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe
C:\Program Files\Lexmark S300-S400 Series\ezprint.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Dyyno\Dyyno Broadcaster\dyyno_launcher.exe
C:\Program Files\MSN Toolbar\Platform\6.3.2317.0\mswinext.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\... Read more

A:My email getting hacked?

When I try to play games it runs all slow now. When I open NVIDIA monitorview it shows my my CPU,DISK and Memory is being used 100% by just being on desktop. HELP! Is it a virus? :(

Read other 2 answers

I was notified by one of the addressees in my email address book that he was receiveing spam emails from my email account. Not everyone in my addressbook was receiving these spam emails. I logged onto my email account and changed my password but am unsure if there may be more at work here. For instance, when I logged onto the Internet tonight, there was a Money Central window open on the left of my home page. That has never been there before. Also, the clock on my computer is off by over 17 hours tonight when I turned it on. I have a second computer plugged into the same power outlet and that clock is unchanged. I have Avira Virus Protection, Sygate Personal Firewall, Malwarebytes and no infections are logged. I even logged onto Trend Micro Housecall to see if an infection could be found. Nothing was discovered. How would I know if I my computer has been hacked or a keylogger program is working? Thank you for any help you might be able to offer.

A:hacked email?

Received email from Earthlink today that a third party outside of US had probably hacked my email account and that I should change my email password. Have already done this before two days ago. Also received the following error messages when booting up my computer today: The Application or DLL C:\Windows|system32\MSCTF.dll is not a valid Windows image. Please check this against your installation diskette. There was a second error message immediately following: The Application or DLL C:\Windows\system 32\SSSensor.dll is not a valid Windows image. Please check this against your installation diskette. My computer is running Windows XP with service pack 3 and IE 8.

Read other 8 answers

Hi everyone,

Emails (that i didn't write) are being sent from my hotmail address to my contacts. These are marketing emails for a number of different online businesses.

any help would be much appreciated

P.S I have attached ark.txt and attach.txt, however, DDS txt wont past onto this message, any ideas on what i am doing wrong?

A:could my email be hacked?

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.


Can you attach the DDS.txt to your next reply?


Read other 2 answers

Hi all
Anyone having the following issue...?:
I've got a whole bunch of emails saying "Mail Delivery Failure, Returned to Sender" for emails I haven't sent. And they look like spam to me. They're to completely random people I've never met and with content like "Here, Thrax has shut down, try this anti-depression drug" and bleep like that. I'm not a paranoid guy but now I'm worried because there's nothing in the "Sent" box of either my Outlook outbox or my server's outbox. So who knows how many have actually succeeded in sending? And if they know my email password, because I'm an idiot they also know most of my other passcodes, although most of my monetary ones have a different one thank god. 
AVG's running a full pc scan as I speak...but getting quite concerned. Any ideas?
PS my 'infected' email is also my forum one so...damn i dunno.
I use my email for loads of websites, mostly legitimate. All legitimate, I think.

A:****!!! Hacked Email! (I think)

And btw where these "Mail Delivery Failure" emails are coming from are definitely legit as I've gotten emails from it before about emaisl that actually failed to send that I did try to send...just checked.
PC scan at 77% no threats found apparently...

Read other 9 answers

can someone help me , is been three days that i can not sign in my email account and semms that someone hacked my pc and my email , i contacted microsoft and no anser

A:hacked my email

What email program or client are you dealing with? Hotmail? Yahoo? Or your ISP's webmail?

The usual way to go about regaining control of your account for email is to tak to the tech support people who you identify yourself well to.....then they help your recover
access by resetting the password and/or security information to allow you to identify yourself within the website......ONLINE account verification...... you then have to reset to your
own, new password and REDO your security verification questions and answers. That's the standard way to help yourself.

We really would not be able to help you with gaining control, if indeed someone has CHANGED your security verification information to something else.... if that has taken place, you MUST have the help of the ISP or email program tech support.

Once you are free of the hack to your email account we might be able to help you scan for and remove any malware.

It would be a good idea for you to contact the tech support people on the PHONE or on a clean computer, not the affected one.

Read other 3 answers

Hi everyone,
Well, I have been using my very old aol email account for years now , given it has the coolest address , so never thought of even changing it.
So, let me recount what happened just recently and hope to get some feedback if possible. Always had aol mail on my pc , opened the program and password and username always populated. Pressed signon and got into my emails. On 10/26/16, went to signon and got a "username or password" not recognized msg. Then tried thinking of my older passwords and new one just created a couple of months ago. None of them worked. I always make it point of selecting a same set of passwords for all my needs.
Then, contacted aol, this is where it got really annoying. Asked for anwser for security qst, easy one, and it did not match. Did not even know this qst was actually the one I choose. So in effect , can not get into my aol email, a rather important one , no security qst info is possible and aol will not help out.
Is it possible I was hacked?. A successful attempt to access my aol account settings and the info was changed along with the password so as to prevent me access to this account.
Does anyone know how to even try to get back into the aol account?. Is it possible at all?.
I have to say this is really annoying , as there are very important emails coming in there.

Read other answers

My yahoo email account has been sending spam email to my contacts. I've run spyware and malware to no avail, computer also running slower. In addition go a blue screen stating system error twice before I could run gmer, seems resolved now. Please help! Below are the requested logs..DDS (Ver_11-03-05.01) - NTFSx86 Run by babucarr at 14:20:29.65 on Sun 03/20/2011Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.290 [GMT -4:00]..============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exeC:\Program Files\Sling Media\SlingAgent\SlingAgentService.exeC:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exeC:\WINDOWS\System32\svchost.exe ... Read more

A:Email hacked

Hello and welcome to Bleeping ComputerMy name is etavares and I will be working with you to fix your computer.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Please take note:If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available.If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting. If you will be unable to respond (e.g. vacation, travel, etc.), please let me know ahead of time.Please refrain from running tools or applying updates other than those w... Read more

Read other 34 answers

I posted this several days ago but have had no replies so I'm trying again.

I'm not sure what is going on but many of my contacts from my address book have let me know they have received a virus from my email. I use Yahoo email and do not know how to rectify this. I have changed my password but other than that what other steps should I be taking? Is there any way to verify my email is now clean. I have sent emails to myself without a problem. Some people have received a link that when opened attacks their computer. I have also recieved similar emails with links in the past that I immediately delete. These have come from people I am familiar with but do not communicate with. I would greatly appreciate any help on this. I have run my Internet Security several times and have not found new threats. Thanks.

A:Email Hacked

Closing duplicate, please reply here:



Read other 1 answers

my email was hacked and it tried to send a virus to all the people in my contact list.....does anyone know how i can fix this problem?

A:My email was hacked

Change your email password.

Read other 2 answers

My wife's email keeps getting hacked - sending out spam emails to her contacts. She has changed passwords numerous times. It has happened twice in the last 2 weeks. Any suggestions to make this stop besides shutting down the whole account 100%? I am using Avira virus protection.

Thanks for any suggestions.

A:Email keeps getting hacked

Read other 7 answers

i've been trying to find out from isp who accessed my email.  a subpeona was sent to them and their legal dept says the information doesn't exist.  could this be true?  This happened 2 1/2 years ago and can't get anywhere with cablevision.

A:someone hacked into email

It's quite possible that the evidence is gone. It would depend on your ISP's records retention policy. Some keep records for as little as 6 months some as long as 24 months or more. You would need to get a copy of their retention policy to verify.

Read other 1 answers

Hi, I've recently started receiving hundreds of mails which all contain the [email protected]!zip virus. Does this mean my OE has been hacked and all my contacts are receiving them also? or is it one of my contacts who has been hacked? I've had one of my friends complaining that since I sent him some mails, he's getting hundreds of these mails and he's not happy!

I've got an ADSL modem/router with built in firewall and AVG so I've not been infected but its just a pain receiving all these mails - is there any way of stopping them apart from setting the rules to delete them as they come in?

Also, could anyone point me in the direction of a 'Firewalls for Idiots' article/document/web site as I don't really understand them that well!

Thanking you in advance,


A:email hacked?

The fact that you know what attacked you makes me think that you areprobably nfectd o.

Better safe than sorry; Read all of the instruction on posting an HJT log..there are stuck threads in the HJT Help forum. Manwile, I'll move your thread over there, so your log will get qucker attention.

Good hunting!

Read other 7 answers

I made a new email address to replace my old one, but it was also hacked. It sent a virus to everyone in my contact list. What should I do?

A:My email was hacked again.

Read other 16 answers

I got an email that looked like it was from myself. I don't know if its coming from my smartphone with spyware or my laptop or my computer.

Here is the full email header.

From "[email protected]" Sun Oct 19 07:38:06 2014
X-Apparently-To: [email protected]; Sat, 18 Oct 2014 23:13:15 +0000
Return-Path: <[email protected]>
Received-SPF: none (domain of signum-gmbh.de does not designate permitted sender hosts)
X-YMailISG: f6.et4QWLDvNSnNmfrLC34SwsP02U5h7yjuyHsW_0ZayZRNr
kc0LDgy80HZre9KjoMHFUaDWpdhpuNHkfkLXXpxm__X34... Read more

A:Hacked email or just looks like it?

I don't know if its coming from my smartphone with spyware or my laptop or my computer. Click to expand...

Which one was in South Korea today? Search for the Originating-IP ( and you'll see why I asked that.

The mail addresses are spoofed; it has nothing to do with any of your devices; and all you can do about it is hope that you don't get too many such messages.

Read other 1 answers

Hi there,
A few days ago when I checked my email I had a bunch of returned emails that were undeliverable which alerted me to the fact that my email account had been hacked. Since then my computer has been running very slow and freezing. I think I have the email back up and working but I'm now sure how to fix any other damage that has occurred and how to prevent this from happening again in the future.

I can post a copy of one of the returned emails here if that helps.


I'm running windows 7 home premium 64-bit and have Norton 360 and Emsisoft anti malware.

A:email hacked

Read other 16 answers

Hi everyone~

Here's the problem:

I've received a couple of emails from a friend who did not send the emails. Somehow her email address is being used on another computer somewhere. In fact she has even received an email from herself!

The email contains a simple link. Because it was from my friend I opened it and saw it was simply an advertisement for various medications etc.

I telephoned my friend and she realized that her email address has been compromised. That is when she told me she had even received an email sent to her from her.

She has changed her password hoping this will rectify the problem.

1. Will this remedy her problem?
2. Should I block her address?
3. Hasa my own email account been compromised? I've run Ad-Aware, Norton's anti-virus and nothing as come up. I've also used a couple of PC "cleaners" to rid my computer of any junk. Having not detected anything am I okay or have I been infected because I accidentally opened up the email she sent to me with the link on it?
4. Should I change my email account password or am I okay?
5. Is there another security program I should run to do a more thorough check?
6. Are these emails originating from my own computer since she has nothing in her "sent" box to show that they came from her computer? How can I find this out.

I'm hoping I'm not going to have to reformat my entire computer. If more information is needed please let me know. I'm not super technical... Read more

Read other answers

I received an e-mail purportedly from someone I know inviting me to look at an internet link which was all about employment in the US. I use Yahoo and have done for many years. I did not reply to this e-mail, but I have now received several delivery failure notices about the same link being sent to contacts with invalid addresses but still in in my address Book so I presume my addresses have been hijacked. I have tried to download DDS in accordance with the "New Instructions" but the page just crashes. I have run malabytes and my AVG (free) anti-virus scan which both showed no threats. Super anti-spy Ware showed 300 tracking cookies 50 of which were quarantined. I have changed my e-mail password Can I/should I take any further action about this please? I am running windows X P.

A:Hacked email

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and

Having problems with spyware and pop-ups? First Steps

a link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers

My AOL emailed was hacked and sent spam to everyone in my email address book. I ran DDS.SCR and here is my log. I also ran GMER and attached the logs. Please advise.


DDS (Ver_11-03-05.01) - NTFSx86
Run by Mark at 11:57:53.91 on Sat 04/02/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2047.1356 [GMT -7:00]
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.... Read more

A:AOL email hacked

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

A guide and tutorial on using ComboFix

Please read all the information carefully! If using Windows XP you should ensure you install the Recovery Console.

You MUST disable your AntiVirus and AntiSpyware applications - please read this thread as a guide. They may otherwise i... Read more

Read other 6 answers