Over 1 million tech questions and answers.

Email sending from account

Q: Email sending from account

Email's began being sent from my AOL account last night. I've ran Spybot and SuperAntiSpyware - and nothing found. More email just sent. Please help.
-------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:50:42 PM, on 12/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Common Files\AOL\1144454202\ee\AOLSoftware.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\AOL 9.5\waol.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\AOL 9.5\shellmon.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3ef64538-8b54-4573-b48f-4d34b0238ab2} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1144454202\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.5\AOL.EXE" -b
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - C:\Documents and Settings\All Users\Application Data\AOL\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: StumbleUpon - {75C9223A-409A-4795-A3CA-08DE6B075B4B} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/SKIP-BO%20Castaway%20Caper/Images/stg_drm.ocx
O16 - DPF: {1A1F56AA-3401-46F9-B277-D57F3421F821} (FunGamesLoader Object) - http://aol.worldwinner.com/games/v46/shared/FunGamesLoader.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} (PogoWebLauncher Control) - http://aol.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
O16 - DPF: {3BA3B159-7533-4F96-A2CE-EE5894BBD3D5} (Scanner.SysScanner) - http://i.dell.com/images/global/js/scanner/SYSSCANNER.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com/SnapfishActivia.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://aolsvc.aol.com/onlinegames/trydinerdash2/DinerDash2.1.0.0.67.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1171237460110
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) - http://www.superadblocker.com/activex/sabspx.cab
O16 - DPF: {BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19} (CPlayFirstddfotgControl Object) - http://aolsvc.aol.com/onlinegames/free-trial-diner-dash-flo-on-the-go/ddfotg.1.0.0.33.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/tryaces/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C93C1C34-CEA9-49B1-9046-040F59E0E0D8} (Paint Control) - http://www.worldwinner.com/games/v43/paint/paint.cab
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} (Java Plug-in 1.6.0_11) -
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} (Java Plug-in 1.6.0_12) -
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} (Java Plug-in 1.6.0_13) -
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} (Java Plug-in 1.6.0_14) -
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} (Java Plug-in 1.6.0_15) -
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/SKIP-BO%20Castaway%20Caper/Images/armhelper.ocx
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/webgames/popcaploader_v10.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5592CF26-A546-46E3-BF68-3CE9FF33B36D}: NameServer = 4.2.2.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = um.umsystem.edu,missouri.edu
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: SearchList = um.umsystem.edu,missouri.edu
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = um.umsystem.edu,missouri.edu
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)
O23 - Service: SysEnforce - Unknown owner - C:\PROGRA~1\TRISNA~1\SSI\SYSENF~1.EXE (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 15941 bytes

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Email sending from account

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 67.6

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_14
Run by EL Rey at 20:49:42 on 2011-11-15
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3039.821 [GMT 2:00]
.
AV: Norton AntiVirus *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton AntiVirus *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\system32\srvany.exe
C:\Windows\KMService.exe
C:\Program Files\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe
C:\Windows\system32\conhost.ex... Read more

A:My email account is sending emails

Hello and welcome to TSF.

Please note that more than one round may be needed to properly eradicate malware. In co-operation with the cleaning process, please: do not uninstall/install any programs unless asked to do so, to make it easier on us as it is more difficult when files/programs are appearing in/disappearing from the logs;
do not run any tools or scans other than those requested;
follow all instructions in the order they are presented;
if you have problems with or do not understand the instructions, ask before continuing;
stay with this thread until given the All Clear, as absence of symptoms does not always mean the machine is clean;
do not attach any logs/reports, etc.. unless specifically requested to do so.
All logs/reports, etc.. must be posted in Notepad making sure the word wrap is unchecked. (In notepad click format, uncheck word wrap if it is checked.)
Also note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

=================

One or more of the identified infections is a backdoor trojan.

This type of infection allows hackers to remotely control your computer, log keystrokes, steal critical system information, and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, including your email p... Read more

Read other 2 answers
RELEVANCY SCORE 67.6

hi
opened my hotmail account today to find that someone has sent emails to all my contacts 3 times over this afternoon. my email account is linked to my wifes account which has some sensitive information in it.
the email sent see below: has anyone come across this? can anyone please advice?

Dear friend,
Have a good day .
welcome you to browse our website: www.ekantoy.com ,We are mainly sell electrical product,such as digital cameras, mobile phones, LCD TV, the Xbox, laptops, DV, MP4, global positioning system,and so on. All projects are 12 months of international guarantee. If you want to buy these goods, please contact us freely. our company would like to offer you/you company more better services .and any other concerns,you can sned us email for details

A:email account sending out spam

Moving to Am I Infected

Read other 2 answers
RELEVANCY SCORE 67.6

Been searching for an answer for this for an hour. I have three accounts in WLM. One of them is not working properly.
FYI I had this same problem when backing up my system last year. I never resolved it and just lived with it. Now I am setting up a new computer and the problem is still here.
When I reply to a message in this account it reverts to sending it with the default email. So it does not include the signiture and does not send from the correct account. The trick is it only does this with the transfered/backed up emails. Since I've setup my new computer and configured the three accounts in WLM I have two new emails in that account. I can send from those just fine and windows recognizes the account I'm sending from and puts in the proper signiture. So it only does it to the "old" emails that I backed up. For some reason WLM is not properly reading those "old" emails and recognizing the account they are from.
Again this happened a year ago but I just lived with it. As after a few days I would be replying to new emails and it would work fine. If I went back and tried to reply to an email that was "old" or "backed up" it would revert to sending with my default email just as my new computer is doing now.
Any WLM geniuses out there?
Thanks

A:WLM sending email from default account

Hi bosoxwin, welcome to Seven Forums.
Please post a full page image of WLM without showing your mail address.
Screenshots and Files - Upload and Post in Seven Forums

Read other 2 answers
RELEVANCY SCORE 66.8

My yahoo email account is sending out spam...please can somebody help as i am getting nasty messages now because of it...
i have done a hijack this log...thanks in advance x
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:42:35, on 26/04/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\HP... Read more

A:My email account is sending out spam (hijackthis log)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the ... Read more

Read other 2 answers
RELEVANCY SCORE 66.8

One of my email accounts is sending spam to not just the contacts on the account, but many other addresses of emails I received or sent to people.

I checked in the "sent" foler, it doesn't have a record of the spam email that was sent; isn't it very possible I have malware?

The problem is that I use 2 PC's at home and have signed into that email account on different occasions. Upon doing virus scans with MBAM and SAS on both PC's, they found nothing.

What can I do about this? Please, I really need help please please please!

A:Email account sending spam - is it malware?

I checked in the "sent" foler, it doesn't have a record of the spam email that was sentMost likely it's not you then.Someone else computer, who has you in their address book, may be infected.What type of email are we talking about here?

Read other 1 answers
RELEVANCY SCORE 66.8

A particular user on Exchange server 2003 gets this error when sending external email:

You do not have permission to send to this recipient.
server name.domain.local #5.7.1 smtp;554 5.7.1
[email protected] unknown.

Have compared the settings to a working one, and all look OK. We also tried recreating the user profile and email address but it still doesn't work.

Any suggestions?
 

A:Outlook account not sending external email

As you got the error back from the server, there is nothing wrong with the client or Outlook. It is probably some setting on the server side, blocking this specific computer, user or recipient.
 

Read other 1 answers
RELEVANCY SCORE 66.8

My business email has sent out over 7000 messages, not from me, in the past week. Since it is my professional email, I absolutely would prefer not to have to change email addresses, since I am in sales. From what I have read on your forums, this is 'spoofing' and my only option might be just to stop using this email and create a new one. I don't want to do that, if possible. The spam doesn't show up in my Sent email. I have read your spoofing help requests and have done what you have suggested, shy of sending a HiJackThis! log. How do I find the free Hijackthis to have you tell me what the heck I am doing wrong Edit: Moved topic from Vista to the more appropriate forum. ~ Animal

A:My business email account is sending out spam

Hi, Have a read through this post and follow the instructions to posting a HijakThis Log.Post your log in this forum to have it checked over byt the HJT Team

Read other 1 answers
RELEVANCY SCORE 66.8

Hello,

A friend of mine is having a problem that I am aware of because I am on the receiving end! He has an email account with AOL for years and I'm sure he doesn't want to lose it. Yesterday, I received four emails from his email address that he didn't sent.

Comparing who they went to, each group was a bit different but I was in all four.

What does he do now? He is worried about any compromise to his AOL account and when I checked with AOL they were quick to call it "spoofing." He's got a lot at stake so he needs to make the right decision with your help!

Thank you for your time!

C Shirey
 

A:Friends AOL email account sending out emails without him!

E-mail Spoofing

E-mail Spoofing

How do Spammers Harvest Email Addresses
 

Read other 1 answers
RELEVANCY SCORE 66.4

"This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed"
I only get this when i send from my long time email address a msn.com one. I cant find where to check the pop settings on this laptop or dont even know if that would work. Can you help me understand why i cant send or reply from this one address of mine, all the others work fine. just this one email address of mine that has been mine from the beginning of internet in my life.
Thank You , Nancy

A:Email from one email account not sending

What are you using to manage email? . . Outlook Express? . . Outlook? . . Windows Mail??

Read other 19 answers
RELEVANCY SCORE 66.4

"This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed"
I only get this when i send from my long time email address a msn.com one. I cant find where to check the pop settings on this laptop or dont even know if that would work. Can you help me understand why i cant send or reply from this one address of mine, all the others work fine. just this one email address of mine that has been mine from the beginning of internet in my life.
Thank You , Nancy

A:Email from one email account not sending

What are you using to manage email? . . Outlook Express? . . Outlook? . . Windows Mail??

Read other 19 answers
RELEVANCY SCORE 66

New here, so if I'm in the incorrect spot, please forgive me.

I've been sending mail on my thunderbird account (which I've had for years now) and was confused because of no replies to urgent mails. One sent to my hubby was questioned...why did I send it from our deleted business account?

OK....all my 'sent' messages are from me. But for some reason, even though I deleted the business account from Thunderbird MONTHS ago when our business was dissolved, the 'sent from' address is from the deleted account. MY account says it was sent from me, but the recipient has the deleted address listed as the sender.

HELP! I've changed nothing recently! And I can't even get to the old address on Thunderbird, but it is still active on the original G-mail for record keeping purposes only.

A:[SOLVED] Thunderbird email sending from deleted account?

Something that can be a little confusing about Thunderbird, is that the settings for outgoing mail servers is separate from incoming.

In the account settings for Thunderbird, at the bottom, should be something about SMTP or outgoing servers. I forget off the top of my head, and I'm at work where I'm stuck with Outlook. In any case, you need to go in there and make sure that the settings for the defunct business account are deleted, or at least not set as the default.

Read other 6 answers
RELEVANCY SCORE 66

Hi - I am running Outlook 2010 on a Win 7 Professional 64 bit system.

I have been running basically the same configuration successfully for over a year now, with multiple email accounts. Everything worked fine up until this morning, when I was sending a series of emails with attachments. Each email's attachments totalled up to 6 mb, and the grand total of all of the attachments was about 24 mb.

Everything went smoothly up until my last email, and it just sat in my outbox and wouldn't go anywhere. I eventually sent it with a different account with a different ISP.

I have tried sending other emails on the same account, some without attachments, some with small attachments, but it appears that the account is "broken" for sending email. I can still receive email on all accounts and send email from every other account.

I have double-checked the settings for the troublesome account and when I use the Test Account Settings button everything appears to work fine as it successfully sends the test message.

I found a reference to a built-in limit for Outlook attachments of 20 mb, and ran the Microsoft fixit which removes that limit, but it had no effect.

One curious thing is that when I hit the send button, which places the email in my Outbox, the email does not have the italicized font which indicates an unsent message as was always the case up until now.

Any hints would be most appreciated -

Many thanks

A:Outlook 2010 Problem sending email from one account

I had a look at the Outlook add-ins that were active and disabled the iCloud and iTunes add-ins. Everything seems to be working at this point.

There was an iTunes update a day or so ago. During the installation Apple does not even mention that they will be messing with your Outlook installation.

Once again Apple screws up Windows applications.

Read other 2 answers
RELEVANCY SCORE 66

My computer sends spam emails to others in my contact address book. Also it takes long time for my computer to shut-down.
DDS (Ver_09-06-26.01) - NTFSx86
Run by jl at 10:13:49.26 on 07/19/2009 Sun
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.936.86.1033.18.1014.594 [GMT -4:00]

AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files&... Read more

A:my yahoo email account sending spam emails

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 66

Thunderbird email sending from deleted account?
New here, so if I'm in the incorrect spot, please forgive me.

I've been sending mail on my thunderbird account (which I've had for years now) and was confused because of no replies to urgent mails. One sent to my hubby was questioned...why did I send it from our deleted business account?

OK....all my 'sent' messages are from me. But for some reason, even though I deleted the business account from Thunderbird MONTHS ago when our business was dissolved, the 'sent from' address is from the deleted account even though it shows as the account from my personal account on my mail page. MY account says it was sent from me, but the recipient has the deleted address listed as the sender.

Frustrating...especially since the past two weeks I'm wondering why people aren't answering! When the hit the 'reply' button, it's going to the Thunderbird's deleted account. Why is it sending from the deleted account when it's not on Thunderbird any more?

HELP! I've changed nothing recently! And I can't even get to the old address on Thunderbird, but it is still active on the original G-mail for record keeping purposes only.

A:[SOLVED] Thunderbird email sending from deleted account

Hi,

I'd start by setting the account up again from scratch using your same settings and possibly to double check, send an email from the g-mail web based mail. Let us know if it works or not.

Steve

Read other 3 answers
RELEVANCY SCORE 65.2

I have been having problems with computer slowing down. Also my friend called me asking if i was sending emails everyday with strange titles. I have not been and do not know what is wrong or how to fix the problem. This is the information I have the DDS attach file did not come up so I am going to just paste everything that the program placed on my desktop. I also did the rootrepeal scan and will attach that file.
I also attached Hijack this txt file report.
DDS (Ver_09-11-23.01) - NTFSx86
Run by Jeanne Smith at 22:13:08.39 on Sun 11/22/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.1924 [GMT -5:00]

AV: Norton 360 Premier Edition *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 Premier Edition *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartup... Read more

A:Friend says getting multiple emails everyday from my email account and I am not sending them

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 65.2

All

as suggested by elfasso, below is the dds log for my pc (windows xp home sp2) - as stated in the topic description, i did have remote access issues that i believe have been resolved (changed yahoo password and all account access/notification info), but now am suspect of anything that may be associated with said invasion (virus, botted, ?) that still may be alive inside of my machine....

i scrubbed it out with as many antivirus and maleware programs as i could find free 30 day susbscritions for (norton, eset, avast, superantispyware, malewarebytes) as well as the most recent microsoft malicious removal tool...

this probably should not be considered as a top priority problem, but if one of you experts find a few minutes to go over the dds log and let me know if you think I'm still open to any potential threats, i'd really appreciate it...
be forewarned that i do use utorrent for music downloads as I'm sure that'll be a potential problem right off the bat...

thanks again and cheers!

Brian
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
Run by Brian Bokor at 12:47:16 on 2012-06-27
.
============== Running Processes ===============
.
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=fiber&cd=7.0unattached&bm=ho_central
uSearch Page = hxxp://www.google.com/hws/sb/dell-usuk/en/side.html?channel=us
uDefault_Page_U... Read more

A:yahoo email account sending trojan horse emails

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Lets start with this.Please DownloadTDSSKiller.zip>>> Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.If an infected file is detected, the default action will be Cure, click on Continue
If a suspicious file is detected, the default action will be Skip, click on Continue
If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) to your desktop. Double click the aswMBR.exe to run it Click the "Scan" button to start scan. Upon completion of the scan, click Save log, and save it to your desktop. (Note - do not select any Fix at this time) <- IMPORTANTPlease post the contents of that log in your next reply.There shall also be a file on your desktop... Read more

Read other 2 answers
RELEVANCY SCORE 65.2

Hi,

I think I am infected. My email account has been sending out spam to all of my contacts and all of my contacts were deleted. Plus my computer is no painfully slow.
Any help or advice?

A:Email account hijacked and sending spam and very slow computer

Hello and welcome Let's please run these. For XP/2K/2003/Vista onlyFirst run part 1 of S!Ri's SmitfraudFix Please download SmitfraudFixDouble-click SmitfraudFix.exeSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.http://www.beyondlogic.org/consulting/proc...processutil.htmNext run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will auto... Read more

Read other 19 answers
RELEVANCY SCORE 65.2

Hi

I am running Windows XP Home SP2 - Problem started June 9 10:44am...my personal yahoo email account sent out emails to all of my contacts in my Yahoo email account with links that were found to either contain a trojan horse or send anyone who clicked on the link to a site with a trojan horse. There was no subject in the email, simply a link. I was running Avast anti-virus at the time. I have since ran Avast, Norton, Eset Nod32, and the Windows Malicious software removal tool as well as both SuperAntiSpyware and Malwarebytes - all run in both regular and safe mode.

Avast found Java:Agent-AXI and sucessfully removed it...then after running Norton AV, a suspected virus was detected in sdfix.exe and sucessfully removed...then after running Superantispyware, i received trojan detections in C:\i386\compimpxml.dll and c:\windows\system32\compimpxml.dll both were sucessfully removed, then I ran the Windows Malicious Detection software and it found and removed Trojan JS:\Hiloti.E and JS:\Hiloti.F...

well, during all of this work, my damn PC somehow sent out 2 more spam emails (one Sunday Night at 8:26 and another just today at 4:22) to all of my contacts once again containing links infected with trojan horses! So since June 9, my PC has sent out 3 different trojan horse email to all of my yahoo account contacts...
BELOW IS A COPY/PASTE OF THE LINK I WAS SENT BY THIS VIRUS:

Message flagged Tuesday, June 19, 2012 4:23 PM
http://www.mylas... Read more

A:yahoo email account sending trojan horse emails

1. Follow the instructions "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help" and create a DDS-log. ===> http://www.bleepingcomputer.com/forums/topic34773.html2. Create a new topic into the forum "Virus, Trojan, Spyware, and Malware Removal Logs" and then past the DDS-log into that topic: ===> Go to http://www.bleepingcomputer.com/forums/forum22.html and click on "Start New topic"

Read other 4 answers
RELEVANCY SCORE 65.2

I'm using XP and Outlook 2003. I recently changed email accounts (from netspace to bigpond). Netspace kept sending and receiving for a while, then stopped. I deleted the netspace account, using the 'email accounts' wizard, but Outlook is still attempting to send and receive my old netspace account. I thought a stuck read receipt may be the problem, but no read receipts are showing up. So I'm getting continual pop ups saying 'Enter Network Password' while Outlook is open, as it is trying to connect to that non-existant account. HELP.
 

Read other answers
RELEVANCY SCORE 65.2

In the last 2 weeks a couple emails have been sent out by my Yahoo email address to my entire contact lists containing different links which are probably viruses or some other harmful info. These do seem to be coming from my computer as the messages are not showing up in my sent folder. However, I am trying to make sure it is not something on my end.

My OS is Vista home and I mostly use Firefox 3.0 for browsing. I also run AVG 1 time a week and it has picked up 2 potential trojans in the last 2 weeks.

Thanks in advance for any help!

Here is the DDS info:

DDS (Ver_09-02-01.01) - NTFSx86
Run by Mike at 9:47:55.35 on Sat 03/07/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_12
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2046.835 [GMT -6:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:&#... Read more

A:Yahoo email account is sending out virus links to my contacts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

Read other 2 answers
RELEVANCY SCORE 65.2

So, I access Yahoo email from several computers, including a mac and also my Android phone.  Several months back, a lot of contacts were receiving SPAM like stuff from my account.  I changed my password and all was good.  Today, two people informed me that they were receiving random stuff from my account.  I changed my password again.  Any thoughts on this?  Thanks!

A:Problem with Yahoo Email sending out random stuff from my account.

Most likely your email address is being 'Spoofed.' It's not really being sent from your account. Check your Sent Items Email folder. Google 'Email Address Spoofed' for more information. The mail your friends are receiving usually only contain a link to a questionable website. Advise your friends not to open anything suspicious.
 
Here's one article: http://www.pcworld.com/article/253305/minimize_your_exposure_to_email_spoofing.html

Read other 1 answers
RELEVANCY SCORE 55.6

Hello,

Here in the UK, Orange turned off their email address system. I have a GMail account and want to use this in Outlook 2007.

However, I have a POP account which receives but does not send. It is for this reason, I use the GMail account from which to send, but then make my Return address to be that of my POP address.

Anyway, GMail is an IMAP account and Outlook tries to send mail from the POP account as opposed to the Defaulted IMAP GMail account.

For Outlook 2010, 2013, etc, there are Registry fixes for this. I cannot for the life of me find a Registry fix for 2007. Does it exist, with instruction?

Many thanks in anticipation.

Win 7, Office 2007 etc etc.
 

A:Outlook 2007 - Make IMAP account default sending account

I have moved a few people off of orange over the last few weeks and then closed down the account on outlook 2007 and 2010

If you have the old orange still set as default account - change to the gmail account as default
also switch off the send and receive - not needed for IMAP

otherwise , not sure what you are trying to do

You can also delelte the account and the POP email will remain - BUT backup and test the PST file first
 

Read other 1 answers
RELEVANCY SCORE 55.2

I use Outlook for email, from Office 2007 Professional because the accounting program and my Palm Pro PDA likes it.

Just recently I have had a couple of complaints that emails with a video attached I have forwarded have been delivered to the addressee in excess of 30 or 40 times.

The latest was last night when one of my sons said he had received it 104 times, and another friend in the USA 99 times, needless to say both aren't happy, the video was a wmv (3mb).

When my son called me a an hour or so later it was still in my outgoing mail box, obviously because it was still sending.

I have run full AV scan using Esset Nod32 which came up clean, so I&#8217;m at a loss where else the problem is or where/what to look for.

Thanks for reading&#8230;..Any clues/help would be appreciated.
 

Read other answers
RELEVANCY SCORE 54

When I click on a hyperlink I am getting a pop up window that say's choose profile atop and profile name with ms exchange settings in a drop down window but I don't know how to configure. I would like to set my yahoo email account as the default email account-I don't want to download my email on this account. How can I go about setting this up?

thanks

z
 

A:How do I make my yahoo email account my default email account?

Read other 11 answers
RELEVANCY SCORE 52.4

Hi,l

My antivirus software is showing that I'm sending email that I'm not sending! I don't even know where it is sending from. And it is yucky SPAM headlines that it looks like it is sending. I use AVAST anitvirus. I'm on a wireless laptop running xp home. Microsoft outlook express and hotmail and gmail are the email accounts that I use.

What to do?
 

A:hijacked: sending email that I'm not sending

Read other 16 answers
RELEVANCY SCORE 51.6

hello:
 
i have been trying to fix my email/outlook spam issue.  emails are going out WITH my actual email address, sending emails to people in my contacts, etc.
I also have been getting a ton of spam emails myself.
 
I use:
 
-Windows 7 Pro
-64 Bit
-Outlook 2010
-I have our own domain name email address, that is hosted by Frontier
 
Odd thing:  I changed my password for my email, but my outlook kept sending/receiving with the old password.
When I tried to update  the new password in outlook (which I verified by using the webmail versus outlook), it would not accept it.
 
Thank you for any help you can provide.

A:email / outlook is sending emails with my email address

Here is my FRST logs:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-06-2016 02
Ran by LS (administrator) on LS-PC (27-06-2016 12:22:27)
Running from C:\Users\LS\Downloads
Loaded Profiles: LS (Available Profiles: LS)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
(Apple Inc.) C:\Program Fil... Read more

Read other 2 answers
RELEVANCY SCORE 51.6

Intermittently, Outlook 2007 will crash while sending an email and, needless to say, the email is not sent. However I wanted to know if there is a temp or backup copy of that mail anywhere. I've looked in drafts and it's not there.

I've sometimes typed a very long email and then lost the whole email when Outlook crashes so I just wanted to know if, like Word, there is a temp file that may be created.

Thanks.
 

A:Outlook 2007- crash while sending email - where does the email go?

Hi cp, welcome to TSG. Do you have Autosave enabled for Outlook? If not, perhaps this link will help.
 

Read other 2 answers
RELEVANCY SCORE 50.4

Good morning, people,

One of my users here is having a wierd issue with her Outlook program...Every time she sends an email out, a .txt file of that email is sent as an attachment to that email.

So an email saying, "Greetings!", has the text file attached that says, "Greetings!".

Any ideas?
 

A:Outlook sending a copy of email w/email

Must be set to send in both plain text and HTML? But I thought in that case that it was done the other way around...

Turn off one or the other in the E-mail options, would be my guess.
 

Read other 1 answers
RELEVANCY SCORE 49.6

windows live mail email account for btconnect.com - not Office 365 account
Hello

Opereting system - Windows 7 Home Premium.

I use windows live mail version 9.

The account on there at the moment is an Office 365 account for btconnect.com,

I wish to set up two other email accounts which must not be Office 365 accounts but still using btconnect settings.

Can you provide full setup details including server details and details of port settings.

Any help would be much appreciated .

Regards

FLYNNE
___________________________________________________________--
 

A:windows live mail email account for btconnect.com - not Office 365 account

Incoming mail (POP3 or IMAP) server field, enter pop3.btconnect.com.

Outgoing e-mail server (SMTP) name field, enter smtp.btconnect.com.

User name: from your btconnect account Just use the part of the email before the @btconnect.com
Check the Outgoing server requires authentication box.
 

Read other 1 answers
RELEVANCY SCORE 49.2

I was living with a relative who had a comcast account. She allowed me to put my email address on that account. Relative moved away, closed the comcast account. I opened up a new comcast account and wanted to transfer my email address from the first account to my new account. How do I do this?
 

A:transferring email addresses from one Comast account to another comcast account

If the account was closed then the messages are likely gone. Unless you have them stored in an email program on your computer such as Outlook, Live Mail, Outlook Express, Thunderbird, or something similar.
 

Read other 1 answers
RELEVANCY SCORE 49.2

I installed Windows 8 on Christmas Day and I skipped the email account setup parts. I never used any APPS yet, in fact I removed everything app-related from my start screen including notifications, etc.

I have used the Classic Shell so far, but today I thought I'd set up the Live email account login.

While I was setting up the app account I kept getting emails from the live account manager to confirm what I was doing and I confirmed each one.

The last thing it asked to 'Trust this PC'. I did so and my machine name appeared on my Microsoft account profile page under "Trusted PC".

But when I restarted I could no longer log in with my local account or the new Live email account.

I logged in as Administrator and saw that my local account name was changed from my username to <[email protected]>, my live account ID. It would not allow Administrator to change the account name or my password.

I tried to log in with the email and Live password, but it said I could not log in with his PC and that I need to resolve the issue with the live account on-line.

I had a password reset disk (USB drive) and I used it. It started up the reset wizard and I put back my old password. It finished with no error but I still could not log in.

Finally, I logged in as Administrator and restored my Acronis system image from yesterday. Then everything was back to normal.

I have no idea what happened, I was very careful doing each of these steps.

I see a clue, though, on the Mi... Read more

A:Setting up Live email account 'destroyed' my local account

What exact steps did you take when creating the live account?

Was this a new account? or did you use the switch to a Microsoft account?

I could not tell you what happened.

I have several Local and Live accounts on my system for testing, and I do not have Live Essentials installed
All of my accounts work perfectly. And across PC's, as I have a desktop also setup with a couple of different and same accounts.

It is possible that Chrome caused an issue. and it is possible you need Live Essentials to use chrome properly. I don't know as I forbid Chrome being installed on any of my PC's.

Read other 4 answers
RELEVANCY SCORE 49.2

It used to be not connected to any email account but when it updated to 8.1 I chose to get an email address for it, so now as a result, the password has to be 8 characters long and I have to use a PIN number , but that's still 4 characters, and I usually use one character password.

So how do I go back to the normal type of user account to use the 1 character password?

A:My user account changed to an hotmail-email account connec

Local Account - Switch to in Windows 8

Local Account Password - Change or Remove in Windows 8

Read other 2 answers
RELEVANCY SCORE 49.2

I have a new ASUS notebook and it uses Windows 8. On my home pc I have Windows Vista and was able to set up multiply email accounts in Window Live Mail. (my charter, my hubby charter, 2 school google accounts and yahoo)
I was able to read mail coming thru our main email acct (my charter), if an email came thru that needed to go to my hubbys account or another account I was able to drop and drag it to the other account listed on the screen.

I have most of my emails set up on my new ASUS notebook. Is there any way to drop and drag emails from one account to another? I can drag the email and hover over the new email account, but it does not drag it.

Thanks for any help. I am new to the notebook thing and windows 8.

Debby Durden

A:Move email from one email accout to another email account

If you are using Live Mail on both Windows 7 and Windows 8, use the instructions in this video - Windows 8 Tips: Moving Live Mail From Windows 7 - YouTube

This technique works WAY better than exporting and reimporting them.

Read other 1 answers
RELEVANCY SCORE 48.8

Hi,

Upgraded from Windows 7 to Win 10 and was loving it (was). Saw there was a mail app and thought that would be pretty handy. Signed in and since then, I have to log in to my PC as my email address and password.

I don't want that.

How do I revert my existing user back to a non-Windows live user, with a normal, local account and password?

I am happy to not use the Mail app if that's what it takes, but my concern is that the profile I have now has all my icons and docs and stuff and I don't want to go through the hassle of copying over the profile.

There must be a way to undo this change, but I can't find it.

Thanks

A:Signed in to Mail app - now account is my Windows Email account

Read other 1 answers
RELEVANCY SCORE 48.8

Hello.

I've been using Windows 10 for weeks. Until today, it started up just fine by displaying my name and no email address. This is exactly how I want it to be.

Today when Win 10 would not recognize a printer, in order to download an "app" to help with this, I was required to provide a Microsoft email account, which I did (an old Hotmail account I rarely use). Now when I restart or wake up the computer, that old Hotmail account appears as "Administrator". However, I do NOT want that old Hotmail email address associated with this computer.

How can I remove it and get back to logging in with NO associated email address?

NOTE: I do not want to delete the old Hotmail account; just want to remove it from my Windows 10 "Account" menu (My name + Hotmail address + "Administrator").

In case it's required to associate Win 10 with an email address, I use Windows Live Essentials with a company email address. I tried adding it via the "Other Account" option, but Win 10 said it did not recognize the email address I entered, sigh.

I saw threads with a similar question but not quite the same.

Thanks for any help!

A:Can I remove but not delete MS email account from user account?

You have converted your local user account to a Microsoft account. It's easy to switch back to a local account, just follow the instructions in this tutorial: Local Account - Switch to in Windows 10 - Windows 10 Forums

When you have switched back to a local account and you want to download another app from the Windows Store, follow the instructions in this tutorial (Method Two, Step 5) to keep using your local account to sign in to Windows and only use a Microsoft account to sign in to Store: Store - Sign in with Different Account in Windows 10 - Windows 10 Forums

A useful tutorial to learn the difference between a local account and a Microsoft account: Local Account or Microsoft Account - How to Tell in Windows 10 - Windows 10 Forums

Kari

Read other 1 answers
RELEVANCY SCORE 48.8

hello everyone, i have created email form using incomediawebx5 software, i have uploaded the forum in my website,, all looks ok in my website, when someone/ or i try to send a email using email form just to check its working or not, after click send button, i recieve this message,
All data will be send to email [email protected] once the website is been loaded on server,

i dont know how to fix this can anyone help please
 

Read other answers
RELEVANCY SCORE 48.4

Hi,

I've been receiving a dozen bounced back delivery failure notices to my email account for the past 3 days - [email protected] (this is representative) - such as the following.

I suspect that either my PC, smtp account or mail server has been compromised, but i'm not able to interpret via the bounced email whether the sender is just spoofing my email account. I've also tried to find a way to view outgoing mails on my Ensim server, but can't find a way.

The mail is a scam so i'm worried about legal consequences. Hope someone can help. Thank you.
Hi. This is the qmail-send program at brain.fpp.pl.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[email protected]>:
vdeliver: Invalid or unknown virtual user 'mun_ked'

--- Below this line is a copy of the message.

Return-Path: <[email protected]>
Received: (qmail 24794 invoked from network); 15 Jan 2009 11:48:08 +0100
Received: from dsl.static.85-105-17806.ttnet.net.tr (85.105.69.142)
by brain.fpp.pl with SMTP; 15 Jan 2009 11:48:08 +0100
Received: from [85.105.69.142] by mail.mycompany.com; Thu, 15 Jan 2009 12:54:06 +0200
From: "Shanna Thayer" <[email protected]>
To: <[email protected]>
Subject: LUX and premium class design and construction activity. Work proposals in Europe
Date: Thu, 15 Jan 2009 12:54:06 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-125... Read more

A:Somebody has been sending emails using my account?

First thing to do would be to inform your Internet provider about the situation.

Read other 9 answers
RELEVANCY SCORE 48.4

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:19:41 PM, on 3/13/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\ibmpmsvc.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\IPSSVC.EXEC:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exeC:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Microsoft LifeCam\MSCamS32.exeC:\Program Files\OpenVPN\bin\openvpnserv.exeC:\Program Files\Intel\Wireles... Read more

A:Somebody Is Sending Out Mail From My Account

Hello KCSunshine Welcome to Bleeping Computer! Sorry about the delay. We're all volunteers here, and it's been very busy. If you still need help, please post a new HijackThis log to make sure nothing has changed. Before posting the log, please make sure you follow all the steps found in this topic: Preparation Guide For Use Before Posting A Hijackthis Log <--link And I'll be happy to take a look at it for you. I also need to see a different type of log from Hijackthis: Run Hijackthis.Click on "Open the Misc Tools section".Next click on "Open uninstall manager".Press the button 'save list'. It will open a Notepad file.Place the content of that file here in your next reply.Thanks, for your patience.

Read other 1 answers
RELEVANCY SCORE 48.4

Hi WV,

Had the same problem with my Yahoo account, which passed the ekantoy message on to my Yahoo contact list on December 1st, 2008.

Fortunately for me, my Yahoo contact list is very small as I use Yahoo mostly for receiving "forwarding" jokes that some friends insist on sending and also for registering for and receiving newsletter mailings. But even with my small contact list, it was embarrassing to have this happen through my mail!

I have spent some time today looking for more information on this, so far without much luck apart from your posting. There are other reference out there to an older outbreak of hackers getting mailbox passwords and exploiting the contact lists, but little else about this latest variant.

One positive note - my other email, the one used for my important correspondence, has not yet exhibited any bad behaviour. This makes me suspect that this worm/virus/trojan targets Yahoo and Hotmail. I hope I am correct.

I will watch this post in hope that someone else can shed light on this and identify the "ekantoy" mail.

Read other answers
RELEVANCY SCORE 48.4

HI guys, I need some help!

Our company uses pop3 for email. We do not have an exchange server.

Locally, I have installed Office 2003 on all machines.

Most employees have multiple email accounts in Outlook.
From what I understand, when they begin a new message, Outlook should send it from whichever account I have set as the default. When they reply to or forward a message, it should be sent from whichever account the message was originally sent to. It does seem to be working this way for all but one user. It worked correctly for her in the past but suddenly, with no apparent changes, it is not.

She has 2 accounts, both using the same incoming and outgoing servers, but with different user names and passwords. When she chooses to create a new email, it defaults to sending with her default account. Ibelieve this is correct, and is not a problem.
But when she replies to or forwards any message, no matter which account it was sent to, it defualts to using her secondary account to send.

I have showed her how to select the correct account form the drop down before clicking on "Send" but I would like to understand why this is happening, and how I can get her Outlook to behave the same as everyone elses.

So far, I have rebooted, changed which account is defualt, and changed it back, updated Office, scanned for virus, and poked around every Outlook setting i can find. I haven't been able to find the problem.

Could the user's Outlook profile be corrupt? I know... Read more

A:Outlook Sending Account.

Bump!!!
 

Read other 1 answers
RELEVANCY SCORE 48

So far it's happened 3 times, each time it has I've ran malwarebytes and spybot to remove anything its found several times, but still it keeps happening, They seem to be sending links like this one 'hxxp://whereismaxnow.com/grc/rounds/reports/tmp/409/trade.html' and a zip file to everyone in my contacts.



.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_26
Run by ษำอ at 15:03:29 on 2012-03-30
Microsoft Windows XP Professional 5.1.2600.3.874.44.1033.18.3070.1623 [GMT 1:00]
.
FW: AVG Firewall *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\MP4 Player\mp4Player.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.e... Read more

A:Hotmail account is sending spam.

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 19 answers
RELEVANCY SCORE 48

My mum asked me today, why was I sending her spam mail and true enough, I checked my hotmail account and I've sent out 2 spam emails with links to a website.

In a panic I immediately changed my password and started virus scanning.
I have a paid NOD32 running on my machine, I also did a check with spybot and malwarebytes and all they found were some tracking cookies.
I also did a scan just before christmas with pandascan online scanner and that found nothing but cookies.

Now the only thing that's changed been then and christmas was me receiving a reconditioned Iphone 4, which has turned into a bit of a saga, the phone was sold by a reputable store chain, but when I tried to activate it on the 3 network, they told me the phone had been registered as "lost" so it had been blocked. I synced this phone up with my machine and itunes account before the truth came out.
Whether there's a connection I don't know.

I'm running windows 7 64-bit, but I did run gmer, most of the options were greyed out, but it didn't report anything suspicious.

I'm greatful for any help, I need to know how they got into my hotmail account

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24
Run by Darren at 21:07:18 on 2011-12-29
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.6135.2660 [GMT 0:00]
.
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivi... Read more

A:My hotmail account is sending out spam

BUMP, please

Read other 2 answers
RELEVANCY SCORE 48

heya,

Well it looks like a worm or virus of some sort has got into my hotmail account and has sent emails to everyone on my contact list. Quite crude emails at that... which is very embarrassing for me.

I have looked at a few users that have suffered the same fate after searching it on Google and have seen that some have run the program "Malwarebytes". So I?m not sure if this helps, but below is the log. It found 3 infected files... they have been quarantined but I?m not sure how important they are in the running of the Windows OS.

*********************************************************

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org
Database version: 7924
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
12/10/2011 6:36:54 AM
mbam-log-2011-10-12 (06-36-44).txt
Scan type: Quick scan
Objects scanned: 182681
Time elapsed: 7 minute(s), 23 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> No action taken.
Registry Data Items Infected:
(No malicious items detected)
Folders ... Read more

A:My hotmail account is sending out spam to everyone

Hello and welcome to TSF.

If you still require assistance, please follow the instructions in our sticky topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please note that the forum is very busy and if I don?t hear from you in three days this thread will be closed.

Read other 18 answers
RELEVANCY SCORE 48

Hi everyone,

as you probably read in the title of my post my hotmail account is sending spam to my contact list. I'm pretty sure you've encountered this problem already because it is obviously spreading like germs .. I usualy never click on any links of suspicious mail, but i got caught a couple weeks ago as i received one from a client that i had just sent an e-mail to .. i thought he was replying .. now my account is doin it and going crazy with it ..

I have to keep my e-mail account (it's on my business cards, magasines and flyers )

Thanks alot for being there for people like me that obviously don't really know what to do in these situations .. i'll be waiting on a reply ..

thanks alot

A:Hotmail account sending spam

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 48

Hello,
 
Yesterday while checking out my college e-mail account, I noticed an e-mail from another e-mail account used on this computer, it was some wierd .html link that I did not click. So I logged onto Aol(American Online) and then went to the spam sending e-mail account and checked the "sent" message and sure shooting, on 7/5 it sent 3 messages each with 10-12 different recipents on each message, strange thing is, they are people I know but, I never contacted them on this computer.
 
My computer runs Windows Vista Home premium, 32bit Os
 
I've ran MSE, nothing
Ran Malwarebytes(expired trial), nothing.
 
A couple weeks ago I had issues with a "alueron.gq" trojan, managed to get rid of it before it did any harm though, I can post the old thread if needed.  I'am wondering if the computer is still infected possibly. I know Alueron types like stealing information. 

Hope I can get to the bottom of this.
 
Sincerely
 
Dude
 

Read other answers