Email adress is compromised.

[toyboyroy]

Not sure if this is the right place to post this query.

For some time now I am sending out emails to all my contacts enbloc without my knowledge and the content of the messages there in is gibberish.

But now and then they are returned as not delivered which is OK.

How can I stop this happening,??

I am sure that there must be a bug in the system although I have gone through the motions of debugging my PC.

I can copy and paste the return message but I would have to delete my contacts details for obvious reasons.

Could change my email address but then that can be a pain in the arse.

Has anybody have had such experience of this and know how to stop it.

Regards

Roy

[nob]

Virus at a guess, scan with all your detection software.

Is it showing in your sent folder. What mail client are you using?

[petersmyth1]

Apr 1, 2015 20:07:17 GMT toyboyroy said:

For some time now I am sending out emails to all my contacts enbloc without my knowledge and the content of the messages there in is gibberish.


I am sure that there must be a bug in the system although I have gone through the motions of debugging my PC.

Roy I think it is a bug of a different sort. I think your puter's been hi-jacked.

www.computerhope.com/issues/ch000578.htm

I hope I'm wrong but it's got the symptoms. The above link should help a bit but you might need professional advice.

[Ratae]

The first thing that I'd do is to change my email client password!

[toyboyroy]

Sorry people I have been tied up these last two days.


None of the bogus sent messages are in my sent folder.


I have copied and pasted below what was returned to me unsent today......



2015 at 5:34

5:34




Message starred

Mail delivery failed: returning message to sender


FROM Mail Delivery System TO You


Show Details

From
Mail Delivery System




To
[e-mail]




This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

[e-mail]
Domain case-advies.nl has exceeded the max emails per hour (2/1 (200%)) allowed. Message discarded.
[e-mail]
Domain case-advies.nl has exceeded the max emails per hour (2/1 (200%)) allowed. Message discarded.
[e-mail]
Domain case-advies.nl has exceeded the max emails per hour (2/1 (200%)) allowed. Message discarded.

------ This is a copy of the message, including all the headers. ------

Return-path: <[e-mail]>
Received: from [186.130.96.18] (port=6522 helo=case-advies.nl)
by web05.webruimtehosting.nl with esmtpa (Exim 4.85)
(envelope-from <[e-mail]>)
id 1YdtIx-0007yI-1h; Fri, 03 Apr 2015 06:34:03 +0200
Message-ID: <[e-mail]>
From: "royston.galvin" <[e-mail]>
To: "UK Holidays in The Sun Queries"
<[e-mail]>,
"lz F 3895552 2 0" <[e-mail]>,
"Torlock Central" <[e-mail]>
Subject: =?ISO-8859-1?Q?royston.galvin=40btinternet.com?=
Date: Thu, 3 Apr 2015 05:34:00 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_A2B0_33132A94.1250B585"
X-Priority: 3
X-MSMail-Priority: Normal
Importance: Normal
X-Mailer: Microsoft Windows Live Mail 16.4.3522.110
X-MIMEOLE: Produced By Microsoft MimeOLE V16.4.3522.110

This is a multi-part message in MIME format.

------=_NextPart_000_A2B0_33132A94.1250B585
Content-Type: text/plain; charset=ISO-8859-7
Content-Transfer-Encoding: quoted-printable

good evening!


I=A2ve found an amazing method to make money online. I got 100 GBP within 30=
minutes and the technique seems to work great.
One thing to friends_ I have two invitations to give and one I'll give to=
you.


If you would like to start now you=A2ll get your first 200 GBP very soon!
I'm sure you'll be so pleased with the results that you will give me at least=
10% of what you earn.

Your private invite link:=
boomernetwork.co.nz/makcevoy/bjmkrwwksawotcflkylpdoxdznxopl.legwesdzse=
irqdmndnjedvhwfursaqdiupmatk=0A
------=_NextPart_000_A2B0_33132A94.1250B585
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=EF=BB=BF<HTML><HEAD><META http-equiv=3D"content-type" content: text/html;=
charset=3DUTF-8></HEAD><BODY>good evening!<br><br><br>I=E2=80=99ve found an=
amazing method to make money online. I got 100 GBP within 30 minutes and=
the technique seems to work great.<br>One thing to friends=E2=80=A6 I have=
two invitations to give and one I'll give to you.<br><br><br>If you would=
like to start now you=E2=80=99ll get your first 200 GBP very soon!<br>I'm=
sure you'll be so pleased with the results that you will give me at least=
10% of what you earn.<br><br>Your private invite link: <a href=
=3D"http://boomernetwork.co.nz/makcevoy/bjmkrwwksawotcflkylpdoxdznxopl.legwesd=
zseirqdmndnjedvhwfursaqdiupmatk">http://boomernetwork.co.nz/makcevoy/bjmkrwwks=
awotcflkylpdoxdznxopl.legwesdzseirqdmndnjedvhwfursaqdiupmatk</a>=
=0A</BODY></HTML>

------=_NextPart_000_A2B0_33132A94.1250B585--



This is a most annoying virus which is not being deleted through the normal virus removal software.

I am going to have a look at Peters suggestion now.

[duyuthinkysaurus]

Roy I think you have been seriously compromised.
Have you considered closing that e mail account and setting up a differnt one.
I know its a pain in the butt, but it would get you out of a hole.

[pierre]

I know others who have had similar problems in the past.Using Dave's suggestion that by changing your "sign on" password has been a successful resolution

[toyboyroy]

Apr 3, 2015 14:03:28 GMT duyuthinkysaurus said:

Roy I think you have been seriously compromised.
Have you considered closing that e mail account and setting up a differnt one.
I know its a pain in the butt, but it would get you out of a hole.

That seems to be the only course Dinky, I have another email address with TalkTalk which I can use but is it just BT Yahoo that is infected or my PC.

I am also reluctant because I like the BT Yahoo email system and totally dislike TalkTalk.

I suppose I could set up another free one.

But the question is, has my contacts been infected and therefore would they then infect me again. My head is all over the place with this.

Roy

[duyuthinkysaurus]

Roy, I also use BT but also have several other email clients such as hotmail, both .com and .co.uk along with a g mail account.
As for your contacts being infected, I do not know wether they would be.
But if you change your mail address setting up a fresh one with your existing client and re-load your contacts from scratch and do not transfer them, I doubt if that would be the case.
What I also do, is if anyone requires an e-mail address is use one of the web based ones such as hotmail or gmail and keep the bt one as personal. That way if one of the web based ones get compromised, it is easy to shut it down asnd set up a new one.
Best of luck, Dinks.

[toyboyroy]

Apr 3, 2015 15:30:01 GMT duyuthinkysaurus said:

Roy, I also use BT but also have several other email clients such as hotmail, both .com and .co.uk along with a g mail account.
As for your contacts being infected, I do not know wether they would be.
But if you change your mail address setting up a fresh one with your existing client and re-load your contacts from scratch and do not transfer them, I doubt if that would be the case.
What I also do, is if anyone requires an e-mail address is use one of the web based ones such as hotmail or gmail and keep the bt one as personal. That way if one of the web based ones get compromised, it is easy to shut it down asnd set up a new one.
Best of luck, Dinks.

That's good advice and one that I will take, I have just been looking at alternative free Email accs.

But I also came across this which I will try first.

bt.custhelp.com/app/answers/detail/a_id/39411/~/bt-yahoo-mail%3A-compromised-accounts

If I can clean my account up as they suggest I will then get a free disposable account for trivial things.

If I had to close BT all together, how would I go about transferring my stored folders where my ins. details and other stuff that companies don`t send through the post anymore??

Roy

PS. First things first lets close down and run scans upon scans and lets clean this PC up.

[duyuthinkysaurus]

Best to start from scratch, cos anything that is copied from the compromised account could contain compromised data.

[nob]

I don't know how long its been going on Roy, if not long would a system restore do the trick to a time when all was good.

[toyboyroy]

@nob,

To be honest, it has been going a fair time, maybe two years.

I know, I know, I can hear you from here. when it started I thought it came from my cousins works office because the sent address seemed to come from them then onto my contacts.

That company has since gone through.

My cousin insist that its coming from me. I have a few people in my contacts phoning me what is the content of the emails because sometimes its just numbers and letters.

Ask Fletch if he`s been having bad emails from me as I have been in contact with him last year??

Not one of my contacts have told me that their PC is sending out bogus messages and having them returned as undelivered. So I assume its not affected them by installing a virus.

I have cleared all contacts in my email account that I no longer use.

I have run a scan with antispyware, I will do a malware scan, is there anything I can scan with then to be sure??

Roy

[nob]

Have you changed the password as suggested.

[toyboyroy]

Apr 3, 2015 19:25:04 GMT nob said:

Have you changed the password as suggested.

Yes Nob,
I have followed all the instructions from BT and gone through my account.

There did not seem to be anything out of the norm but I did change my password, I have run all the scans and cleaned the PC. I am a bit reluctant to run Ccleaner as it strips the PC of everything including programmes.

Do you think I ought to change the password on my TalkTalk acc.

Roy