The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Virus or Hacked Email Account?

Sir CarcassSir Carcass I have been shown the end of my worldRound Rock, TXRegistered User regular
edited September 2009 in Help / Advice Forum
So Monday night at about 3am an email goes out from my wife's Hotmail account to everyone in her address book, plus a bunch of addresses she doesn't know. The email message is the following:
Dear firend:
Hello.How are you doing recently?Some days ago, I came across a wonderful electronic company on the web and had a pleasant chat with the sales manager. He told me that they are planning to lower the prices greatly in order to adapt to the global economic crisis, so that they can expand their overseas market. I have bought an iPhone 3GS and a HP laptop ,and i am very satisfied with their items and services.If you have time,you can have a look.
Their website: Mall-good.com
Their Email/Msn: mallgood@188.com

Needless to say, she doesn't type like that, doesn't have an iPhone or laptop, and has never heard of Mall Good. When she logged into her email, that same message was set as her signature. We scanned her machine and cleared some stuff and she logged in and changed her password. Does this sound like a virus on her machine or something specific to her email account? I googled it and found a couple of posts with people having the same thing, but no details. Anything else we should do?

Sir Carcass on

Posts

  • PeregrineFalconPeregrineFalcon Registered User regular
    edited September 2009
    Did she use a shitty password? Her password probably got guessed/bruteforced/compromised somehow and she was used to spam that account.

    Change it again, from a known-clean machine (boot from a Linux Live CD if you must) and you should be OK ... but if it happens again, her machine is keylogged.

    PeregrineFalcon on
    Looking for a DX:HR OnLive code for my kid brother.
    Can trade TF2 items or whatever else you're interested in. PM me.
  • ChanusChanus Harbinger of the Spicy Rooster Apocalypse The Flames of a Thousand Collapsed StarsRegistered User, Moderator mod
    edited September 2009
    Does she have a Facebook account? I've heard of apps on there basically hacking your email account and sending these spam messages to everyone on your address book.

    Chanus on
    Allegedly a voice of reason.
  • matt has a problemmatt has a problem Points to 'off' Points to 'on'Registered User regular
    edited September 2009
    Does she log in to Hotmail through hotmail.com? Or does she use Outlook to send through her Hotmail account? There are plenty of viruses that will compromise Outlook and spam every address in the address book.

    matt has a problem on
    nibXTE7.png
  • LautermilchLautermilch Registered User regular
    edited September 2009
  • Sir CarcassSir Carcass I have been shown the end of my world Round Rock, TXRegistered User regular
    edited September 2009
    Yes, she has Facebook (and is on it often) and she usually uses some messenger for her email, probably MSN. Her password consisted of letters and numbers, but probably wouldn't be considered strong (no upper and lower case, no symbols).

    And I found those links in my search, but was curious if anyone had maybe seen this before or could tell us how she got it.

    Sir Carcass on
  • ChanusChanus Harbinger of the Spicy Rooster Apocalypse The Flames of a Thousand Collapsed StarsRegistered User, Moderator mod
    edited September 2009
    I had a similar one once, and just deleted the most recent Facebook app I had applied... it at least hasn't happened again (I think it was Knighthood or something like that)

    Chanus on
    Allegedly a voice of reason.
  • ImprovoloneImprovolone Registered User regular
    edited September 2009
    Chanus wrote: »
    I had a similar one once, and just deleted the most recent Facebook app I had applied... it at least hasn't happened again (I think it was Knighthood or something like that)
    Those apps and quizes can pull a frightening amount of information. It is generally advised that you lock down your profile everywhere, remove permissions that are automatically given, and never use an app or quiz.

    Improvolone on
    Voice actor for hire. My time is free if your project is!
  • ChanusChanus Harbinger of the Spicy Rooster Apocalypse The Flames of a Thousand Collapsed StarsRegistered User, Moderator mod
    edited September 2009
    Chanus wrote: »
    I had a similar one once, and just deleted the most recent Facebook app I had applied... it at least hasn't happened again (I think it was Knighthood or something like that)
    Those apps and quizes can pull a frightening amount of information. It is generally advised that you lock down your profile everywhere, remove permissions that are automatically given, and never use an app or quiz.

    Oh yeah, I've definitely learned my lesson. =)


    And yes, they pretty much all have access to your email address in some form (much like that "Find Friends" function that basically fishes your email account for addresses).

    Chanus on
    Allegedly a voice of reason.
  • underdonkunderdonk __BANNED USERS regular
    edited September 2009
    Dear forum:
    Hello.How are you doing recently?Some days ago, I came across a wonderful electronic company on the web and had a pleasant chat with the sales manager. He told me that they are planning to lower the prices greatly in order to adapt to the global economic crisis, so that they can expand their overseas market. I have bought an iPhone 3GS and a HP laptop ,and i am very satisfied with their items and services.If you have time,you can have a look.
    Their website: Mall-good.com
    Their Email/Msn: mallgood@188.com

    underdonk on
    Back in the day, bucko, we just had an A and a B button... and we liked it.
  • PeregrineFalconPeregrineFalcon Registered User regular
    edited September 2009
    Reported for spam :x
    2rf3eae.png

    PeregrineFalcon on
    Looking for a DX:HR OnLive code for my kid brother.
    Can trade TF2 items or whatever else you're interested in. PM me.
  • Sir CarcassSir Carcass I have been shown the end of my world Round Rock, TXRegistered User regular
    edited September 2009
    I'll check on the Facebook app thing.

    As far as removing anything like this, what all is recommended? We currently use AVG, Spybot, and Malware bytes.

    Sir Carcass on
  • ChanusChanus Harbinger of the Spicy Rooster Apocalypse The Flames of a Thousand Collapsed StarsRegistered User, Moderator mod
    edited September 2009
    I'll check on the Facebook app thing.

    As far as removing anything like this, what all is recommended? We currently use AVG, Spybot, and Malware bytes.

    If it's the Facebook app thing, it's probably not anything actually on your computer.

    Maybe deleting your cookies and stuff would prevent it happening again, but I don't think a virus scan will do anything (at least it didn't show any results for me).

    Chanus on
    Allegedly a voice of reason.
  • Sir CarcassSir Carcass I have been shown the end of my world Round Rock, TXRegistered User regular
    edited September 2009
    Chanus wrote: »
    I'll check on the Facebook app thing.

    As far as removing anything like this, what all is recommended? We currently use AVG, Spybot, and Malware bytes.

    If it's the Facebook app thing, it's probably not anything actually on your computer.

    Maybe deleting your cookies and stuff would prevent it happening again, but I don't think a virus scan will do anything (at least it didn't show any results for me).

    I just meant in general for keeping a system clean.

    Sir Carcass on
  • ChanusChanus Harbinger of the Spicy Rooster Apocalypse The Flames of a Thousand Collapsed StarsRegistered User, Moderator mod
    edited September 2009
    Chanus wrote: »
    I'll check on the Facebook app thing.

    As far as removing anything like this, what all is recommended? We currently use AVG, Spybot, and Malware bytes.

    If it's the Facebook app thing, it's probably not anything actually on your computer.

    Maybe deleting your cookies and stuff would prevent it happening again, but I don't think a virus scan will do anything (at least it didn't show any results for me).

    I just meant in general for keeping a system clean.

    Oh, in that sense, yeah... what you have listed there is pretty comprehensive. A registry cleaner program would be helpful performance-wise (though that's not really in the scope of your question) as well.

    Chanus on
    Allegedly a voice of reason.
Sign In or Register to comment.