techPowerUp! Forums

Go Back   techPowerUp! Forums > Software > General Software

Reply
 
Thread Tools
Old Dec 24, 2009, 07:27 PM   #1
Frick
Fishfaced Nincompoop
 
Frick's Avatar
 
Join Date: Feb 2006
Location: Sweden
Posts: 7,894 (2.99/day)
Thanks: 1,076
Thanked 1,448 Times in 1,154 Posts

System Specs

Spam from my sisters email

Hey all.

One of my sisters emails sends out spam. It comes a spam every other day with some shopping offers with links to VERY wierd homepages. She is aware of this, and she has no idea why this is happening. Otherwise she uses her mail like usual, and everything seems to work the way is should. No passwords have been altered or anything.

Is it a virus, trojan or something? What do you think she should do?

Thanks for looking!

/Frick
__________________
Typemachine: Acer Aspire One D250 | Atom N280 1.6 Ghz | 1GB DDR2 | 160GB SATA | 10.1' 1024 x 600 | Lubuntu 12.10
Oldbox: HP D530 | Pentium 4 2.8 Ghz | 1GB DDR | 40GB | Windows XP
"The 'gentle biker' look is overdone. I'm going for 'psycho hillbilly.' "
Frick is offline  
Reply With Quote
Old Dec 24, 2009, 07:30 PM   #2
Sasqui
Eligible for custom title
 
Sasqui's Avatar
 
Join Date: Dec 2005
Location: Manchester, NH
Posts: 6,066 (2.23/day)
Thanks: 827
Thanked 913 Times in 746 Posts

System Specs

Could be a virus but depends... what nature of account is it coming from? Is it web based email, ISP or exchange server?
__________________
Heatware
Sasqui is offline  
Reply With Quote
The Following User Says Thank You to Sasqui For This Useful Post:
Old Dec 24, 2009, 07:34 PM   #3
Kreij
Hardcore Monkey Moderator
 
Kreij's Avatar
 
Join Date: Feb 2007
Location: Cheeseland (Wisconsin, USA)
Posts: 12,122 (5.27/day)
Thanks: 591
Thanked 5,493 Times in 2,937 Posts

System Specs

If you can, post the full e-mail header from one of the spam messages. It may be spoofed and not actually coming from her.
__________________

Cloud (noun, singular): A dynamic arrangement of multiple potential single points of failure, with a user at one end and their data at the other.


Get more tech news on a wide variety of topics at NextPowerUp
Kreij is online now  
Reply With Quote
The Following User Says Thank You to Kreij For This Useful Post:
Old Dec 24, 2009, 07:56 PM   #4
js01
75 Posts
 
Join Date: Jul 2008
Location: Halifax, Nova Scotia
Posts: 162 (0.09/day)
Thanks: 1
Thanked 26 Times in 24 Posts

System Specs

I would advise her to change her password I had the same problem and as soon as I changed my password they stopped, it's actually happened to a lot of people that I know not sure how they get the passwords as I never use webmail It usually says something like "Hope you have a good mood in shopping from their company" in the end of the email.
js01 is offline  
Reply With Quote
The Following User Says Thank You to js01 For This Useful Post:
Old Dec 24, 2009, 08:01 PM   #5
cadaveca
My name is Dave
 
cadaveca's Avatar
 
Join Date: Apr 2006
Location: The Great White North
Posts: 10,773 (4.14/day)
Thanks: 4,496
Thanked 5,234 Times in 3,211 Posts

System Specs

Key-loggers, or what have you.

First, go to safe machine, change password.

If this does not fix it, then the problem is likely on her personal machine still.

Also do everything else that's already listed, and verify that the header isn't spoofed.
__________________
Gadgets, Phones, Tablets, Cameras, TVs, HiFi...NextPowerUp


-Only real men play games THIS way.
cadaveca is offline  
Reply With Quote
The Following User Says Thank You to cadaveca For This Useful Post:
Old Dec 24, 2009, 08:14 PM   #6
LagunaX
500 Posts
 
LagunaX's Avatar
 
Join Date: Mar 2009
Posts: 957 (0.62/day)
Thanks: 76
Thanked 274 Times in 186 Posts

System Specs

Yeah change password in safe mode and run malwarebytes (free scan+clean).
__________________
i7-3770k 4.8ghz 1.21-1.24v Delidded 3231B415
i7-2600k 4.8ghz L041C108 1.32v PLL off Venomous-X Push/Pull
Asus P8P67 Vanilla
Samsung 30nm MV-3V4G3D/US 2x4GB @ 9-10-10-28 1T DDR3 2133 1.6v
Diamond HD 7970
Corsair TX750W
CM 690 II Advanced
LagunaX is offline  
Reply With Quote
The Following User Says Thank You to LagunaX For This Useful Post:
Old Dec 24, 2009, 08:42 PM   #7
imperialreign
3500 Posts
 
imperialreign's Avatar
 
Join Date: Jul 2007
Location: Sector ZZ₉ Plural Z Alpha
Posts: 4,001 (1.87/day)
Thanks: 272
Thanked 953 Times in 710 Posts

System Specs

Quote:
Originally Posted by Kreij View Post
If you can, post the full e-mail header from one of the spam messages. It may be spoofed and not actually coming from her.
True - although, more than a few emails would seem a little suspicous, rather than just a generated or "logged" email address.


As well - it's quite possible the email isn't coming directly from her account. Some email providers allow one to send email, but use a different "from" address (i.e. gmail) - for example, your primary email address is someone@someplace.com, when you send a message it would appear to come from someone@noplace.com . . .

It wouldn't surprise me, either, that if your sister had registered on a site, that they could be selling off email addresses - sometimes those really shady purchasers of these email lists will use some of these addresses to "mask" where the emails are actually coming from.

Follow the suggestions tha have already been posted, first - defi change the password. Run a good A/V program, and check your rig over for any other malware. Do a good manual cleaning of internet files, too, both cookies, temp files, and any other tripe that ends up in your temp folders. Anything that doesn't want to be deleted nice and easy tends to not bode well . . . if the issue still continues, she may have to give some serious thought to closing the account and picking up a new email provider elsewhere.

It's a PITA, for all involved.
__________________

<Guide: Understanding audio specifications and hardware> <X-Fi Support Syndicate>
Hit me up on Steam: http://steamcommunity.com/id/imperialreign
{THERE IS MADNESS TO MY METHODS}
imperialreign is offline  
Reply With Quote
The Following User Says Thank You to imperialreign For This Useful Post:
Old Dec 26, 2009, 10:34 AM   #8
Frick
Fishfaced Nincompoop
 
Frick's Avatar
 
Join Date: Feb 2006
Location: Sweden
Posts: 7,894 (2.99/day)
Thanks: 1,076
Thanked 1,448 Times in 1,154 Posts

System Specs

Right, thanks ya'll, I will forward this to her and get back to you. It's from a hotmail account btw.

Thanks!
__________________
Typemachine: Acer Aspire One D250 | Atom N280 1.6 Ghz | 1GB DDR2 | 160GB SATA | 10.1' 1024 x 600 | Lubuntu 12.10
Oldbox: HP D530 | Pentium 4 2.8 Ghz | 1GB DDR | 40GB | Windows XP
"The 'gentle biker' look is overdone. I'm going for 'psycho hillbilly.' "
Frick is offline  
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Upgrading my Sisters comp. Delta6326 System Builder's Advice 18 Sep 25, 2009 10:29 PM


All times are GMT. The time now is 01:09 PM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
no new posts