• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Spam from my sisters email

Frick

Fishfaced Nincompoop
Joined
Feb 27, 2006
Messages
18,914 (2.86/day)
Location
Piteå
System Name Black MC in Tokyo
Processor Ryzen 5 5600
Motherboard Asrock B450M-HDV
Cooling Be Quiet! Pure Rock 2
Memory 2 x 16GB Kingston Fury 3400mhz
Video Card(s) XFX 6950XT Speedster MERC 319
Storage Kingston A400 240GB | WD Black SN750 2TB |WD Blue 1TB x 2 | Toshiba P300 2TB | Seagate Expansion 8TB
Display(s) Samsung U32J590U 4K + BenQ GL2450HT 1080p
Case Fractal Design Define R4
Audio Device(s) Line6 UX1 + some headphones, Nektar SE61 keyboard
Power Supply Corsair RM850x v3
Mouse Logitech G602
Keyboard Cherry MX Board 1.0 TKL Brown
VR HMD Acer Mixed Reality Headset
Software Windows 10 Pro
Benchmark Scores Rimworld 4K ready!
Hey all.

One of my sisters emails sends out spam. It comes a spam every other day with some shopping offers with links to VERY wierd homepages. She is aware of this, and she has no idea why this is happening. Otherwise she uses her mail like usual, and everything seems to work the way is should. No passwords have been altered or anything.

Is it a virus, trojan or something? What do you think she should do?

Thanks for looking!

/Frick
 
Joined
Dec 6, 2005
Messages
10,881 (1.63/day)
Location
Manchester, NH
System Name Senile
Processor I7-4790K@4.8 GHz 24/7
Motherboard MSI Z97-G45 Gaming
Cooling Be Quiet Pure Rock Air
Memory 16GB 4x4 G.Skill CAS9 2133 Sniper
Video Card(s) GIGABYTE Vega 64
Storage Samsung EVO 500GB / 8 Different WDs / QNAP TS-253 8GB NAS with 2x10Tb WD Blue
Display(s) 34" LG 34CB88-P 21:9 Curved UltraWide QHD (3440*1440) *FREE_SYNC*
Case Rosewill
Audio Device(s) Onboard + HD HDMI
Power Supply Corsair HX750
Mouse Logitech G5
Keyboard Corsair Strafe RGB & G610 Orion Red
Software Win 10
Could be a virus but depends... what nature of account is it coming from? Is it web based email, ISP or exchange server?
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (2.21/day)
Location
Cheeseland (Wisconsin, USA)
If you can, post the full e-mail header from one of the spam messages. It may be spoofed and not actually coming from her.
 
Joined
Jul 23, 2008
Messages
198 (0.03/day)
Location
Halifax, Nova Scotia
System Name My Computer
Processor 19 9900k @4.7ghz
Motherboard Z370 Gaming Plus
Cooling Dark Rock 4
Memory 16GB Corsair Vengeance 3000 mhz DDR4
Video Card(s) 3060 TI FE
Storage 4
Display(s) Samsung 27
Case Rosewill
Audio Device(s) Integrated
Power Supply Coolermaster Masterwatt 650
Software Windows 10
I would advise her to change her password I had the same problem and as soon as I changed my password they stopped, it's actually happened to a lot of people that I know not sure how they get the passwords as I never use webmail It usually says something like "Hope you have a good mood in shopping from their company" in the end of the email.
 

cadaveca

My name is Dave
Joined
Apr 10, 2006
Messages
17,232 (2.63/day)
Key-loggers, or what have you.

First, go to safe machine, change password.

If this does not fix it, then the problem is likely on her personal machine still.

Also do everything else that's already listed, and verify that the header isn't spoofed.
 
Joined
Mar 8, 2009
Messages
1,077 (0.20/day)
System Name Primary Rig
Processor e8500 Q822A549 4.5ghz AIR
Motherboard Foxconn Mars P35
Cooling TRUE
Memory 2 x2GB Patriot Viper 1066 5-5-5-12 @ 1.8v
Video Card(s) Sapphire 5870 Unlocked
Storage 300gb Velociraptor
Display(s) Dell 24" Ultrasharp
Case Coolermaster CM690
Power Supply PC Power & Cooling 750w Quad Silencer
Software Windows 7 Ultimate x86
Yeah change password in safe mode and run malwarebytes (free scan+clean).
 

imperialreign

New Member
Joined
Jul 19, 2007
Messages
7,043 (1.15/day)
Location
Sector ZZ₉ Plural Z Alpha
System Name УльтраФиолет
Processor Intel Kentsfield Q9650 @ 3.8GHz (4.2GHz highest achieved)
Motherboard ASUS P5E3 Deluxe/WiFi; X38 NSB, ICH9R SSB
Cooling Delta V3 block, XPSC res, 120x3 rad, ST 1/2" pump - 10 fans, SYSTRIN HDD cooler, Antec HDD cooler
Memory Dual channel 8GB OCZ Platinum DDR3 @ 1800MHz @ 7-7-7-20 1T
Video Card(s) Quadfire: (2) Sapphire HD5970
Storage (2) WD VelociRaptor 300GB SATA-300; WD 320GB SATA-300; WD 200GB UATA + WD 160GB UATA
Display(s) Samsung Syncmaster T240 24" (16:10)
Case Cooler Master Stacker 830
Audio Device(s) Creative X-Fi Titanium Fatal1ty Pro PCI-E x1
Power Supply Kingwin Mach1 1200W modular
Software Windows XP Home SP3; Vista Ultimate x64 SP2
Benchmark Scores 3m06: 20270 here: http://hwbot.org/user.do?userId=12313
If you can, post the full e-mail header from one of the spam messages. It may be spoofed and not actually coming from her.

True - although, more than a few emails would seem a little suspicous, rather than just a generated or "logged" email address.


As well - it's quite possible the email isn't coming directly from her account. Some email providers allow one to send email, but use a different "from" address (i.e. gmail) - for example, your primary email address is someone@someplace.com, when you send a message it would appear to come from someone@noplace.com . . .

It wouldn't surprise me, either, that if your sister had registered on a site, that they could be selling off email addresses - sometimes those really shady purchasers of these email lists will use some of these addresses to "mask" where the emails are actually coming from.

Follow the suggestions tha have already been posted, first - defi change the password. Run a good A/V program, and check your rig over for any other malware. Do a good manual cleaning of internet files, too, both cookies, temp files, and any other tripe that ends up in your temp folders. Anything that doesn't want to be deleted nice and easy tends to not bode well . . . if the issue still continues, she may have to give some serious thought to closing the account and picking up a new email provider elsewhere.

It's a PITA, for all involved.
 

Frick

Fishfaced Nincompoop
Joined
Feb 27, 2006
Messages
18,914 (2.86/day)
Location
Piteå
System Name Black MC in Tokyo
Processor Ryzen 5 5600
Motherboard Asrock B450M-HDV
Cooling Be Quiet! Pure Rock 2
Memory 2 x 16GB Kingston Fury 3400mhz
Video Card(s) XFX 6950XT Speedster MERC 319
Storage Kingston A400 240GB | WD Black SN750 2TB |WD Blue 1TB x 2 | Toshiba P300 2TB | Seagate Expansion 8TB
Display(s) Samsung U32J590U 4K + BenQ GL2450HT 1080p
Case Fractal Design Define R4
Audio Device(s) Line6 UX1 + some headphones, Nektar SE61 keyboard
Power Supply Corsair RM850x v3
Mouse Logitech G602
Keyboard Cherry MX Board 1.0 TKL Brown
VR HMD Acer Mixed Reality Headset
Software Windows 10 Pro
Benchmark Scores Rimworld 4K ready!
Right, thanks ya'll, I will forward this to her and get back to you. It's from a hotmail account btw.

Thanks! :D
 
Top