My Hotmail Account is getting Returned Email I never sent

[TrickTrash]

I'm suddenly getting lots of messages 'Delivery to the following recipients
failed' about emails I haven't sent, to people I haven't heard of

I've found when this seems to have started, when the infection sent an email
to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't have
a Properties page to choose: shouldn't I have? Has that been hidden by the
infection

It obviously is an infection and one that's not being caught by NOD32, the
latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan Elite,
nor my other scanners [Spybot, Ad-Aware, Win Defender, Malwarebytes
AntiMalware, and several others]

I've no experience with dealing with something like this and would be very
grateful for any advice about how to clean it

Thanks a lot guys

 

[TrickTrash]

Thanks for your reply Diane

The first one of these in the series contacted every name in my contacts,
which is what led me to suspect an infection

In my inbox, they're all

'This is an automatically generated Delivery Status Notification.


Delivery to the following recipients failed.'



messages, or similar; failures of mail I didn't think I'd sent; when I check
my 'Sent' folder for the email account in question, there's a lot of
seeminly corresponding outgoing mail, seemingly addressed to multiple
addresses; but, when I click those messages, the supposed addressee changes
to give a Subject of 'Re:Ebay seller' and this is the message:



- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -

We are a large trading company from china,an agent of all the well-known
digital product factories. We export all kinds of digital products, and
offer reasonable price and good quality.In these Years, We'the many customs
of the welcomed by of the reputation and of the vegained a goodworldwide.we
can accept paypal



Then repeated in some other languages &


E-mail : (e-mail address removed)

Welcome to visite our company web : www.ccctop.com



- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -



So it seems there is outgoing email via that account, that I'm not sending,
but is rather sent by an infection



BTW, all the failed messages have what look like txt files attatched and
something with an envelope icon called 'Ebay Seller' but I'm afraid to open
them; I suspect they could be double suffixes and really be Exe's.



As I said, I'm not familiar with this and I'm making the best guess I can;
but since I DO have outgoing mail in the Sent folder, it is sending
un-authorized mail, right?



I appreciate any help you can give!



Thank you

I doubt you are infected - it's more likely a spammer spoofed your address.

Does the subject say Not Read: or Read: ? This is related to a bug - you
are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point your
newsreader to msnews.microsoft.com.

I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't heard
of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't
have a Properties page to choose: shouldn't I have? Has that been hidden
by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[TrickTrash]

Also, is it possible that it's not going out via the email client, Outlook,
but rather from the account on the web; do you collect the Sent messages to
your Outlook Sent folder when you connect to the sever via Outlook, or can
those only be going out via Outlook?

Where do I look if it IS an infection and what should I use to check\clean?

Thanks

I doubt you are infected - it's more likely a spammer spoofed your address.

Does the subject say Not Read: or Read: ? This is related to a bug - you
are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point your
newsreader to msnews.microsoft.com.

I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't heard
of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't
have a Properties page to choose: shouldn't I have? Has that been hidden
by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[Diane Poremsky [MVP]]

If messages you didn't send yourself are in your sent folder and you didn't
install an add-in to notify people of a new address or inviting them to join
you on a website, then its either an infection or an intrusion - with
intrusion easier than infection.

Do you have a facebook account associated with the hotmail account? There is
a phishing attempt going around that gets your mail info then sends a
message to everyone in your address book. (The one I get the most from this
exploit says the acct owner is stuck in the UK and needs money wired. )

There may be similar scams - if you haven't already changed the hotmail
password, do it immediately.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point your
newsreader to msnews.microsoft.com.

Thanks for your reply Diane

The first one of these in the series contacted every name in my contacts,
which is what led me to suspect an infection

In my inbox, they're all

'This is an automatically generated Delivery Status Notification.


Delivery to the following recipients failed.'



messages, or similar; failures of mail I didn't think I'd sent; when I
check my 'Sent' folder for the email account in question, there's a lot of
seeminly corresponding outgoing mail, seemingly addressed to multiple
addresses; but, when I click those messages, the supposed addressee
changes to give a Subject of 'Re:Ebay seller' and this is the message:



- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - -

We are a large trading company from china,an agent of all the well-known
digital product factories. We export all kinds of digital products, and
offer reasonable price and good quality.In these Years, We'the many
customs of the welcomed by of the reputation and of the vegained a
goodworldwide.we can accept paypal



Then repeated in some other languages &


E-mail : (e-mail address removed)

Welcome to visite our company web : www.ccctop.com



- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - -



So it seems there is outgoing email via that account, that I'm not
sending, but is rather sent by an infection



BTW, all the failed messages have what look like txt files attatched and
something with an envelope icon called 'Ebay Seller' but I'm afraid to
open them; I suspect they could be double suffixes and really be Exe's.



As I said, I'm not familiar with this and I'm making the best guess I can;
but since I DO have outgoing mail in the Sent folder, it is sending
un-authorized mail, right?



I appreciate any help you can give!



Thank you

I doubt you are infected - it's more likely a spammer spoofed your
address.

Does the subject say Not Read: or Read: ? This is related to a bug - you
are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your newsreader to msnews.microsoft.com.

I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't
heard of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't
have a Properties page to choose: shouldn't I have? Has that been
hidden by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[TrickTrash]

Thanks Diane

I don't use Facebook or any of those type of services, being a grouchy old
git! And no add-ons etc

I will change my password immediately, thanks

Where can I go to find out about the infection\intrusion and how to identify
it\remove it?

Also, is it possible that it's not going out via the email client,
Outlook, but rather from the account on the web; do you collect the Sent
messages to your Outlook Sent folder when you connect to the sever via
Outlook, or can those only be going out via Outlook?

Where do I look if it IS an infection and what should I use to
check\clean?

Thanks

I doubt you are infected - it's more likely a spammer spoofed your
address.

Does the subject say Not Read: or Read: ? This is related to a bug - you
are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your newsreader to msnews.microsoft.com.

I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't
heard of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't
have a Properties page to choose: shouldn't I have? Has that been
hidden by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[Brian Tillman [MVP - Outlook]]

Where can I go to find out about the infection\intrusion and how to identify
it\remove it?

Provided it's not an intrusion into your Hotmail account, if you visit several
of the well-known antivirus company web pages, they should offer free online
scans. I know Trend Micro does and so does Live Onecare. If you use three of
these online scans and they should nothing, then you're either not infected or
it's something no one can detect and a clearn reinstall of the operating
system is about the only way I know to clean it up.

 

[Diane Poremsky [MVP]]

if its an intrusion changing the password will most likely end it. If its an
infection/trojan, you'll need to clean your system.

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/



Exchange Messaging Outlook newsletter:
(e-mail address removed)




You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point your
newsreader to msnews.microsoft.com.

Thanks Diane

I don't use Facebook or any of those type of services, being a grouchy old
git! And no add-ons etc

I will change my password immediately, thanks

Where can I go to find out about the infection\intrusion and how to
identify it\remove it?

Also, is it possible that it's not going out via the email client,
Outlook, but rather from the account on the web; do you collect the Sent
messages to your Outlook Sent folder when you connect to the sever via
Outlook, or can those only be going out via Outlook?

Where do I look if it IS an infection and what should I use to
check\clean?

Thanks

I doubt you are infected - it's more likely a spammer spoofed your
address.

Does the subject say Not Read: or Read: ? This is related to a bug -
you are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your newsreader to msnews.microsoft.com.


I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't
heard of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't
have a Properties page to choose: shouldn't I have? Has that been
hidden by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[TrickTrash]

Thanks very much for the replies and help; much appreciated

if its an intrusion changing the password will most likely end it. If its
an infection/trojan, you'll need to clean your system.

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/



Exchange Messaging Outlook newsletter:
(e-mail address removed)




You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point your
newsreader to msnews.microsoft.com.

Thanks Diane

I don't use Facebook or any of those type of services, being a grouchy
old git! And no add-ons etc

I will change my password immediately, thanks

Where can I go to find out about the infection\intrusion and how to
identify it\remove it?

Also, is it possible that it's not going out via the email client,
Outlook, but rather from the account on the web; do you collect the Sent
messages to your Outlook Sent folder when you connect to the sever via
Outlook, or can those only be going out via Outlook?

Where do I look if it IS an infection and what should I use to
check\clean?

Thanks


I doubt you are infected - it's more likely a spammer spoofed your
address.

Does the subject say Not Read: or Read: ? This is related to a bug -
you are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your newsreader to msnews.microsoft.com.


I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't
heard of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I
don't have a Properties page to choose: shouldn't I have? Has that
been hidden by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[TrickTrash]

Changing the password to the account seems to have sorted it; by now, I'd
have had quite a few 'sent' and received of these ghost messages, but not a
peep since I changed the password

Thanks very much Diane - handy as a small pot, you are!

Cheers

Thanks very much for the replies and help; much appreciated

if its an intrusion changing the password will most likely end it. If its
an infection/trojan, you'll need to clean your system.

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/



Exchange Messaging Outlook newsletter:
(e-mail address removed)




You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your
newsreader to msnews.microsoft.com.

Thanks Diane

I don't use Facebook or any of those type of services, being a grouchy
old git! And no add-ons etc

I will change my password immediately, thanks

Where can I go to find out about the infection\intrusion and how to
identify it\remove it?


Also, is it possible that it's not going out via the email client,
Outlook, but rather from the account on the web; do you collect the
Sent messages to your Outlook Sent folder when you connect to the sever
via Outlook, or can those only be going out via Outlook?

Where do I look if it IS an infection and what should I use to
check\clean?

Thanks


I doubt you are infected - it's more likely a spammer spoofed your
address.

Does the subject say Not Read: or Read: ? This is related to a bug -
you are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your newsreader to msnews.microsoft.com.


I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't
heard of

I've found when this seems to have started, when the infection sent
an email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I
don't have a Properties page to choose: shouldn't I have? Has that
been hidden by the infection

It obviously is an infection and one that's not being caught by
NOD32, the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[Beijing E-Hermes Technology Co., Ltd.]

Welcome to Beijing E-Hermes Technology Co., Ltd.------------Www.ehermesol.Com

Beijing Electronic Science and Technology Development Co., Ltd. is
a Hermes IT agent products to help large and medium-sized international brand
development, mining, expansion of the domestic market as the main business of
the new high-tech enterprises. The company's business objectives through
outstanding service and the cost of operating the flow of their own values
reflected, tree Legislation for the field of IT service brand in circulation
and eventually become China's leading IT distribution companies. The
company's business model is to build the national network of IT products in
circulation, high-quality products, excellent services to lower-level
distributors, retail customers and end consumers in general. The company is
headquartered in Beijing, is currently in Beijing and Shanghai with branch
offices and platforms

 

[Beijing E-Hermes Technology Co., Ltd.]

Welcome to Beijing E-Hermes Technology Co., Ltd.------------Www.ehermesol.Com

Beijing Electronic Science and Technology Development Co., Ltd. is
a Hermes IT agent products to help large and medium-sized international brand
development, mining, expansion of the domestic market as the main business of
the new high-tech enterprises. The company's business objectives through
outstanding service and the cost of operating the flow of their own values
reflected, tree Legislation for the field of IT service brand in circulation
and eventually become China's leading IT distribution companies. The
company's business model is to build the national network of IT products in
circulation, high-quality products, excellent services to lower-level
distributors, retail customers and end consumers in general. The company is
headquartered in Beijing, is currently in Beijing and Shanghai with branch
offices and platforms

if its an intrusion changing the password will most likely end it. If its an
infection/trojan, you'll need to clean your system.

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/



Exchange Messaging Outlook newsletter:
(e-mail address removed)




You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point your
newsreader to msnews.microsoft.com.

Thanks Diane

I don't use Facebook or any of those type of services, being a grouchy old
git! And no add-ons etc

I will change my password immediately, thanks

Where can I go to find out about the infection\intrusion and how to
identify it\remove it?

Also, is it possible that it's not going out via the email client,
Outlook, but rather from the account on the web; do you collect the Sent
messages to your Outlook Sent folder when you connect to the sever via
Outlook, or can those only be going out via Outlook?

Where do I look if it IS an infection and what should I use to
check\clean?

Thanks


I doubt you are infected - it's more likely a spammer spoofed your
address.

Does the subject say Not Read: or Read: ? This is related to a bug -
you are generating read receipts for spam.

--
Diane Poremsky [MVP - Outlook]



Outlook Tips by email:
mailto:[email protected]

EMO - a weekly newsletter about Outlook and Exchange:
mailto:[email protected]

You can access this newsgroup by visiting
http://www.microsoft.com/office/community/en-us/default.mspx or point
your newsreader to msnews.microsoft.com.


I'm suddenly getting lots of messages 'Delivery to the following
recipients failed' about emails I haven't sent, to people I haven't
heard of

I've found when this seems to have started, when the infection sent an
email to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don't
have a Properties page to choose: shouldn't I have? Has that been
hidden by the infection

It obviously is an infection and one that's not being caught by NOD32,
the latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan
Elite, nor my other scanners [Spybot, Ad-Aware, Win Defender,
Malwarebytes AntiMalware, and several others]

I've no experience with dealing with something like this and would be
very grateful for any advice about how to clean it

Thanks a lot guys

 

[ehermesol]

Welcome to Beijing E-Hermes Technology Co., Ltd.------------Www.ehermesol..Com

         Beijing Electronic Science and Technology Development Co., Ltd. is
a Hermes IT agent products to help large and medium-sized international brand
development, mining, expansion of the domestic market as the main business of
the new high-tech enterprises. The company's business objectives through
outstanding service and the cost of operating the flow of their own values
reflected, tree Legislation for the field of IT service brand in circulation
and eventually become China's leading IT distribution companies. The
company's business model is to build the national network of IT products in
circulation, high-quality products, excellent services to lower-level
distributors, retail customers and end consumers in general. The company is
headquartered in Beijing, is currently in Beijing and Shanghai with branch
offices and platforms

I'm suddenly getting lots of messages 'Delivery to the following recipients
failed' about emails I haven't sent, to people I haven't heard of

I've found when this seems to have started, when the infection sent an email
to everyone in my Address book, but it doesn't help me

Also, if I right-click the messages, or any message in Outlook, I don'thave
a Properties page to choose: shouldn't I have?  Has that been hidden by the
infection

It obviously is an infection and one that's not being caught by NOD32, the
latest standalone Kaspersky Virus Removal Tool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/, Anti Trojan Elite,
nor my other scanners [Spybot, Ad-Aware, Win Defender, Malwarebytes
AntiMalware, and several others]

I've no experience with dealing with something like this and would be very
grateful for any advice about how to clean it

Thanks a lot guys- éšè—被引用文字 -

- 显示引用的文字 -

because have some member used there ID help us do this .maybe you
forget