Spam is being sent from my e-mail address

[linda661]

Someone is sending spam from my e-mail address to my e-mail contacts. I only know this because people are asking and some e-mail are being returned as not delivered.

They don't show up as being sent FROM my sent box.

How can I stop it??? I don't use a password, but I guess it's too late for that now.
I recently started using Thunderbird for my e-mail. I was using Yahoo.

What if I delete all of my contacts???

Please help!!

Linda

 

[Hellriser]

Firstly clean your PC from malware and viruses. After that, change your e-mail password. It should stop the spam.

 

[linda661]

I changed the password on advice from my friend. I hope it stops. Horrible e-mails went to people I hardly know and to some people I worked with. I hope they realize it wasn't from me.

Any idea why it happened?

 

[richyrichuk]

change all your security questions to

 

[Hellriser]

If you won't check and clean your PC from Malware and viruses, the problem will reoccur. Make sure you have a virus-free PC.

 

[linda661]

I've used the Windows Defender. It says I am clean

 

[Hellriser]

I suggest a Malwarebytes scan too. Just to be extra sure.

 

[rmahar]

Spam

You likely have malware on your PC. Get a good Anti-virus program and run it. Then do so on a regular basis. Spyware doctor works for me.This is not a free prgram, but you can get one with a trial period.

 

[linda661]

Yeah, I can't afford to buy anything. So I need more than Windows Defender? I can use the Spyware doctor, but would like to find a good one that is free.

 

[linda661]

How about this one?

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

 

[linda661]

Turns out that one wasn't compatible. I found another
Malwarebytes Anti-Malware 1.51.1.1800

 

[rmahar]

Free anti-virus

The free ones that I have tried are less than totally effective, But are doubtless better than none at all. www.pcworld.com lists a variety of what you are looking for.

 

[Frank1]

I could be totally wrong on what I say, but I think that you computer could be free of malware, and if someone hijacked your email address, it could still happen. Again, I could be wrong, but if I were you I would email everyone on your email list and tell them what is going on so that they know it is not coming from you.

 

[essenbe]

Seems to me it has to be malware or someone else using your computer. There's no other way to get access to your address book. I use MSE and Malwarebytes and have no problems.

 

[bru]

I agree that it is possible that the email was hacked as opposed to malware. I've seen it happen.
Either way it's always good practice to make sure your system is clean.

 

[Frank1]

Seems to me it has to be malware or someone else using your computer. There's no other way to get access to your address book. I use MSE and Malwarebytes and have no problems.

I would agree that malware was no doubt how the address book was hijacked. But once it has been hijacked the damage has already been done. There is no question that one should alway keep his system clean. But in this case, once the damage has been done, it will not solve what has originally happened. Again, there is much I don't understant about this, so I'm only giving my opinion.

 

[Golden]

Hi Linda,

There are a few things you can do to get out of this situation, in this order:

1. As already advised, download, install, update and run a FULL scan using the FREE Malwarebytes.

- if the above scan comes up clean, go to step 2, else post the log here, and we can help you

2. Install and keep updated a reliable anti-virus program. There are many to choose from, but like essenbe, I recommend FREE Microsoft Security Essentials. Download, install, update it, and then also do a FULL scan with that.

- if the above scan comes up clean, go to step 3, else post the log here, and we can help you

3. Scan your PC for software vulnerabilities by following this tutorial:

http://www.sevenforums.com/tutorials/181981-secunia-online-software-inspector.html

4. Change your email address. I know its a pain, but probably less of a pain than the mail that has been "sent on your behalf". Use a totally different password!

5. Ensure you use a secure logon on your PC.

Lastly, keep those security programs up-to-date, and be careful where you browse on the web, and what you click.

If you need more help, post back here and let us know.

Regards,
Golden

 

[Imperfect1]

I've had a lot of experience with this, and it is most likely that you're account has been hacked! Sadly, getting a new account isn't really the answer, because the new account can just as easily get hacked some time in the future as well. I've had my email hijacked several times and here are some suggestions that I've learned.

First, as the other members have suggested, run one or two good malware scans (i.e. Malwarebytes or MSE or TrendMicro) to get rid of any malware in your email account (or anywhere on your system).

Then, follow the steps below, and hopefully there's help for you there.

First line of defense is to change your password and all "secret questions" and "answers."

(If hackers have locked you out of your email, go on-line and sign up for the free service in which you give your email provider (i.e. MSN/Hotmail, Yahoo, etc.) your cell phone number and they text you a secret code to allow you to get back into your email.)

Next, when you're in your email, always "Log Out" of your email when you exit, rather than just hitting the exit X icon. Hitting the exit X doesn't end your email session, only 'logging out' actually shuts it down. If you just press exit, that leaves it available to be hacked because technically, it's still open, even after you've gone.

(By the way, when you are signing into your account, if you get a popup message that says you're signed in to multiple locations when you’re not, you need to sign out of those other locations. In that situation too, it is possible that you are being HACKED from one of those other locations.)

Finally, and most important, since most hacking is done through your address book, temporarily delete all contacts in your address book. Some sources advise leaving it this way for a week or more --- I think that's a matter of judgment. I deleted my address book over a year ago after I was really badly hacked and oddly enough, have found that for the most part, I really can live without it. And the good news is that since I've deleted it, I haven't been hacked once.

This last bit of information is the bad news, and that is: sometimes your account is hacked by someone stealing your account information, and they use it from a totally separate location to send out the infected emails. So, since the problem isn't connected with your system, there is nothing you can do on your system to change it. And even changing your email wouldn't help because the hacker can still continue to send out infected emails from their location, still using your old email address. The only way you might possibly be able to control it might be if there was some way to actually invalidate your email account's address. And even then, it may be possible for those phony emails to continue to go out.

If nothing above has helped the problem, take a look at these tutorials to see if there is any help there for you:

Windows Live Solution Center:- http://windowslivehelp.com/accountrecovery

Hotmail Security to Protect and Recover Your Account

 

[linda661]

Thanks to all for the advice and help. I ran the programs and changed my passwords. I haven't had any problems. I have 2 e-mail accounts and it was only in the Yahoo account. I was going to close the account, but my boyfriend has a mailbox there too and I didn't want him to lose his account. I think I will delete all of the address book contacts.

 

[bru]

I have 2 e-mail accounts and it was only in the Yahoo account. I was going to close the account, but my boyfriend has a mailbox there too and I didn't want him to lose his account. I think I will delete all of the address book contacts.

If it was the Yahoo account with the trouble then you were most likely hacked as opposed to malware. If you've changed your password you should be fine. Just try and think about how it may have happened (sometimes it is beyond your control) and try to avoid it happening again.