Self-sending spam emails to contacts. HELP!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Marzena1983, Nov 29, 2008.

  1. Marzena1983

    Marzena1983 Private E-2

    Hello all,

    this is the second time this has happened to me in a short period of time and I am hoping that somebody can help me.

    Something is sending emails to all my hotmail contacts. The email:

    Hey friend,
    How are you doing recently? I'd like to introduce you a very good foreign trading online company and the website is www.ui-mall.com
    It can offer you so many kinds of electronic products which you may be in need,such as laptops, gps, TV, cell phones, ps, MP3/4, motorcycles even several kinds of musical instruments and etc..
    You can take some time to have a check ,there must be something you are interested in and you 'd like to purchase .
    The contacts:
    XXXXXX
    XXXXXX
    Hoping you can enjoy your shopping from that company !
    Regards


    When I go to "Sent emails", I do see these emails there.

    I am attaching some logs (followed the instructions). Hope i did everything correct.

    Is this a virus??

    Please help!!

    Thanks in advance,
    Marzena
     

    Attached Files:

  2. buggabear

    buggabear MajorGeek

  3. Marzena1983

    Marzena1983 Private E-2

    Thanks for your reply,

    I already did all that..how can I check if i got rid of the malware?
     
  4. buggabear

    buggabear MajorGeek

    go back to the malware forum post your problem, wait for a malware expert to chime in. the programs you ran have logs which they will ask you to post. They will chekc the logs and can see if there is any malware left on your system, but you have to follow there instructions and they will guide you through.
     
  5. Marzena1983

    Marzena1983 Private E-2

    Hello all,

    this is the second time this has happened to me in a short period of time and I am hoping that somebody can help me.

    Something is sending emails to all my hotmail contacts. The email:

    Hey friend,
    How are you doing recently? I'd like to introduce you a very good foreign trading online company and the website is www.ui-mall.com
    It can offer you so many kinds of electronic products which you may be in need,such as laptops, gps, TV, cell phones, ps, MP3/4, motorcycles even several kinds of musical instruments and etc..
    You can take some time to have a check ,there must be something you are interested in and you 'd like to purchase .
    The contacts:
    XXXXXX
    XXXXXX
    Hoping you can enjoy your shopping from that company !
    Regards

    When I go to "Sent emails", I do see these emails there.

    I attached the logs under the "Software" forum.

    Is this a virus??

    Please help!!

    Thanks in advance,
    Marzena
     
  6. Marzena1983

    Marzena1983 Private E-2

    Hello everybody,

    how can i know if my computer still has malware on it? Nothing was found in the several scans i have done as advised...

    how did these emails get sent?

    thanks in advance for your help!!
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!


    Are you sure about the direction of the emails?? Is your PC sending them or do you appear to be receiving them from people in your contact list? The From address line can easily be fake out. Sometimes it is really necessary to examine the email headers to find out where the mail is really coming from.

    You need to attach all of the logs not some. Please attach the logs from SUPERAntiSpyware and Malwarebytes that were requested.


    Uninstall the below old versions of software:
    Java(TM) 6 Update 7
    Java(TM) SE Runtime Environment 6


    Per the instructions in the READ & RUN ME, you must only have one antivirus program installed. You have Norton 360 and AVG8 installed. Please decide which one you want to keep and uninstall the other immediately and then reboot.

    If you decide that you are going to remove Norton 360 then you should also run the below then reboot. After reboot run it one more time.

    Norton Removal Tool (SymNRT)



    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)

    After clicking Fix, exit HJT.


    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

    Also delete all files and subfolders in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
    C:\Windows\Temp
    C:\Users\Marzena\AppData\Local\Temp

    Now run Ccleaner!

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).


    Then attach the below log:
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    Last edited: Dec 6, 2008

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds