E-mails being sent from my address

Hi,

My Mum has asked me to have a look at her PC as she keeps getting e-mails from herself and more recently it seems advertising messages have been sent from her address to people.

I haven't much of a clue myself so bear with me. I have followed all the steps in READ & RUN ME FIRST and have attached my logs, I hope everything is there.

Cheers

 

Are you the same person as tapyouout?

I have a few small changes for your mother, but I don't find any malware. I would strongly urge her to use CCleaner everytime she finishes browsing to get rid of the temporary files and cookies as this is how advertising companies and malware get into the computer. Also, it would be a very good idea for her to go through the How to Protect Yourself from Malware and to install Spyware Blaster and look at the other suggestions there.

Now, please do the following:

1) Install the current version of Sun Java from: Sun Java Runtime Environment

2) If you do not use Windows Messenger (not to be confused with MSN Messenger!!) I would like you to run Disable/Remove Windows Messenger

3) Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab


Does the following belong to a program you know or want to keep? If not, please fix it as well.


O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-17.cab

After you click fix, just close hijackthis.


4) Now run CCleaner at the default setting with the Windows tab as the one on top.


If she's still getting advertising, I can recommend a couple of the online scans for her to run on her computer.

Let me know how this goes.
abri

 

I will try your suggestions and let you know if the problem persists. Thanks for the quick response