Something has been diverting my emails in the dead of night..grr..

carmel11

A warning header just came up at the top of my email pagewhen I went into my emails to say my emails were being forwarded .I checked the settings-and some random company is getting my emails.help I have now cancelled it,but !!!!!! how did they do this and why would they!!

free4440273

which email provider ? //

fwor

Do you mean that you received an email from a company saying that they were receiving emails addressed to you, or that they were receiving emails allegedly ~from~ you?

Unfortunately it's almost trivial to fake the senders address in an email, so not much you can do if the latter.

carmel11

Hotmail.no,you can choose to have your emails forwarded,and this address had been inserted,not by me or OH.

carmel11

i got a message at the top warning me my emails were being forwarded,i spotted it and saw this address in australia#
i have had malware probs,computer was supposed to be fixed

carmel11

anyone,I am quite worried

A.Penny.Saved

What do you use the hotmail account for? Why would someone want to forward them?

carmel11

A.Penny.Saved wrote: »

What do you use the hotmail account for? Why would someone want to forward them?

Nothing important,I have no idea why someone would.
How can someone have physically inserted their email address (a mobile personal trainer in australia has given the address in a link I found)i have no contact with anyone in australia

RussJK

If you've previously had an infection, then this is a sign you need to change all your passwords if you haven't previously. They could have harvested all your passwords before your computer was cleaned. Alternatively, you might still be infected.

It might be an idea to check for yourself that you don't still have a running infection before worrying about passwords - on the other hand, you may want to change your password from a safe computer. Do whatever you believe is more important. It's 5:23am in Australia, so you have some time to sort this out

First run install Malwarebytes Anti-Malware
http://www.malwarebytes.org/mbam.php
update it fully, and run a quick scan, and post a log. A quick scan catches 99% of things, but you can later do a full scan for peace of mind.

Secondly a Hijackthis! log would be helpful for AlienRik or Browntoa.

These are some very quick scanners as well:
Hitman Pro: Second Opinion Malware Scanner (very quick! no install needed)
http://www.surfright.nl/en/hitmanpro

Kapersky TDSSKiller (very quick! no install needed, for TDSS rootkit)
http://support.kaspersky.com/downloads/utils/tdsskiller.exe



(alternatives to try at your leisure if you want:
Dr Web CureIt! https://www.freedrweb.com/download+cureit/gr/?lng=en (direct link)

Microsoft Windows Malicious Software Removal Tool 32-bit (no install needed)
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Spybot: Search & Destroy (requires install) http://www.safer-networking.org/en/spybotsd/index.html

Norman Malware Cleaner (no install needed, takes time)
http://www.softpedia.com/get/Antivirus/Norman-Malware-Cleaner.shtml)

carmel11

RussJK wrote: »

If you've previously had an infection, then this is a sign you need to change all your passwords if you haven't previously. They could have harvested all your passwords before your computer was cleaned. Alternatively, you might still be infected.

It might be an idea to check for yourself that you don't still have a running infection before worrying about passwords - on the other hand, you may want to change your password from a safe computer. Do whatever you believe is more important. It's 5:23am in Australia, so you have some time to sort this out

First run install Malwarebytes Anti-Malware
http://www.malwarebytes.org/mbam.php
update it fully, and run a quick scan, and post a log. A quick scan catches 99% of things, but you can later do a full scan for peace of mind.

Secondly a Hijackthis! log would be helpful for AlienRik or Browntoa.

These are some very quick scanners as well:
Hitman Pro: Second Opinion Malware Scanner (very quick! no install needed)
http://www.surfright.nl/en/hitmanpro

Kapersky TDSSKiller (very quick! no install needed, for TDSS rootkit)
http://support.kaspersky.com/downloads/utils/tdsskiller.exe



(alternatives to try at your leisure if you want:
Dr Web CureIt! https://www.freedrweb.com/download+cureit/gr/?lng=en (direct link)

Microsoft Windows Malicious Software Removal Tool 32-bit (no install needed)
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Spybot: Search & Destroy (requires install) http://www.safer-networking.org/en/spybotsd/index.html

Norman Malware Cleaner (no install needed, takes time)
http://www.softpedia.com/get/Antivirus/Norman-Malware-Cleaner.shtml)

Thanks,but I dont think I will be able to do any of that.I am going to send it back to the computer shop.
I have got someone to change my password for me.

Its so weird knowing that some virus has been diverting my emails-in the middle of the night-for all I know for ages,freaks me out..

A friend says they probably have been harvesting my contacts,they sell them.I need to check my paypal account tommorrow..

He also said the company whos email is being used may not know either.
i wonder how many others are vgetting their emails forwarded on without their knowledge?

carmel11

RussJK wrote: »

Fair enough, although each of them are incredibly simple to use. You give up easy! Money saving website and all Who knows if the shop know what they are doing?

Just make sure you sort out your financials like paypal, although your banking should be okay with all the various checks they do. Think of any websites that might have your card details saved.

Sorry,I don'e mean to sound ungrateful.I will give it a try today.
I dont do online banking,but I will check and change more more passwords today.
I wish there was someway to completely disable ie remove the forwarding facility,but there isn't.

I received 3 or 4 phishing type emails last night,while I havent had any for a while,..purporting to be from Western union,for example..