[AKAJohnDoe]

Re-read the 4th post in this thread.

[AKAJohnDoe]

Originally Posted by zachlutz

I use Gmail and access it online and through IMAP with Outlook 2007

Change your gMail account password

[Weembles]

I ran into this problem today, actually and I came across a thread about it on the MSDN forum:

http://forums.microsoft.com/msdn/sho...&tf=0&pageid=0

The best explanation there seems to be that Outlook is sending out read receipts to spam addresses automatically. The receipts don't show in our outboxes, but we do see the undeliverable notices when they bounce off their (fake) recipients.

[AKAJohnDoe]

Actually, that could be a plausible scenario. Especially with IMAP.

You might also try setting your junk filters to only Safe List Only and include your Contacts in the Safe List and turn off all scripting and images.

[Hirnsausen]

But the virus or malware script might send the bad e-mails, as soon as Outlook can access the Internet again.

So, consider my step of formatting the hard drive and installing everything new, in a virgin state. Might be the best. See details above (my previous posting).

[Zorro815]

I have experienced this same issue. Pretty much just as zachlutz described it. I have not noticed it prior to tonight. My first hint that something was odd was when I opened Outlook and saw that it was sending 9 emails. Then I got several bounce backs. I am using Outlook 2007 with a Gmail IMAP account. I do not have sent messages in my Outlook Sent Items but I do in Gmail's sent folder. The fact that Outlook displayed that it was sending emails (emails that I did not expect) at the same time this issue began is a bit too coincidental for me to dismiss.

[LamaZ]

I just started seeing this one. I echo everybody so far. I'm running scans for virus and spyware with: Windows Defender, Comodo, Avira.

I just pray that somebody cracks this one. Why go through all the effort of reformatting until somebody figures out how we got infected (and with what).

I'm particularly impressed with this one because, given my low trust in Winblows, I don't even run my own account with admin privileges. Therefore, if anything REALLY needs to install, I have to type in the admin password just like in a Mac/Linux.

I look forward to somebody figuring this one out.

Don't know if the admins on this site are going to nix me for this, but the ONLY other reference that I've been able to find for this problem so far is at this site:
http://www.techsupportforum.com/secu...-hijacked.html

As of today and now, there has been no solution posted there or here.

Regards,

LamaZ

[Moelito]

Have exactly the same issue at one of my home computers (the only one running windows). I removed all my email-accounts and then uninstalled office 2007 as a temporary solution.

Will keep an eye at this thread and hope for a solution.

Regards
Moe

[popovic.sasa]

Hello everyone,

Yesterday (23.10.2008) it happened to me also. I got a few "Delivery Status Notification (Failure)" E-mails, found no messages in "Sent" folder in Outlook 2007 but found all of them in "Sent" section when on gmail.com (web mail).

I'll add that I use IMAP in Outlook 2007 for my gmail account.

If anyone finds what is really causing this issue please post the solution here.

Regards,
Sasa

[Moelito]

Forgot to mention that I use WinXP. Anyone with Vista that has this problem?
Wonder if UAC prevent this malware.
Regards
Moe

[popovic.sasa]

I use Windows Vista Home Premium. UAC is turned on but it didn't help. I also have all the latest security updates for Windows, Office, etc.

[The Ninja Pirate]

Same issue here!

Outlook 2007 on Vista, fully patched and updated and running Firewall, Antispy and Antivirus behind a hardware Firewall.

This morning I suddenly saw 17 messages being sent in Outlook. I thought these might be old messages that hadn't sent but then the bouncebacks start, with my computer name in the automated reply field.

The commonality here seems to be using Outlook to access a gmail account (I use IMAP).

I haven't been able to spot the emails in any of my sent folders but like the other posters these emails CLEARLY seem to be originating from Outlook, i.e. they are not the standard spoofed emails I receive from time to time.

I suspect whether you see the sent messages depends on whether gmail is your primary account or secondary account (it is my secondary account).

I was up to forty bounced messages before I pulled the plug. I am going to restart now and delete my gmail account and see what happens.

This definitely seems to be a problem in Outlook, not simply a spoofed account.

EDIT: Deleting the gmail account in Outlook *seems* to have stopped the problem. Also, I noticed that in the returned emails the message ID looks a little odd - it is a long string of random letters/numbers separated by $ symbols followed by @username@gmail.com? Don't normally check things like this but is that normal?

[Moelito]

I'm not sure if I'm right but after reading the forum thread at microsoft it seems that this issue isn't any malware.
(http://forums.microsoft.com/msdn/sho...&tf=0&pageid=0)
Just as Weembles mentioned above, it's a bug in outlook with read-receipts that force outlook to use the "X-Confirm-Reading-To" line in received spam mails. It doesn't help to deactivate the receipts in outlook settings.
Please correct me if I'm wrong.

Thank you very much microsoft. My bought domain name and it's corresponding mail addresses is now known by several spammers!

Regards
Moelito

[The Ninja Pirate]

Seems strange that it just started happening in the last 48 hours for many of us posting though?

Unless gmail have changed a setting?

Also, a quick scan through didn't show that I had received over 40 emails labelled as spam by gmail between last night when I turned my laptop off and this morning when I turned it back on again? Yet I got about 40 message undeliverables this morning?

[tsimmons]

Sorry, but Rich-M is 100% WRONG. This is real.

I, too, am having this problem (Outlook 2007). I am a network administrator and I'm very careful about what I run/use/install. I run Avast Professional (paid version) fully up to date and am running a fully patched XPSP3 machine.

The read-receipt thread might be related, but http://forums.microsoft.com/WindowsO...40565&SiteID=2 is the EXACT issue (with no solution yet.) I posted my thoughts there, as well. And before someone says "someone is spoofing your e-mail account" know that I run our company's mail server and I checked the SMTP logs and the messages were in fact sent from my laptop at home USING SMTP AUTHENTICATION (Digest-MD5). All my accounts use IMAP and it was sent using my default account, which is NOT Gmail, so I doubt this is Gmail related.

The other thread mentions the Kapersky scanner finding something so I am trying that and will post the results.