Please help... dodgy emails?????

[cazzyd]

hello, someone out there must be able to help me.....

the problem is.......

I keep getting returned mail in my inbox, with a red exclaimation mark, and mail returned or system failiure, mailer demon,, stuff like that.. the thing is... i haven't sent the emails out in the first place.... Has something got into my system and my address book.. because all these emails have files attatched in binary??????..

I think something has and is sending viruses out..... also we had a email from paypal, telling us they could not process our request and would have to log in to our account...... how scary is thAT.... WE HAVEN'T CONTACTED PAYPAL FOR AGES.... but someone definatly has used our email.....

I have spybotted our system and used ad aware, and still these returned emails keep being sent and returned from my email..

any ideas????? Im thinking of disconnecting this pc for good, as Two of our correspondents have had such emails from us? and now there pc,s have viruses...

yours hopefully..
Caz

 

[cybertech]

Go here and run at least two of the online scanners.

http://forums.techguy.org/t110854/s.html

Then go to the Microsoft windows update site and get all of the critical patchs for your OS and IE.

 

[Rollin' Rog]

Don't even open them. You are undoubtably on someone's contacts/address list who has an infected computer and your e-mail address is being "forged" to the e-mails it is sending out.

I'm not sure what you can do about it except, perhaps, add the "mailer daemon" to your blocked list atleast temporarily.

 

[cazzyd]

just run one of the online scanners, and it has found 18 viruses.... how do I get them removed from my pc???

caz

 

[cazzyd]

used rav anti virus this is the report.... can I get rid of them???
Statistics

Scanned files: 13660
Scanned directories: 825
Scanned archives: 476
Size of the scanned files: 2253966403
Packed files: 253
Known viruses found: 18
Virus bodies: 3
Suspicious files: 0

Disinfected files: 0
Deleted files: 0
Renamed files: 0
Copied files: 0
I/O errors: 0
Warnings: 0
Corrupted files: 0
New files: 44328
Mail files: 116




Found viruses
File: c:\WINDOWS\sysmonxp.exe
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\base64.tmp->(Base64)
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\zipo0.txt->(Base64)->message.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\firewalllogger.txt
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\zippedbase64.tmp->data.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\zipo1.txt->(Base64)->msg.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\zipo2.txt->(Base64)->mail.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\WINDOWS\zipo3.txt->(Base64)->data.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Inbox.imm->(part0667->(IFRAME0000)
Virus: HTML/IFrame_Exploit* Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Inbox.imm->(part0668:message.pif)
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\mail10134.zip->data.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\data5930.zip->mail.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\message4910.zip->mail.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\message2618.zip->mail.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\mail18449.zip->data.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\mail25240.zip->message.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\mail27426.zip->data.eml .scr
Virus: Win32/[email protected] Status: Infected

File: c:\Program Files\IncrediMail\Data\Identities\{C83473E0-CBDD-11D6-9755-00E02912334A}\Message Store\Attachments\{F19187F9-7364-11D8-9755-00E02912334A}\mp3music.pif
Virus: Win32/[email protected] Status: Infected


is it serious, and can anything be done about them...

cheers,
caz

 

[cybertech]

Download and run Stinger. If this is XP make sure you run this as administrator.
http://vil.nai.com/vil/averttools.asp#stinger

 

[cazzyd]

Hi, I downloaded the stinger, it found 1 virus "netsky"and deleted it..... cheers, does this mean Im now virus free, or should i perform more checks???

thanx..
caz

 

[cybertech]

Go to Tools, Folder Options and click on the View tab. Make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files". Now click "Apply to all folders"
Click "Apply" then "OK".

Rescan just to make sure you got it all

 

[cazzyd]

hope there is still someone their at this late hour......????? performed another scan, and it found some more viruses..... so Ive gotten rid of those, and restarted my pc.... checked my email, and have a load more of these bogus emails.... now I cant even delete them off... so Ive uninstalled my email server, and switched back to outlook express... I guess if I do another re scan, I will find more viruses that have re attatched themselves into my pc, via these emails........but before I do that.. can anyone recommend a free trail/download to prevent any further invasions until I can afford to buy my own.... I feel Its pointless doing these scans, only to have them right back again..... sorry for waffling on but im at the end of my teather,... and if i could get my hands on the idiots who create these viruses, i will not be responsible for my actions...

thanks..
a very dejected Caz

 

[cazzyd]

Thanx Cybertech... I will be forever in your debt..... I installed some free antivirus from this wonderful site... and im pleased to let you know im virus free.... ... thanx soooo much

Caz

 

[cybertech]

Just delete those bogus e-mails, don't open them. Someone has you on their address book and they are infected. Stinger gets updated (almost daily right now) so keep the link and don't feel fear about doing a scan.

 

[cybertech]

Thanx Cybertech... I will be forever in your debt..... I installed some free antivirus from this wonderful site... and im pleased to let you know im virus free.... ... thanx soooo much

Caz

Happy to have helped. Plz consider a donation to the site to keep it up and running.