Problems with Outlook Express 6 - virus??

[gabrielles]

returned from overseas and am attempting to fix my mother's computer. when you open her outlook express her inbox repeatedly gets filled with mail labeled Mail administrator Subject: mail system error - returned mail. the body of the text says:

This Message was undeliverable due to the following reason:

Each of the following recipients was rejected by a remote mail server.
The reasons given by the server are included to help you determine why
each recipient was rejected.

Recipient: <ibrubin@internet-zahav.net>
Reason: <ibrubin@internet-zahav.net>... Invalid LDAP mailhost: SPAM
I'm guessing that my computer is sending out SPAM. What do you I do to make it stop? This morning she received 290 emails - this can't go on!
Thanks very much for any help you can give.

 

[xgerryx]

Hello and welcome to TSG.

Could be that her email address has been spoofed (spam distributer using her address) in which case there is not a lot you can do about it except wait it out. You could set up a message rule using the subject line to delete or send to a spam folder.

It would be a good idea to check her av is working properly and then also do an online scan.

 

[gabrielles]

I have the above virus/worm in my email outlook express. could someone please advise me howto get rid of it. it is cripplingly annoying!!
many thanks

 

[bearone2]

is it the same computer or a different one.

if 1 or 2 computers, you need anti virus software.

 

[gabrielles]

thanks for the response. its a single computer (my mother's who's 78 and I 've no idea what she's been up to on this computer. i ran stinger to target 32KEZ which seems to have worked in a limited way. any other suggestions please? many thanks

 

[xgerryx]

There is a Klez removal toll available here: http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.html

I have requested this thread be moved to security for you.

 

[bearone2]

you need av protection before you get infected, not after the virus.

 

[$teve]

Hi and welcome to TSG

Go here and download HijackThis
Winzip Self-extracting archive It will extract to C:\Program files
Doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and please copy & paste its contents to the forum.

It will possibly show other issues deserving our attention, but most of what it lists will be harmless or even required, so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.


If you have fixed anything with Spybot Search and Destroy,AdAware or any other spyware scanners...please reboot before scanning.


Please disable all Anti Spyware Scanners until your problem is resolved

I have no time to examine your log today unfortunately but please feel free to contact a moderator if your post does not get answered after an hour or so of posting.