Hi. I have the same problem, and it's killed my Windows Explorer and Internet Explorer. I can't get online on my PC at all. (This is coming from an old PC). I tried the above remedy and thought it had worked, but Windows had to be re-installed. I did this, but as soon as it rebooted it all vanished again. I can run HijackThis, but how do I get the log off the infected PC and onto this one, so that I can post it? It'll take a while to type it, but I'll do that if there's no other way. Thanks!

0

I've posted a question elsewhere, but this is more current. My hotmail account has been sending these emails out (the one mentioned above is the 1st, then the 2nd was sent about 2 weeks later) The 2nd one is a little smarter as it splits your contact list into 3-4 per email. I'd appreciate any help on this - my pc seems virus free. The second email text is below: -----Original Message----- From: Gareth Williams [mailto:j_dandcoke@hotmail.com] Sent: 13 May 2006 01:10 To: (deleted to protect the innocent) Subject: Help Hi! My computer has been crashed by viruses a few days ago. I scaned my computer with Norton AntiVirus and Microsoft AntiSpyware and they didn't found anything. But this Spy Guard found 3 viruses and 15 spyware! I bought it here http://sxpress.org See you!

0

Hi I am also receiving the same Email messages. I have scanned my Computer several times and also followed the advice listed above. I have also used Spybot and Ad-aware but the emails still keep getting sent. I strongly suspect now, that the emails are not coming from my computer. If anyone manages to resolve this problem, I would be very interested in hearing about it. Thanks Matthew Hopkins matthewkhopkins@tiscali.co.uk

0

Ok. To start out with. I have been getting this same issue as well. After talking to a network admin about it, it appears that my .NET passport has been hacked and likely everyone else that are having this issue as well. Fortunately I have my own e-mail address in my address book so I have recieved them both and have been able to view the headers. The first one appears to have been sent from a user of an ISP in Plano, Texas while the second one is originating from a user of an ISP in Montreal, Quebec. The good news is none of us are infected with any kind of virus. The bad news is either you are going to want to get a new hotmail account or you can try changing your password. Here are the headers of the e-mails in question for those who are interested: First one sent on April 27, 2006. MIME-Version: 1.0 X-Originating-IP: [70.226.90.90] X-Originating-Email: [szereck@hotmail.com] X-Sender: szereck@hotmail.com Received: from omc2-s35.bay6.hotmail.com ([65.54.249.45]) by bay0-mc8-f18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 27 Apr 2006 16:04:50 -0700 Received: from hotmail.com ([64.4.17.21]) by omc2-s35.bay6.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Thu, 27 Apr 2006 16:04:03 -0700 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Thu, 27 Apr 2006 16:04:02 -0700 Received: from 64.4.17.200 by by111fd.bay111.hotmail.msn.com with HTTP;Thu, 27 Apr 2006 23:04:01 GMT X-Message-Info: sPHCaSLRLXyboVWML9EPSnvWmwnWXltDiHYeHYsMCps= X-OriginalArrivalTime: 27 Apr 2006 23:04:02.0846 (UTC) FILETIME=[E038F3E0:01C66A4E] Return-Path: szereck@hotmail.com Second one sent on May 13, 2006. MIME-Version: 1.0 X-Originating-IP: [66.131.101.115] X-Originating-Email: [szereck@hotmail.com] X-Sender: szereck@hotmail.com Received: from omc2-s4.bay6.hotmail.com ([65.54.249.14]) by bay0-mc12-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 13 May 2006 07:00:38 -0700 Received: from hotmail.com ([64.4.17.23]) by omc2-s4.bay6.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 13 May 2006 07:00:23 -0700 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sat, 13 May 2006 07:00:23 -0700 Received: from 64.4.17.200 by by111fd.bay111.hotmail.msn.com with HTTP;Sat, 13 May 2006 14:00:22 GMT X-Message-Info: LsUYwwHHNt1KZRqgAaPuiToFHDO5nGCtjVa6deq8CzE= X-OriginalArrivalTime: 13 May 2006 14:00:23.0320 (UTC) FILETIME=[94144980:01C67695] Return-Path: szereck@hotmail.com Hope this helps someone. And now to go and toss this old e-mail out the window and get a new account. Fortunately its not going to cause much problems since I don't use the e-mail address for anything other than MSN Messenger.

0

One thing to add. If any of you decide to start a new account, one thing I would recomend is print out your contact list and then delete all your contacts from the account before you abandon it. This in theory will prevent anyone from sending these e-mails to your friends in the future.

0