Virus sending spam through Yahoo

February 7, 2006 at 07:35:24
Specs: XP Home, idk

I have to repost this because I think I may have had some offensive content in my last post. Sorry, I got a little frustrated. Please read carefully before making any post though.

The problem is that my computer at school is sending out spam. I can see the spam trying to be sent out through Yahoo when I use TCPView. I have been flagged by the school for spamming and I now have restricted access. I can only update common antivirus programs, windows, and anti-spyware programs. I am on this site on a different computer and I cannot access any online virus scans. I currently am running Norton Corporate and Ad-Aware SE Pro with Ad-Watch. They are both up to date and I have run thorough scans with each. For antivirus, I have also tried running McAfee and AVG. For spyware, I have tried Spybot, Webroot Spysweeper, and a few others. Nothing is pick this virus up. I know I can disable mailing capabilities but I would like to know how to remove the virus, just in case I want to set up my mail again. Last post, I received many ideas that were easily dismissed so please use common sense I have tried the basics. Maybe someone can recommend a program of some sort or give me some idea on how to fix this. Thank you.


See More: Virus sending spam through Yahoo

Report •


#1
February 7, 2006 at 07:51:54

Since you are using Yahoo, and it has its own virus scanner are you sure that the emails are actually being sent out by your system, and not being "spoofed". If it really is your system that is sending them, have you turned system restore off, deleted all the temp files and restarted your computer. During the restart did you enter the safe mode and run all your scans while in it? If you have done this, then download EWIDO and burn it to a cd and install it on the infected computer, enter the safe mode and run its scan. It is at; http://www.ewido.net/en/

If this does not resolve the problem, you need to contact Yahoo Customer support.


Report •

#2
February 7, 2006 at 08:29:10

I have already deleted all temp files and run the scans in safe mode. I'm not to sure if its being spoofed or not. I have a valid yahoo account and when I use TCPView I see (beginning varies)yahoo:smtp so it could be sent through yahoo without going through their scan from my computer. Here is an article that is related from today.

http://news.yahoo.com/s/ap/20060206/ap_on_hi_te/e_mail_fee;_ylt=An4ajNGEVKW.nKn_5QLPZTys0NUE;_ylu=X3oDMTA3cjE0b2MwBHNlYwM3Mzg-

So I cannot be to sure which way it is truely being sent out but I will try you scan and see if that works. Thanks.


Report •

#3
February 7, 2006 at 08:42:01

I am not sure that the TCP View would be that informative for someone like me that has the Yahoo Toolbar and uses Yahoo for a homepage, mail, etc. Contact the university IT people to see if it is because of the complaints they have received, or are they actually tracking your systems outgoing traffic. If it is spoofing, there is nothing you can do about it, except perhaps change your email address. The IT people should be very much aware of how spoofing works, and should be there to help you with your problem.

Report •

Related Solutions

#4
February 7, 2006 at 11:33:34

The IT department has actually come to look at the computer and they cannot find anything either. The emails are coming from my computer. They have some program that can track if an email is being set to many people in a short amount of time and then rescrits the ip address that it is coming from. When they were there, they did all their diagnostics and even said everything was fine so they let me back on the network. Within a minute there were about 25 emails that were sent out and I was automatically rescrited again. They were baffled. They suggested a reformat, which I have been trying to avoid since the beginning. I have a lot of programs that I have paid for an lost the CDs for. Looks like I'm SOL. Thanks a lot for the help.

Report •

#5
February 7, 2006 at 12:13:10

Sorry to hear the not-so-good news. There gotta be something in your machine (maybe a bot?)

They were baffled. They suggested a reformat

That's their opting out of doing a lot of work. The school IT people are no different from the Computer store Computer repair departments - they believe reformat solves everything.

i_XpUser


Report •

#6
February 7, 2006 at 12:56:33

Did EWIDO work? If not try a trial version of Kaspersky available at;
http://usa.kaspersky.com/downloads/trial-versions.php

Report •

#7
February 7, 2006 at 13:00:58

What firewall do you use?

Report •

#8
February 7, 2006 at 13:34:41

"they believe reformat solves everything".

.....technically, it does have the ability to resolve 99.999% of software related PC issues, the kicker is, it may not be the best or rational approach.

The gnats in my house know what's about to happen when I reach for the sledge hammer....LOL

StopBadware


Report •

#9
February 7, 2006 at 13:39:30

Reformating will not do anything if it is the Yahoo email account that is the problem. Have you changed your Yahoo password and logged out?

Report •

#10
February 7, 2006 at 13:52:27

it (reformat) may not be the best or rational approach.

Of course it never is but it's the unwritten rule of practice adopted by the brand-name computer stores as the best solution to all software related problems. It's pathic!


i_XpUser


Report •

#11
February 7, 2006 at 14:14:23

@ XpUser

I know you meant "pathetic", but phew !!!

StopBadware


Report •


Ask Question