Home/ Questions/Q 7188
Next
In Process
Computing Staff
  • 1
Asked: 2021-11-23T10:27:33+00:00 In:

How Do I Stop My Pc Sending Spam

  • 1

My pc seems to be sending spam emails but they don’t seem to be going to people in my address book. I keep getting undelivered mail messages from my provider. They are all unknown to me.

Share

    1 Answer

    1. Copy & Paste the text in Blue below & save it into Notepad on your Desktop & name it fixlist.txt
      NOTE:It is important that Notepad is used. The fix will not work if Word or some other program is used.
      NOTE: It is important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
      NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

      closeprocesses:
      emptytemp:
      AlternateDataStreams: C:\ProgramData\Temp:4116B5AB
      AlternateDataStreams: C:\ProgramData\Temp:56E2E879
      AlternateDataStreams: C:\ProgramData\Temp:FB1B13D8
      HKLM-x32\…\Run: [] => [X]
      Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
      HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
      HKU\S-1-5-21-279346440-3864694767-3748385609-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
      SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
      SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searc…
      SearchScopes: HKLM-x32 -> DefaultScope value is missing
      SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?source…
      SearchScopes: HKU\S-1-5-21-279346440-3864694767-3748385609-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
      Toolbar: HKLM – No Name – {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} – No File
      FF Homepage: hxxp://media.telstra.com.au/home.html
      FF Plugin: @microsoft.com/GENUINE -> disabled No File
      FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
      S3 catchme; \??\C:\ComboFix\catchme.sys [X]
      S3 cpuz134; \??\C:\Users\BRIANH~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
      S3 motandroidusb; System32\Drivers\motoandroid.sys [X]
      S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X]
      S3 motmodem; system32\DRIVERS\motmodem.sys [X]
      S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
      S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
      S3 zgwhsdiag; system32\DRIVERS\zgwhsdiag.sys [X]
      S3 zgwhsnmea; system32\DRIVERS\zgwhsnmea.sys [X]

      Run FRST/FRST64 and press the Fix button just once and wait.
      If for some reason the tool needs a restart, please make sure you let the system restart normally. After that, let the tool complete its run.
      When finished FRST will generate a log on the Desktop (Fixlog.txt). Please Copy & Paste the contents into your reply.

      • 0