Welcome, Guest. Please login or register.
Did you miss your activation email?
May 24, 2013, 02:54:22 AM

Login with username, password and session length

663875 Posts
70602 Topics
145238 Members

Latest Member: Ciprius

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  General Security Questions and Comments
| | |-+  Hacked e-mail contacts
« previous next »
Pages: [1] Go Down Print
Author Topic: Hacked e-mail contacts  (Read 5475 times)
hesleysj
Newbie
*
Offline Offline

Posts: 1


« on: July 28, 2011, 03:27:28 PM »

Someone has hacked my e-mail account and is sendind spam to my contacts pretenting to be me. Here is the message source that I copied;
Message-ID: <SNT127-W33921C17B3A228178E2D6694350[at]phx.gbl>
Content-Type: multipart/alternative;
boundary="_d40125ae-0073-40fb-bd46-f88934b972c2_"
X-Originating-IP: [173.234.169.210]
From: STEVEN HESLEY <steve.hesley[at]msn.com>
To: <aparks[at]acop.com>
Subject: Hey have you seen the online penny auctions yet? aparks
Date: Wed, 27 Jul 2011 15:53:16 -0500
Importance: Normal
MIME-Version: 1.0
--_d40125ae-0073-40fb-bd46-f88934b972c2_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
aparks They shipped our items yesterday=2C its so much easier than it seems
check this story i came across in cnbc
http://Cnbc.com-investing.us/2011/?ReadArticle=3D20242250=20
STEVEN
=--_d40125ae-0073-40fb-bd46-f88934b972c2_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<style><!--
.hmmessage P
{
margin:0px=3B
padding:0px
}
body.hmmessage
{
font-size: 10pt=3B
font-family:Tahoma
}
--></style>
</head>
<body class=3D'hmmessage'><div dir=3D'ltr'>aparks They shipped our items ye=
sterday=2C its so much easier than it seems

check this story i came =
across in cnbc

<a href=3D"<a href=3D'http://CNBC.com-id.us/2011/?new=
sId=3D19363363'>http://CNBC.com-id.us/2011/?newsId=3D19363363[/url]"><a href=
=3D'http://Cnbc.com-investing.us/2011/?ReadArticle=3D20242250'>http://Cnbc.=
com-investing.us/2011/?ReadArticle=3D20242250[/url][/url]

STEVEN
       =
 </div></body>
</html>=
--_d40125ae-0073-40fb-bd46-f88934b972c2_--

I don't know if this helps anyone to see this, they have hacked me twice now how do I stop it?
I'm useing Window's Live hot mail
« Last Edit: July 28, 2011, 03:29:55 PM by hesleysj » Logged
clockwork
Comodo's Hero
*****
Offline Offline

Posts: 1919


Oxygen requires Chuck Norris to live


« Reply #1 on: August 01, 2011, 11:31:14 AM »

there is the possibillity that someone uses your adress as sender information. fake sender.

if they really have access twice to your account on the other hand, it would be most likely not hacking of the email account, but having a way to get your passwords.

X-Originating-IP: [173.234.169.210]
do you know that ip?
Logged

"If there is a problem, it`s something interesting. Try to circumvent or fix it.
In the old ages there was no support. That`s why we got the brain we have today.
Otherwise we would only be able to call a number and listen."
Cristy
Malware Research Group
Comodo's Hero
*****
Offline Offline

Posts: 280


Romania


« Reply #2 on: August 18, 2011, 06:08:46 AM »

Reset your password using recover. And scan for malware, maybe you have keylogger.
173.234.169.210 -> New York, US.
« Last Edit: August 18, 2011, 05:05:33 PM by Bad Frogger » Logged
EFB
Newbie
*
Offline Offline

Posts: 1


« Reply #3 on: August 19, 2011, 03:28:48 AM »

Yesterday, on my aol email, I was trying to copy a few to save in a  compressed file to send to my unii. Out of nowhere a microsoft message popped up, evidently `collecting' my incoming mail at speed and before I could take any action, disappeared. 

I checked the outlook express in box and all I was left with was  a few from 7/12/10 to 6/1/2011.

They  actually started from 2007 onwards. This is my laptop by the way and is the back up for email, so there weren't a huge number in the mail box.

The uni checked this, but can't find that they have been archived. All they could say was that some of my online webmail was now in another `in' box under home.

What's going on and how do I get these emails back. some of them are really important.

I have also noticed recently that when I log off from the laptop, there is often a message saying there is another user.  There isn't one. I am the only user.  I think I am being `hacked' - what do I do ?
Logged
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 16712



« Reply #4 on: August 19, 2011, 10:24:34 AM »

The most likely explanation for spam emails being sent under your name is that spammers use your email address. Your address gets spoofed.

When in doubt about being hacked change your passwords like was suggested but only after having thoroughly scanned your computer.

Yesterday, on my aol email, I was trying to copy a few to save in a  compressed file to send to my unii. Out of nowhere a microsoft message popped up, evidently `collecting' my incoming mail at speed and before I could take any action, disappeared.
Do you recall what exactly the message said? Were you sending from OE or from AOL webmail?

Quote
I checked the outlook express in box and all I was left with was  a few from 7/12/10 to 6/1/2011.

They  actually started from 2007 onwards. This is my laptop by the way and is the back up for email, so there weren't a huge number in the mail box.
When you use OE do you let it keep messages on the server?

Quote
The uni checked this, but can't find that they have been archived. All they could say was that some of my online webmail was now in another `in' box under home.

What's going on and how do I get these emails back. some of them are really important.
OE stores its files in .dbx files. Use the search function of Windows to find them all.

Quote
I have also noticed recently that when I log off from the laptop, there is often a message saying there is another user.  There isn't one. I am the only user.  I think I am being `hacked' - what do I do ?
What exactly does the message say? Does it mention a program in the alert?
Logged

Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.15 seconds with 20 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com