Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

E-mail hijacked and sending spam to Address Book friends

Jul 3, 2010 2:01AM PDT

I have a dell dimension 3000 running windows xp. I am a Comcast.Net e-mail user using a broadband cable at my home. Somehow my @comcast.net e-mail account is sending e-mails with a one line link to various members of my address book. 15-20 per day. The link address is not always the same, but sends people to the same site (Canadian Pharmacy Viagra ads). I am not "receiving" them, so I can't check origination. I have Norton Internet Security 2010 running and it is not showing anything wrong. Comcast said to take my machine in or change the user name and password on my account. Any best practices that could be shared with me?

Discussion is locked

- Collapse -
Another Solution
Jul 25, 2010 5:05AM PDT
- Collapse -
You waste money on purshasing crap
Jul 26, 2010 2:59AM PDT

First thing to do is change ALL (ALL!!! passwords). And use not something like your real name but REAL passwords. 3 letters + 3 numbers or sth like that.
Second thing is DO NOT use old browser like IE 6. Forget it.
Third thing is update everything into oblivion (and browser).
Forth thing is forget "I remove you virus for $20" web sites. They just install nice virus for $20.
---
And not so critical, but the most drastic and useful thing is forget windows at all for tasks where security is important. Use Linux/BSD maybe MAC OS.

- Collapse -
running windows xp - too bad
Jul 26, 2010 3:00AM PDT

Use Linux or BSD (maybe MAC OS, but expensive) for security critical tasks.

- Collapse -
and if you are windows adddict
Jul 26, 2010 3:01AM PDT

At least upgrade to 7.

- Collapse -
Email addresses hacked
Jul 26, 2010 8:30AM PDT

I posted this before. Call your anti-virus people, let them help you. I paid $99 and Norton fixed it. Took two hours but I do not wish to delete emails etc etc.

- Collapse -
I still think...
Jul 26, 2010 10:36AM PDT

...you wasted your money on that. just changing your password could've accomplished the same thing.
Norton's isn't that good, and it's a resource hog. But their people are always happy to take your money

- Collapse -
Canadian Pharm Mall
Nov 21, 2010 1:26AM PST

I started receiving both emails from myself which then linked to their site AND complaints from all contacts in my address book who had been receiving the same.
It was embarrassing, and I tried approaching MSN, the Pharm Mall et al, to no avail. Then I noticed that a brand new addition to my address book also received an email from them, so it was obvious they had real time hacking into the main MSN address book data base and hijacked my contact list.
So, apart from moving to another carrier (which I did), I emptied the entire address book, and kept an eye out for emails from myself and 'junked' them.
The Hotmail system recognises familiar email addresses without having to enter them in the address book, so I can still use it by referring to a hard copy first and upon entering only one syllable, an option list of possible addressees comes up, so it is easy if you MUST stay with your carrier.
The result is....I am now TOTALLY CLEAR as are all my contacts.

- Collapse -
E-Mail hijack and can't find it.
May 18, 2011 7:04AM PDT

I have run antivirus, iobit 360 and other antivirus and registry checkers.

My friends get email saying they are from me at yahoo, but MS Outlook does not list them as sent from my computer. Yahoo does not list them in my sent messages folder when I log onto Yahoo mail. I also have a gmail account, but again nothing shows.

I very seldom log onto Yahoo, but use MS Outlook daily. I even set my email to not send automatically. Before I click send mail I check all mail in my outbox to make sure it is legit. Only then do I hit send. I deleted all addresses on Yahoo mail and gmail.com just to make sure.

It is not really coming from my account or my computer. I am sent a copy also since my email is in my address book. My first email address is a total fake, but I do not get a send error back like I normally would. It would appear someone stole my email list then edited out the bad emails like that.

It seems to happen every 2 weeks (only twice so far). Just before it started I was on facebook and my typing was being delayed for some reason. I would type and then a couple of seconds later the characters would appear. Therefore, I suspect someone in facebook found a way to download email lists from facebook users.

I think the emails are coming from somewhere besides my computer but how do I stop it? How can I get someone to track these guys down and arrest them. These bad emails have some strange link that will take you very briefly to a pharacutical add then jumps to a dot ru address. My virus checker stops that action as unsafe, but I am concerned about my friends.

Can anyone help?

- Collapse -
stopping email address theft
May 18, 2011 9:43AM PDT

IN MY OPINION: email address theft will not stop until the email system is changed to not allow forging of To: and From: fields in the headers.

If this means everybody worldwide will have to get new email software, so be it.

Something that might help, short of the major change, would be for all ISPs everywhere, worldwide, to start charging to send emails. Something simple like the old US 1st class letter rate of 3 cents per message. Or maybe allow some number of messages per day for free, like 15 or 20, then charging big for the excess number of messages. But, fat chance of getting ALL ISPs worldwide to join in that.