Email Hacked? Virus?

[Noodles]

This morning I logged onto my hotmail and I had alot of email returned to sender emails.

There was a message at the top of my hotmail saying that my 'Automated vacation reply' was on

so I went to options and turned it off. The message in the vacation reply was;

Hey，

how are you doing recently?

I would like to introduce you a very good company.It can offer you all kinds of electronic products that you may be in need,such as laptops ,gps ,TV LCD,cell phones,ps3,MP3/4,motorcycles and etc........

You can take some time to have a check ,there must be something interesting you 'd like to purchase .

Web: www.enjoyshopcn.com

Email: [email protected]

MSN: [email protected]

Now when I reply to emails or start a new email the same message above is there again?

What should I do?

Many thanks

[Farma]

I don't have an answer but i suspect you've got a virus or Trojan on your computer.

There's been a spate of this same email coming from different Thai friends email accounts lately and they knew nothing about it.

[londonthai]

in options signature and responder delete this text and confirm.

probably somebody logged in from a public computer (if the company is in thailand)

[beano2274]

Maybe you previously logged on and opened such a mail, or a link.

Ask your contacts if they are getting an email from you with the same text in

if so, change your password.

[Noodles]

in options signature and responder delete this text and confirm.

probably somebody logged in from a public computer (if the company is in thailand)

Deleted the text this morning but its still there when I make new or reply

to messages. I don't use public computers either.

I had a trojan today and nod32 deleted it;

Time Module Object Name Threat Action User Information

25-Nov-09 22:36:43 PM AMON file C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinKoobface1.zip Win32/Bagle.gen.zip worm quarantined - deleted - error while cleaning - operation unavailable for this type of object HOME-4657FD8126\Admin Event occurred on a new file created by the application: C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe. The file was moved to quarantine. You may close this window.

I will check the computer again for more

[Noodles]

This message was also in my personal email signature aswell, so I have deleted that, and

its seems to be ok now. So is it the virus that did this?

Thanks

[samuijimmy]

I got this same message from a Hotmail user., last week end.. & yes probably a Virus or Trojan... This also happened several months ago from another person who has my email address... similar pitch to sell something... blah blah...

The person from who's computer it was sent, would not necessarily know. Contact the person from who's computer it was sent from & it's probably a good idea to run a Virus Scan on your computer ASAP & tell the person the message originated from to do the same!

[stolidfeline]

As you can see, NOD32 is not particularly good at virus checking. Use AVIRA free version instead.

[ignis]

Got the same a few months back.....

Lots of searching and help programs......

It would appear that someone has got your password and is logged into your hotmail account sending out mass spam = looks like your sending the spam... Change your password + do a in depth Virus scan

[samuijimmy]

As you can see, NOD32 is not particularly good at virus checking. Use AVIRA free version instead.

It would have been the senders computer that would have done this, so a virus check on receivers computer would not have made a difference...

The virus not necessarily passed on, just the mass distribution of the email.

But a week or two back, Hotmail & I think some other hosts of Mail sites where Hacked, it was recommended that Everyone change their Password at that time.... if you have not done it, you should!

[stolidfeline]

As you can see, NOD32 is not particularly good at virus checking. Use AVIRA free version instead.

It would have been the senders computer that would have done this, so a virus check on receivers computer would not have made a difference...

The virus not necessarily passed on, just the mass distribution of the email.

The OP posted:

"Now when I reply to emails or start a new email the same message above is there again?"

I assumed from this he has also been infected.