Viagra email sending to contacts in Yahoo mail

View previous topic View next topic Go down

Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 23rd September 2010, 3:42 am

Help!

Somehow, someone got into my Yahoo account, probably from my iTouch! Mulitple emails went out to nearly everyone in my contact list with a link to Viagra.

I've done the scan and here is my log file. Can anyone tell me what to do from here?

Kindly REMOVE this log file after review to protect any sensitive information.

Thanks
~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by Belahzur on 23rd September 2010, 9:55 am

Hello.
Can you attach the logs?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 23rd September 2010, 1:22 pm

OTL logfile created on: 9/22/2010 10:17:04 PM - Run 1~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 23rd September 2010, 1:23 pm

thank you

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 23rd September 2010, 1:24 pm

Should I run the Quick Fix in OTL?

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by Belahzur on 23rd September 2010, 9:43 pm

No, please post both logs for now and I'll review them.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 24th September 2010, 6:10 pm

Thank you. Here are the 2 logs.

~[Filtered]~



~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by Belahzur on 24th September 2010, 9:33 pm

Filtered, weird.
Can you attach the logs instead?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

log file 1

Post by chinagirl11 on 24th September 2010, 10:20 pm

~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Log file 2 (OTL.txt)

Post by chinagirl11 on 24th September 2010, 10:22 pm

I'm attaching log file OTL.txt

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

did you get it?

Post by chinagirl11 on 24th September 2010, 10:23 pm

I hope you get the attachments. I browsed for the files and hit "submit query" but I get an error "uploaded file is not valid"

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by Belahzur on 25th September 2010, 11:53 pm

Hello.
In that case, can you upload the logs somewhere? like Rapidshare for example.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 26th September 2010, 5:34 pm

Ok here are the files for download. Thank you very much for your help.

~[Filtered]~

[You must be registered and logged in to see this link.]

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 26th September 2010, 5:34 pm

looks like the first file was filtered. here it is again.

~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 26th September 2010, 5:36 pm

ok, I'll try it with before the .txt spaces, just take the spaces out. let's see if that works

~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 26th September 2010, 5:37 pm

~[Filtered]~
add the http
~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 26th September 2010, 5:39 pm

ok that didn't work either. try rapidshare with the following file name

421466600/Extras and dot txt

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 26th September 2010, 5:40 pm

whew. hopefully you can download the files. thanks again ~[Filtered]~

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by Belahzur on 26th September 2010, 9:12 pm

Please download and run this tool.

Download Malwarebytes' Anti-Malware from [You must be registered and logged in to see this link.]

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by chinagirl11 on 27th September 2010, 1:26 pm

No malicious files were found

Malwarebytes' Anti-Malware 1.46
[You must be registered and logged in to see this link.]

Database version: 4703

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/27/2010 8:24:43 AM
mbam-log-2010-09-27 (08-24-43).txt

Scan type: Quick scan
Objects scanned: 157856
Time elapsed: 20 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

chinagirl11
Novice
Novice

Posts Posts : 15
Joined Joined : 2010-09-23
OS OS : Windows 7
Points Points : 22903
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Viagra email sending to contacts in Yahoo mail

Post by Belahzur on 27th September 2010, 7:51 pm

Hello.

  • Download combofix from here
    [You must be registered and logged in to see this link.]
    [You must be registered and logged in to see this link.]

    1. If you are using Firefox, make sure that your download settings are as follows:

    * Tools->Options->Main tab
    * Set to "Always ask me where to Save the files".

    2. During the download, rename Combofix to Combo-Fix as follows:





    3. It is important you rename Combofix during the download, but not after.
    4. Please do not rename Combofix to other names, but only to the one indicated.
    5. Close any open browsers.
    6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

  • We need to disable your local AV (Anti-virus) before running Combofix.
  • See [You must be registered and logged in to see this link.] for how to disable your AV.
  • Double click on ComboFix.exe.
  • Follow the prompts. NOTE:
  • ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
    ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.


  • The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.



  • Allow ComboFix to download the Recovery Console.
  • Accept the End-User License Agreement.
  • The Recovery Console will be installed.
  • You will then get this next prompt that asks if you want to continue the malware scan, select yes



  • Allow combofix to run
  • Post C:\combofix.txt back here.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum