Jump to content

Receiving spam emails in my inbox on Outlook

007nice1
 Share

Recommended Posts

007nice1

007nice1

Posted
Posted

I've been receiving spam email on my inbox (Outlook) and I'm wondering if my computer has been infected somehow. I keep receiving emails with titles such as ''Someone is trying to hack your account'' or ''Your account will be suspended soon'' as scare tactics. Why is it that I am receiving those types of emails on my inbox and not in my spam folder without getting notified? 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Spam is one of the biggest computer plagues that affect most users around the world.

Not necessarily a sign of an infection @007nice1 but we can certainly do some scanning and see what we can find.

 

 

Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware.

Please respond to all future instructions from your helper in a timely manner.

 

Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process

Then follow each step in the order provided. Unless otherwise asked, please attach all logs

 

Please make the following system changes:  Please pay close attention the the instructions in all of the following links.

  • If you have not done so already - Enable System Protection and create a NEW System Restore Point
  • Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed
  • Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed
  • Disable-Fast-Startup
  • Show-Hidden-Folders-Files-Extensions

Please run the following scans:  Please pay close attention the the instructions in all of the following links.

  1. Click the following link and run a  Scan with AdwCleaner
  2. Click the following link and run a  Scan with Malwarebytes 
       RESTART the computer
  3. Click the following link and run a  Scan with Farbar Recovery Scan Tool 
     

Example image of where to click to attach files when posting your reply

image.thumb.png.e208c182ff570799c53bcf57

 

Thank you

 

Link to post
Share on other sites
David H. Lipman

David H. Lipman

Posted
Posted
9 hours ago, 007nice1 said:

I've been receiving spam email on my inbox (Outlook) and I'm wondering if my computer has been infected somehow. I keep receiving emails with titles such as ''Someone is trying to hack your account'' or ''Your account will be suspended soon'' as scare tactics. Why is it that I am receiving those types of emails on my inbox and not in my spam folder without getting notified? 

One must realize that spam comes from the outside in.  It does not stem from a PC.

However, one's own actions and/or in-actions can label someone as a potential spam victim.

  • Check your email address on;  https://haveibeenpwned.com  email addresses harvested at breached sites will become spam targets.
  • Apply Privacy to those accounts.
  • Don't post Personal information in Public areas.  Accounts are data mined by people with mal'intent.
  • Don't use Social Media sites or at least limit your access and exposure.

IBA Cookies:
Please go through the following on the Browser(s) you use.

Account Related Privacy Opt-Outs:

Device and Accounts Related Privacy Opt-Outs:

Reference:
What is "interest-based" advertising?

 

 

 

  • Like 1
Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please follow the steps below @007nice1

 

[ 1 ]

Please make the following change in Malwarebytes if you're using the Premium or Trial version

  • Please open Malwarebytes. Click on the small gear icon to open the Settings and go to the General tab.
  • Then turn off "Always register Malwarebytes in the Windows Security Center"
  • Restart the computer

 

[ 2 ]

Please go to Control Panel, Programs, Programs and Features, Uninstall a program

Then right-click and uninstall the following

  • Bonjour (this program is rarely needed on Windows, but often causes networking issues)  




[ 3 ]

Are you running these proxy settings on purpose? 

AutoConfigURL: [{E053BF5D-8EFF-4D0A-ABE9-D549A319BB84}] => hxxp://proxy.umontreal.ca/ <==== ATTENTION
AutoConfigURL: [{FDB71C85-EC6E-4F41-A51D-DE50530B1401}] => hxxp://proxy.umontreal.ca/ <==== ATTENTION
AutoConfigURL: [S-1-5-21-2604522025-4012331215-3221303071-1001] => hxxp://proxy.umontreal.ca/ <==== ATTENTION
ManualProxies: 0hxxp://proxy.umontreal.ca/ <==== ATTENTION

 

[ 4 ]

Are you sure you want this enabled or allowed? Push Notifications on your browser appear to be enabled.

CHR Notifications: Default -> hxxps://fizz.ca; hxxps://mail.google.com; hxxps://www.facebook.com; hxxps://www.youtube.com; hxxps://zone.fizz.ca

https://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/

Turn notifications on or off - Google Chrome

Web Push notifications in Firefox

 

 

[ 5 ]

Probably not a threat, but files that do not belong in the root folder here. 

2023-02-09 00:18 - 2023-02-09 00:18 - 000000604 ____H () C:\Program Files (x86)\APi1
2020-10-25 00:56 - 2020-10-25 00:56 - 002722286 _____ () C:\Program Files (x86)\Auto-Tune 8 Manual.pdf
2020-10-25 00:56 - 2020-10-25 00:56 - 000056051 _____ () C:\Program Files (x86)\VST PC Read Me.pdf

 

 

[ 6 ]

Please run the following and attach the log when done


Scan with SecurityCheck by glax24
https://forums.malwarebytes.com/topic/307301-scan-with-securitycheck-by-glax24/

 

 

 

 

Link to post
Share on other sites
007nice1

007nice1

Posted
  • Author
Posted

Thank you for your reply. I've unchecked that one option on Malwarebytes and have uninstalled Bonjour. Yes, I am running proxy link on my Wi-Fi. However, it is only 1 address and not 4 as you've showed above... How do I make sure I'm using only one address and those 4?

Yes, I'd like those push notifications on my browser. Is it recommended not to have them on? I'll read the links you've attached regarding Push notifications.

For step 5, I've deleted all those 3 files.

 

Here is the scan with SecurityCheck

 

SecurityCheck.txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

The proxy is entry for the others are probably setup by the router so I'd leave them alone since you are aware of them.

The issue with Push notifications is that they can be abused even by well meaning companies by sending out Ads or other possibly unwanted marketing. In some cases well meaning companies signed up for Ad space that turned out to be compromised and it sends out Trojanized Ads.

If you're experiencing no issues and no concerns then you can leave the Push notifications. By themselves they are not an actual direct threat but can potentially lead some people into believing something show is from their system when in fact it's not. They're then tricked into doing something they would not normally do.

 

Please Uninstall, Update, or otherwise address the following as appropriate for your computer

  1. Adobe Acrobat (64-bit) v.24.003.20054 Warning! Download Update | ^Please run Acrobat Reader DC and go Help - Check for updates...^
  2. Audacity 3.4.2 (64-bit) v.3.4.2 Warning! Download Update
  3. Discord v.1.0.9006 Warning! Download Update
  4. Microsoft Teams classic v.1.6.00.29964 Warning! Download Update
  5. Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33135 v.14.38.33135.0 Warning! Download Update
  6. Notepad++ (64-bit x64) v.8.6.8 Warning! Download Update
  7. REAPER (x64) v.7.16 Warning! Download Update
  8. TeamViewer v.15.42.5 Warning! Download Update
  9. WinRAR 6.11 (64-bit) v.6.11.0 Warning! Download Update

 

Then RESTART the computer and check for Windows Updates and install any found

 

Let me know if there are still any signs of infection or any other unresolved issues @007nice1

 

  • Like 1
Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted (edited)

Now that the system is cleaned up. Please make sure you use a Password manager like 1Pasword, Bitwarden, Keepass, Etc. and change all your passwords with a very strong password of at least 16 to 24 characters and enable 2FA (Two Factor Authentication) on sites that allow it.

All sites should have their own unique password, do not share passwords on any sites. Do not post public information about yourself or your family. If you're using Facebook you need to make sure you're not publishing private information. The new world of AI is helping bad actors to do  bad things with users private data.

 

Excellent, glad to hear all is well again. I'll go ahead and close your topic now and wish you well.

Please follow the directions below to remove the logs and tools we've used. If any are still left after that you can manually uninstall or delete them.

Take care and stay safe out there. Try to follow as much of the advise below as you can as well.

 

Let's go ahead and do some clean-up work and remove the tools and logs we've run.

Please download KpRm by kernel-panik and save it to your desktop.

  • right-click kprm_(version).exe and select Run as Administrator.
  • Read and accept the disclaimer.
  • When the tool opens, ensure all boxes under Actions are checked.
  • Under Delete Quarantines select Delete Now, then click Run.
  • Once complete, click OK.
  • A log will open in Notepad titled kprm-(date).txt. You can close it.

 

We're glad that we were able to assist you.

 

The following information will help you to keep your computer and data safer as well as improve your overall privacy

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/780233/best-password-manager/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download     https://patchmypc.com/about-us
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Cybersecurity basics & protection
Everything you need to know about cybercrime
https://www.malwarebytes.com/cybersecurity

 

Further reading if you'd like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes. Please tell your friends and family if they too need assistance with malware removal

 

Edited by AdvancedSetup
Updated information
Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.