Hi,

Thanks for this opportunity to outline my problem, with hopefully the prospect of my problem being resolved!

I have been having difficulty changing my hotmail and gmail email passwords. This has been ongoing for about a week or so now. Each time I try to change my password to a complex long alphanumeric password, it reverts to the old one within a few hours! I've tried changing my security questions and inputting complex alphanumberic passwords for those too. I have contacted both gmail and hotmail support, who've been absolutely no help whatsoever. Hotmail keep sending me instructions how to reset my password, without reading that I've tried this multiple times and it hasn't worked. Very disappointing!

I do believe there is someone stalking and harassing me online, so it is important I resolve this asap. I have already been personally threatened with distribution of sensitive personal images to family members and friends, and I'm scared about my accounts being open to such abuse.

If anybody can help me with a) the technical problem I have detailed, in regards to changing my email passwords, b ) online harassment as described, or c) both, then please respond. I will be checking regularly for any support and advice. I have tried to explain my problem with sufficient and relevant info, but if there is anything else you need to know, please ask.

Thank you again,

Chris

Hello Chris and to Bleepingcomputer.

In this situation I would have to recommend you close your current Hotmail and Gmail accounts and create new ones.

In regards to your cyber-harassment issues, I don't think we are currently equipped with a facility to handle that sort of thing here at BC.

http://www.cyberangels.org is a non-profit organization that might be able to directly assist you. At one time they had a volunteer team of "Cyberangels" that helped victims of cyber-stalking or cyber-harassment. I do not know if this program is still active, but you may contact them at their website to obtain more information. Here is a page from their site which gives advice on beating your harasser.

CyberAngels

Some of their suggestions involve scanning your computer to determine if malware is present. If you find that your system is infected, you may return to Bleepingcomputer and create a thread in the Am I infected? What do I do? forum. We will be able to help you remove any infections present on your system there.

Hope that helps, and let us know if there is anything else we can do!

~Blade

Thanks Blade. I have created a new gmail account, but am reluctant to close my other two addresses because of how widely I use them

I have done countless scans, having accessed info from this website and followed the instructions word for word. I eventually formatted the drives and reinstalled Vista. Unfortunately my email passwords still reset to the old one. Do you (or anyone else) know how that is even possible?

I will contact the cyberangels organisation, and have already contacted another charity who I'm waiting to hear back from.

Cheers.

Hello Chris,

I'm no expert on this particular subject, but it seems to me that this is not a problem on your end. . . I'll ask around and see what I can find out.

Have you informed Microsoft that you are unable to change your password, and that you believe someone may have hacked into your Windows Live ID?
Have you tried using both methods to reset your password?

I couldn't find a number to call, but I don't have Windows Live, so maybe you have a number you can call for tech support. If you can, I suggest you do so rather than using the reporting feature built into Windows Live. Talking to a person is always better in these sort of situations. You should explain to them your situation, and inform them that the normal methods used to change your password don't seem to be working. If the tech guy says he can't help you, ask for his supervisor. If the supervisor says he can't help you, ask for his supervisor. Don't give up!

In all honesty though, it will probably be better for you in the long run to close the account. Sure, you'll have to inform people who only know that address of your new email (use a different email address that you know to be secure to do this!), and have to update the emails on all the websites you're registered to, etc. But if your account has been compromised, there really is no guarantee that it can ever be trusted again. Sorry I can't help you more directly.

~Blade

Thanks Blade, I am impressed by your efforts in helping to resolve my problem.

I have informed Microsoft, but they only send automated responses which apparently ignore anything I write. I have looked for support telephone numbers, but have had no success.

I suppose it can't be considered coincidental that this affects both gmail and hotmail accounts, or I'd presume that this is a technical issue on their side. I suspect somehow my accounts have been permanently violated, and your suggestion to close them might, regrettably, be the only way to solve this.

Please let me know if you have any other ideas!

Chris

You are putting a question mark on the security of gmail and hotmail ! Sorry, the problem seems to be on your side.

This is possible only if someone else knows your secret questions/answers. So when you change password, they login back using secret question and change your password back to old one.
Try changing your password, security questions and other settings on your gmail/hotmail accounts in such a way that no one can guess them. Not even your friends or relatives.
Do not save passwords/cookies on your browser. Do not write passwords on paper etc.
Use Firefox or Opera instead of IE. As soon as you close browser clear all private data.

Take care.

Yes Romeo, I've tried everything you've said and even gone further.

I changed my password and security questions at work, and saved the data on a USB stick. Then, while at work, the gmail password stopped working within a few hours (I have a G1 device, and it stopped synching). How could it possibly have been compromised?

I've been using Firefox for years.

Another detail I should mention: I'm using Roboform, which seems like a good piece of software and is highly recommended. It saves passwords to websites and encrypts them with a master password, which I save and access (copy and paste when needed) on my external hard drive. I've only started using it recently to attempt to combat my issues.

I'd like to offer this: don't close the accounts. Keep them, but don't use them. With hotmail, check once every 3 or 4 months, just to keep the account open.
The reason for not closing the accounts: IF they have been compromised, whoever hacked into it will eventually find out the accounts no longer exist. They could then open up a hotmail/gmail account with the user name you chose to close.
IF someone has your address book information, he or she could send out mail to your contacts, who will think you sent it. The "up-to-no-good" potential is a very real concern.

Thanks Queen, good points. I have decided to take the course of action you prescribed. I am curious about the last sentence. Do you mean I should be very concerned about what is happening to me? I admit, I'm terrified.

I spent all night trying to change passwords repeatedly, with no success. They just keep reverting to the old ones within a short time. Interestingly, I found other people with the same issue in the Google forums, like 3 or 4, and all quite recently.... but any gmail fault doesn't explain why my Hotmail account is behaving in the exact same way. I've also had issues with Facebook.

I'm stumped and am not sure what to do now.

IF the account has been compromised, then yes you should be worried.
You mention others have the same issues-so it's possible that no one compromised the accounts and something is whacky with those sites. That would be a heck of a coincidence if all of them have the same problem at the same time.
I just changed my password in hotmail. I'll see if it sticks or reverts back to the old one.

You state "I do believe there is someone stalking and harassing me online, so it is important I resolve this asap. I have already been personally threatened with distribution of sensitive personal images to family members and friends, and I'm scared about my accounts being open to such abuse" . Do you have anything else to add to why you think this? And if someone is, any ideas about how they discovered your passwords?
Did these threats come to you by email? You can report threatening mails to the abuse dept of the senders domain.

I think they were hacked with a trojan virus which I discovered a few weeks ago. Since then I've tried securing my computer and changing passwords, but hit these road blocks. The threats come by both email and text, email is sneakemail.com and text is cbfsms.com, anonymous services and I believe the person doing it will be using a proxy too.

Had a sleepless night last night.

Because of the above statement, I have asked the moderators to review this topic and advise whether or not you need to go through the procedure to find out if your system is still infected.

I would recommend starting a topic in our Am I Infected forum
http://www.bleepingcomputer.com/forums/forum103.html
If for no other reason, just to rule out spyware/keyloggers

Thank you for responding Garmanma.

cm3891, when you start your topic in Am I Infected, include a link to this topic.

I have already followed all of those steps. I did everything I could to secure my computer including formatting my c:

What steps have you followed to see if you ARE infected?

Could you tell us what scans you HAVE run ?



You used a USB stick on the other computer to ??change passwords etc; do you know that that USB stick is clear of infections?

Also; you say you reformated the computer; what disc did you use for this and do you know it is 'clean'?

I beleive you have not told us what your Antivirus protection is and when you last updated it?

Have you posted malware scanner logs or Hijack This logs in a forum other than Bleeping Computer?
I don't see any posts from you related to possible malware here at BC.
Even though you have "followed all of those steps" (which I assume are steps for scanning your system) it would be a good idea to do as Garmanma suggested and post in Am I Infected? forum. It's possible something has slipped in after you formatted.