Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Got Xp 2008 Virus, Now Pc Is Sending Spam Emails


  • Please log in to reply
3 replies to this topic

#1 AlChat

AlChat

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:31 AM

Posted 18 July 2008 - 06:17 PM

Hi all,

My PC was infected with XP 2008 and a bunch of other stuff.

I seem to have removed the viruses but now when I start the computer it starts sending spam email in the background.
The only reason I even know it is sending anything is my avast email scanner is turned on and it shows every message sent or recieved being scanned.

There is no record of sent emails in my sent folder, outlook express.

I figured out how to make it stop sending emails by killing the svchost.exe that it is running, but as soon as I restart the pc it starts sending them again.

My PC is an old thinkpad T22 with XP Pro with service pack 3 installed.

I have tried many programs to find the problem but no more virus's are found.

Any ideas what is doing this or how to get rid of it?

Thanks

BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:31 AM

Posted 18 July 2008 - 07:39 PM

Would you try a scan from safe mode with avast?

http://www.malwareremoval.com/tutorials/safemodeboot.php

after that a scan with MBAM

http://www.bleepingcomputer.com/forums/ind...st&p=876163

post the log please
Chewy

No. Try not. Do... or do not. There is no try.

#3 AlChat

AlChat
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:31 AM

Posted 19 July 2008 - 03:46 PM

Thanks Chewy,

I booted in safe mode and did a full scan with avast.

It found no problems.

Then I did 2 full scans with mbam and found nothing.

Here is the log

Malwarebytes' Anti-Malware 1.21
Database version: 967
Windows 5.1.2600 Service Pack 3

1:28:02 PM 7/19/2008
mbam-log-7-19-2008 (13-28-02).txt

Scan type: Full Scan (C:\|)
Objects scanned: 133607
Time elapsed: 1 hour(s), 8 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I still have the same problem of my pc sending spam emails.

I tried to remove my email server info from outlook express so the virus or what ever it is could not connect to my mail server but it did not work, it must have the server and account info recorded in its self.

Now what?

Thanks

#4 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:10:31 AM

Posted 19 July 2008 - 04:23 PM

this is strange

http://www.bleepingcomputer.com/forums/t/156603/svchostexe-sending-spam-email/

he's running Vista and no takers

after a lot of googling and not finding one HJT thread with a successful cleansing I would just reformat

these rootkit spambot infections are big business using very dedicated programmers
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users