Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

auto emailer sending link to everybody in address book


  • Please log in to reply
3 replies to this topic

#1 ColoradoHermit

ColoradoHermit

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canon City, Colorado
  • Local time:12:32 AM

Posted 11 September 2010 - 05:29 PM

Hi y'all. Yesterday while my laptop was in sleep mode with the lid closed it sent out a email with this link or or similar (hxxp://www.isj1.health24x.com) the set of letters and numbers after the www. is different in some of them. They were sent out at 4:00am, 4:30am, and 6:00am in batches of ten at a time. This is the first time I've ever had one of these and I haven't even been on my computer but just a couple times in the last 2 months since I've been down sick. I haven't even run my mail in 3 or 4 weeks or longer.
The night before it sent out the emails with the links I had booted it up to check something and then just let it go into sleep mode and shut the lid on it. Since I've found that it sent out all those emails on it own I have ran a full scan with the Norton internet security 2010 and it didn't find anything. So I downloaded the newest AVG and installed it and run the up date. Then ran a full system scan with it. Same thing, it found nouthing.
What should I do now?
Dan
aka; The ColoradoHurmit
I'm running windows 7 on a 1 yr old Dell Studio 1735

Edited by Orange Blossom, 27 January 2011 - 06:08 PM.
Deactivate link. ~ OB


BC AdBot (Login to Remove)

 


#2 saknott1

saknott1

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:76021
  • Local time:12:32 AM

Posted 11 September 2010 - 09:26 PM

I have been receiving emails with the same pattern. They are from a contact that I know, there is no subject and there is a link to what seems to be a drug or prescription link. I have been receiving them for a couple of weeks now, but only from one person. I notified her, but nothing came of it. Her husband is pretty techie and couldn't find anything. A few days ago, I got the same type email from another one of my contacts. Today from 2 of them. I have been trying to research it on and off for a bot. I have come up with the health24x virus. I know how to do combofix, but I don't know if I am infected or they are.

I will run a hijack this and post my findings.

#3 ColoradoHermit

ColoradoHermit
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canon City, Colorado
  • Local time:12:32 AM

Posted 12 September 2010 - 03:20 PM

Thank you for the response. What ever it is that's sending these links has sent a new batch out this morning but its a different link. This is what it sent this time;
hxxp://www.cir0.canxhealth.com
Also the letters and numbers after the www.****.canxhealth.com are different in some of them or all of them. My sister told me that when she tried it her AVG told her it was a bad site. After I sent out a warning to everybody about it too.
Any who, how do I get rid of this?
thank you
Dan

Edited by Orange Blossom, 27 January 2011 - 06:09 PM.
Deactivate link. ~ OB


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,344 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:32 AM

Posted 12 September 2010 - 09:13 PM

Hello, try changing your Email password and resetting your router.
Reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). If you donít know the router's default password, you can look it up HERE.

You also need to reconfigure any security settings you had in place prior to the reset. Check out this site HERE for video tutorials on how to properly configure your router's encryption and security settings. You may also need to consult with your Internet service provider to find out which DNS servers your network should be using.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users