Urgent help please!
 

Works email has been playing up and the receptionist has just noticed that every email we recieve gets sent back out !!! :Yikes: it is going to 'general02/04.10@emailfactories.net' please can someone tell me how to stop this happening as it is getting quite serious, her ebay login details have already been sent there!!, we are using outlook express, i have done a full search with spybot, nothing and have run avg several times and definately have no virus' (as long as avg would pick them up) both are updated to latest definitions. i am just about to install adaware to see if that finds anything , thx in advance.

Re: Urgent help please!
 

Give Email Factory a ring on : 0845 6055550

(chances are that email address is actually a full mailing list, so you could be sending it to thousands of people each time)

Re: Urgent help please!
 

number not available, just found out it wasn't login details as well, it was her bank account details so this needs sorting fast !

Re: Urgent help please!
 

Listen to the announcement when you next ring it, it tells you it's been changed to a different number, not that it's not available.

Re: Urgent help please!
 

Close down Outlook Express and don't open it again until you are satisfied you have the problem licked. If you do need to open OE to check on something, disconnect the PC from the Net first.

I suggest you use another antivirus check. Don't just use the AVG one. A good free online, current one is available at www.pandasoftware.com. If you do find anything, make sure you delete it from the recycle bin, and reboot the PC before doing anything else to minimise risks of it reinfecting.

AVG is OK as far as it goes, but it is free. Can you really afford to trust your work PC to somethign you get for nothing. There is a reason it's free, it doesn't get updated as frequently as paid for software.

Have a look in OE and see if the email addy you mention is buried in any of the contacts or address books.

Re: Urgent help please!
 

Do you have anything of more detail like actual email server logs? You may not actually be sending emails out or at least not to the location you think they're going.
Can you copy and paste the full header details of one of the sent messages in here.

If you suspect any bank details have gone out, then I would phone the bank and get her account blocked until further notice, or whatever they recommend.

Re: Urgent help please!
 

Interestingly Emailfactories.net are listed as a spam outfit by mosy anti-spam pages.

I am concerned howerver about this statement :

how are you seeing the mails go back out ?

what mail server do you use (not the outlook client, but the actual server)
have you checked that it it secure ?

Re: Urgent help please!
 

always have trouble finding the full e-mail header, can u tell me where i will find it, bank have been phoned, rang emailfactories and they said it has nothing to do with them, this server is used for replies and 'bounce backs',

'the email is seen going out in the sent items folder' in reply to other post
mail server is secure

Re: Urgent help please!
 

To get full headers, open the message and go to the "options" tab. (O97)
Or file menu -> properties -> details for OE

Do you have any access to your mail server?
And what does "secure" mean?

Re: Urgent help please!
 

thx here is header

rom: "Sales" <sales@tomlinsonparbans.com>
To: <General02/04.10@emailfactories.net>
Envelope-to: sales@tomlinsonparbans.com
Received: from [217.12.12.198] (helo=smtp808.mail.ukl.yahoo.com) by he104war.uk.vianw.net with smtp (Exim 4.04) id 1CBvkI-0005FP-00 for sales@tomlinsonparbans.com; Mon, 27 Sep 2004 14:40:50 +0100
Received: from unknown (HELO tomlinson1) (sales@tomlinsonparbans.com@81.137.251.180 with poptime) by smtp808.mail.ukl.yahoo.com with SMTP; 27 Sep 2004 13:40:50 -0000
Message-ID: <016b01c4a497$a1cf9790$b4fb8951@tomlinson1>
Subject: Pink
Date: Mon, 27 Sep 2004 14:42:37 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_016C_01C4A4A0.3BD7AF50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Re: Urgent help please!
 

here's another
From: "Sales" <sales@tomlinsonparbans.com>
To: <General02/04.10@emailfactories.net>
Envelope-to: sales@tomlinsonparbans.com
Received: from [66.135.197.14] (helo=mx15.sjc.ebay.com) by he102war.uk.vianw.net with esmtp (Exim 4.04) id 1CBusb-0002Yv-00 for sales@tomlinsonparbans.com; Mon, 27 Sep 2004 13:45:21 +0100
Received: from sj-isecure002.sjc.ebay.com (sj-isecure002.sjc.ebay.com [10.6.206.201]) by mx15.sjc.ebay.com (8.12.3/8.12.3) with SMTP id i8RCjJfd030063 for <sales@tomlinsonparbans.com>; Mon, 27 Sep 2004 05:45:19 -0700
Message-ID: <200409271245.i8RCjJfd030063@mx15.sjc.ebay.com>
X-eBay-MailTracker: 10086.371.3.x
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_00FB_01C4A498.8428D7F0"
Subject: Important: Confirmation of the set-up of your Direct Debit Instruction
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Date: Mon, 27 Sep 2004 13:47:23 +0100

Re: Urgent help please!
 

hmm ... those headers aren't giving us anything useful... can you explain how your email gets sent... do you connect each user directly using pop3 accounts?

it might be worth contacting your ISP/host if you get your email as part of a hosting package:
VIANetworks
620 Birchwood Boulevard
Warrington
Cheshire
WA3 7QZ
GREAT BRITAIN (UK)
Admin Email: domains@VIANETWORKS.CO.UK
Admin Phone: +44192548444
Admin Fax: +441925484899

Re: Urgent help please!
 

@zovat and s1lv3r

not that im a stalker but i live in bracknell and im wondering where in bracknell u live :)

Re: Urgent help please!
 

forest park ( the posh(ish) part of crown wood ;) )

Re: Urgent help please!
 

i used to live in wooden hill (posh part of gt hollands) now im a warfield man

Re: Urgent help please!
 

Crown wood - not posh at all ;)

Re: Urgent help please!
 

i go to that pub to watch the rugby

Re: Urgent help please!
 

I live in staggering distance from it :)