Urgent help please!

[Bulky]

Works email has been playing up and the receptionist has just noticed that every email we recieve gets sent back out !!! it is going to 'general02/04.10@emailfactories.net' please can someone tell me how to stop this happening as it is getting quite serious, her ebay login details have already been sent there!!, we are using outlook express, i have done a full search with spybot, nothing and have run avg several times and definately have no virus' (as long as avg would pick them up) both are updated to latest definitions. i am just about to install adaware to see if that finds anything , thx in advance.

[Bifta]

Give Email Factory a ring on : 0845 6055550

(chances are that email address is actually a full mailing list, so you could be sending it to thousands of people each time)

[Bulky]

Originally Posted by Bifta

Give Email Factory a ring on : 0845 6055550

(chances are that email address is actually a full mailing list, so you could be sending it to thousands of people each time)

number not available, just found out it wasn't login details as well, it was her bank account details so this needs sorting fast !

[Bifta]

Originally Posted by bulkylad

number not available, just found out it wasn't login details as well, it was her bank account details so this needs sorting fast !

Listen to the announcement when you next ring it, it tells you it's been changed to a different number, not that it's not available.

[MovedGoalPosts]

Close down Outlook Express and don't open it again until you are satisfied you have the problem licked. If you do need to open OE to check on something, disconnect the PC from the Net first.

I suggest you use another antivirus check. Don't just use the AVG one. A good free online, current one is available at www.pandasoftware.com. If you do find anything, make sure you delete it from the recycle bin, and reboot the PC before doing anything else to minimise risks of it reinfecting.

AVG is OK as far as it goes, but it is free. Can you really afford to trust your work PC to somethign you get for nothing. There is a reason it's free, it doesn't get updated as frequently as paid for software.

Have a look in OE and see if the email addy you mention is buried in any of the contacts or address books.

[Jon M]

Do you have anything of more detail like actual email server logs? You may not actually be sending emails out or at least not to the location you think they're going.
Can you copy and paste the full header details of one of the sent messages in here.

If you suspect any bank details have gone out, then I would phone the bank and get her account blocked until further notice, or whatever they recommend.

[zovat]

Interestingly Emailfactories.net are listed as a spam outfit by mosy anti-spam pages.

I am concerned howerver about this statement :

Works email has been playing up and the receptionist has just noticed that every email we recieve gets sent back out

how are you seeing the mails go back out ?

what mail server do you use (not the outlook client, but the actual server)
have you checked that it it secure ?

[Bulky]

Originally Posted by s1lv3r

Do you have anything of more detail like actual email server logs? You may not actually be sending emails out or at least not to the location you think they're going.
Can you copy and paste the full header details of one of the sent messages in here.

If you suspect any bank details have gone out, then I would phone the bank and get her account blocked until further notice, or whatever they recommend.

always have trouble finding the full e-mail header, can u tell me where i will find it, bank have been phoned, rang emailfactories and they said it has nothing to do with them, this server is used for replies and 'bounce backs',

'the email is seen going out in the sent items folder' in reply to other post
mail server is secure

[Jon M]

To get full headers, open the message and go to the "options" tab. (O97)
Or file menu -> properties -> details for OE

Do you have any access to your mail server?
And what does "secure" mean?

[Bulky]

Originally Posted by s1lv3r

To get full headers, open the message and go to the "options" tab. (O97)
Or file menu -> properties -> details for OE

Do you have any access to your mail server?
And what does "secure" mean?

thx here is header

rom: "Sales" <sales@tomlinsonparbans.com>
To: <General02/04.10@emailfactories.net>
Envelope-to: sales@tomlinsonparbans.com
Received: from [217.12.12.198] (helo=smtp808.mail.ukl.yahoo.com) by he104war.uk.vianw.net with smtp (Exim 4.04) id 1CBvkI-0005FP-00 for sales@tomlinsonparbans.com; Mon, 27 Sep 2004 14:40:50 +0100
Received: from unknown (HELO tomlinson1) (sales@tomlinsonparbans.com@81.137.251.180 with poptime) by smtp808.mail.ukl.yahoo.com with SMTP; 27 Sep 2004 13:40:50 -0000
Message-ID: <016b01c4a497$a1cf9790$b4fb8951@tomlinson1>
Subject: Pink
Date: Mon, 27 Sep 2004 14:42:37 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_016C_01C4A4A0.3BD7AF50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

[Bulky]

here's another
From: "Sales" <sales@tomlinsonparbans.com>
To: <General02/04.10@emailfactories.net>
Envelope-to: sales@tomlinsonparbans.com
Received: from [66.135.197.14] (helo=mx15.sjc.ebay.com) by he102war.uk.vianw.net with esmtp (Exim 4.04) id 1CBusb-0002Yv-00 for sales@tomlinsonparbans.com; Mon, 27 Sep 2004 13:45:21 +0100
Received: from sj-isecure002.sjc.ebay.com (sj-isecure002.sjc.ebay.com [10.6.206.201]) by mx15.sjc.ebay.com (8.12.3/8.12.3) with SMTP id i8RCjJfd030063 for <sales@tomlinsonparbans.com>; Mon, 27 Sep 2004 05:45:19 -0700
Message-ID: <200409271245.i8RCjJfd030063@mx15.sjc.ebay.com>
X-eBay-MailTracker: 10086.371.3.x
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_00FB_01C4A498.8428D7F0"
Subject: Important: Confirmation of the set-up of your Direct Debit Instruction
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Date: Mon, 27 Sep 2004 13:47:23 +0100

[Jon M]

hmm ... those headers aren't giving us anything useful... can you explain how your email gets sent... do you connect each user directly using pop3 accounts?

it might be worth contacting your ISP/host if you get your email as part of a hosting package:
VIANetworks
620 Birchwood Boulevard
Warrington
Cheshire
WA3 7QZ
GREAT BRITAIN (UK)
Admin Email: domains@VIANETWORKS.CO.UK
Admin Phone: +44192548444
Admin Fax: +441925484899

[SOSAGES]

@zovat and s1lv3r

not that im a stalker but i live in bracknell and im wondering where in bracknell u live

[Jon M]

forest park ( the posh(ish) part of crown wood )

[SOSAGES]

i used to live in wooden hill (posh part of gt hollands) now im a warfield man