Hi Leute,

ich habe folgendes Problem.
Ich bekomme Emails von meiner Firmenaddresse über web.de vom Server gezogen und an meine yahoo-mail weitergeleitet. Soweit so gut, nun hab ich aber eine Spam-Email mit Absender = meine Firmenmail und Empfänger die identische Firmenmail bekommen.
Der Header sieht auch strange aus, deshalb meine Bitte an euch. (XXX ist immer dort wo meine Daten sind!)
Was ist das Problem u wie kann ich dieses am schnellsten beheben?

Danke
loco-dubai



From xxx@.ae Tue Feb 19 02:43:48 2013
X-Apparently-To: xxx@yahoo.de via 188.125.83.83; Tue, 19 Feb 2013 02:29:51 +0000
Return-Path: <xxx@web.de>
X-YahooFilteredBulk: 212.227.17.11
Received-SPF: none (domain of web.de does not designate permitted sender hosts)
X-YMailISG: m56dUtAWLDv0hM9112kD6mPcu0wsXhfFGh6lmSnSCxhEhRRE
e1xv8gQ0NiRVCrRNZIC63omHCPvfM86HNn8EcritOdHltXKU7QnnudRaw8_Y
rEW6Dm.iQdzr5YMwaJlBxSVZnP9QUNTzxrvP_fNNf17QFYtK905Kzosei_d1
Z_VBbjQg8z7RTRUltc.TfQpX9uGv0OjrOSyN.3GFDkn.MlTahih7uiIG1gqN
a_AS68Yet9OkL3B_xyTiclXSwQJPYk_rHMOx7HgnRfD19XQF98kWQM6Aq7W0
hO8KkUjhB_hE_oglokM8OVKGBWOvpqhOhoBkopLnT0Q3u5DjnNJ0vNC2UHYO
U8PsL1gWDKVxjGqh641sW1ouYjeiyE6lWHSrhyDvm6.9Qr_JvhK922wE6cNF
B22nfoTB6Oswz2hVrFq7khmnOQEXsY7049riUQfUXWImKM8_IEojSYxxXqd1
Vchi.zXfFR_iVao_t2p8A09k9nMZoL.kLeGHdtm5qgPJDlaCyqcp8AJUAJf0
h2N86ZV0ToU.KZMp4GUB7DRX3OnUKsdfLKTMtfyFnGoD8jfAAstvY9mF1dg8
Q8E1BTHc2QneF5wHYaiwWj_p1P_WBigK34CwdWr7JLDqZlwmJT8VALnMKh5T
VG9mFwTuyYyAlq7DUZa4eBZNsr_1oHuJBmBcr15rXETUEBnEdiqZyitRXmZ0
07ZtZjSQyWvWlLgKtxquh2u0dd83WN7ORpTVGLzdWjw7QKnkJYREw9YrQ5Px
JewqtIsOxHAbUS1tJDjABRbKk6zQVYuZx218RxljqKg7ieP3FUKucRMBRvOY
JayNuFtBneMIymOdsAkYgHk4zfYkg1qymDIdk6d83G22THqbGIvACWXgjTsz
KiuSCnMQGvuD6_9UasXf5uVtUHD1pHzyobYDvZ4m_92fLXmRS22LHe6krnLg
YFBSYWRfgio1lAkvSIMb2SFfa7hhcVht22PDvQSGeruKV_u_zwnpdb46tCRy
08mHQc_VtBVljPW.LbBMGkYvAnds7lul3RACzo0zvme08_.6KqTY5TaJGIvA
LcNUNEnsiFVx0L6cWVl86mkl0d2GuoXf0_HDqHMoEQp7sLBIpacvxrdL3Vl3
Vdea3jYQBCPO4Aajd2n0idZgYAU-
X-Originating-IP: [212.227.17.11]
Authentication-Results: mta1005.mail.ukl.yahoo.com from=xxx.ae; domainkeys=neutral (no sig); from=xxx.ae; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.web.de) (212.227.17.11)
by mta1005.mail.ukl.yahoo.com with SMTP; Tue, 19 Feb 2013 02:29:51 +0000
Received: from h1049628.serverkompetenz.net ([85.214.68.209]) by mx-ha.web.de
(mxweb104) with ESMTP (Nemesis) id 0M4FqB-1UxwIn3I6V-00rg05 for
=?utf-8?q?<xxx=5fxxx@yahoo.de>;?= Tue, 19 Feb 2013 03:29:50 +0100
Received: from localhost (localhost [127.0.0.1])
by h1049628.serverkompetenz.net (Postfix) with ESMTP id 9950148003
for <xxx@web.de>; Tue, 19 Feb 2013 03:29:50 +0100 (CET)
Received: from h1049628.serverkompetenz.net ([127.0.0.1])
by localhost (h1049628.serverkompetenz.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id CTxDWT1XYI77; Tue, 19 Feb 2013 03:29:48 +0100 (CET)
Received: from [190.43.15.153] (unknown [190.43.15.153])
by h1049628.serverkompetenz.net (Postfix) with ESMTP id 7865848001
for <rolle@tatweer-istithmar.ae>; Tue, 19 Feb 2013 03:29:48 +0100 (CET)
Received: from [3.148.72.110] (account treatedvxa@gmail.com HELO pvgih.nkybypv.com)
by (CommuniGate Pro SMTP 5.2.3)
with ESMTPA id 492636481 for xxx.ae; Mon, 18 Feb 2013 21:43:48 -0500
Date: Mon, 18 Feb 2013 21:43:48 -0500
From: <xxx.ae>
X-Mailer: The Bat! (v3.5) Home
X-Priority: 3 (Normal)
Message-ID: <4428745521.T52KK0AI740194@pktgcplfte.cewqsyelelrglz.net>
To: <xxx.ae>
Subject: United Technologies Corporation
MIME-Version: 1.0
Content-Type: text/html;
charset=Windows-1252
Content-Transfer-Encoding: 7bit
Content-Length: 2601

Hi,

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Starte bitte die
  OTL.exe
  .
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Kopiere nun den Inhalt in die
  Textbox.

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
         

• Schliesse bitte nun alle Programme. (Wichtig)
• Klicke nun bitte auf den Quick Scan Button.
• Kopiere
  nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread