Ich kann mir sonst eigentlich nicht erklären wie jemand Email von deinem Konto schickt wenn der PC nicht on ist, ausser er hat eben das Passwort dazu.

*Mich mal kurz einmisch*

Spammer fälschen ihre Mailadressen, können x-beliebige Antwortadressen verwenden. Dann sieht es so aus, als würde die Mail von Dir kommen, aber sie ist nicht von Deinem Konto aus verschickt worden. Was man bräuchte wären mal die kompletten Kopfzeilen einer solchen Spammail mit Deiner Mailadresse als angeblichen Absender.

Hallo zusammen,

So.

Erstmal zu Schritt 1.

Alles erledigt.
Hier der Log:

JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Aug 07 14:43:27 2010

Found and removed: C:\Programme\Java\jre1.6.0_03

Found and removed: C:\Dokumente und Einstellungen\MagicProzac\Anwendungsdaten\Sun\Java\jre1.6.0_03

Found and removed: C:\Dokumente und Einstellungen\MagicProzac\Anwendungsdaten\Sun\Java\jre1.6.0_16

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Classes\JavaPlugin.160_03

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_03

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_03

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160030}

Found and removed: Software\Classes\JavaPlugin.160_03

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_03

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.


Schritt 2.

Die Toolbar hab ich deinstalliert.
Du sagtest Du würdest ZoneAlarm generell deinstallieren..

Und dann keine weitere Firewall drauf machen?

Schritt 3:
Den Viewpoint Media Player hab ich deinstalliert.
Nach neustart sagte Win das er nicht installiert sei und ob ich das nun machen will.
Das hab ich jetzt mal verneint.

Nun kommt Schritt 4..
Das wird aber nen Weilchen brauchen bis der Scanner fertig ist..


@ cosinus.

Hier mal die "Details" aus den beiden Mails.

1 Mail.

Return-Path: <lmeineMailAdresse@aol.com>
Received: from smtprly-de01.mx.aol.com (smtprly-de01.mx.aol.com [205.188.249.168]) by cia-db08.mx.aol.com (v129.4) with ESMTP id MAILCIADB081-b22d4c5bf94e36b; Fri, 06 Aug 2010 08:00:20 -0400
Received: from webmail-d036 (webmail-d036.sim.aol.com [205.188.181.89]) by smtprly-de01.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYDE012-b22d4c5bf94e36b; Fri, 06 Aug 2010 08:00:14 -0400
To: zv30@sbcglobal.net
Content-Transfer-Encoding: quoted-printable
Subject:
Date: Fri, 06 Aug 2010 08:00:14 -0400
X-MB-Message-Source: WebUI
X-AOL-IP: 46.116.123.141
X-MB-Message-Type: User
MIME-Version: 1.0
From: meineMailAdresse@aol.com
Content-Type: text/plain; charset="us-ascii"
X-Mailer: AOL Webmail 32360-MOBILE
Received: from 46.116.123.141 by webmail-d036.sysops.aol.com (205.188.181.89) with HTTP (WebMailUI); Fri, 06 Aug 2010 08:00:14 -0400
Message-Id: <8CD037610574C0C-1C38-A957@webmail-d036.sysops.aol.com>

2. Mail

Return-Path: <meineMailAdresse@aol.com>
Received: from smtprly-da02.mx.aol.com (smtprly-da02.mx.aol.com [205.188.249.145]) by cia-ma02.mx.aol.com (v129.4) with ESMTP id MAILCIAMA024-5bb94c5bf9023c4; Fri, 06 Aug 2010 08:04:07 -0400
Received: from webmail-d036 (webmail-d036.sim.aol.com [205.188.181.89]) by smtprly-da02.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYDA028-5bb94c5bf9023c4; Fri, 06 Aug 2010 07:58:58 -0400
To: qtdyrtriqrkm@blumenthal.com, bekannteMailAdresse@louis.de,
bekannteMailAdresse@yahoo.de, bekannteMailAdressel@friedrich-motorsport.de,
bekannteMailAdresse@t-online.de, bekannteMailAdresse@autobild.de, bekannteMailAdresse@wp.pl,
bekannteMailAdresse@web.de, bekannteMailAdresse@gmx.de
Content-Transfer-Encoding: quoted-printable
Subject:
Date: Fri, 06 Aug 2010 07:58:58 -0400
X-MB-Message-Source: WebUI
X-AOL-IP: 46.116.123.141
X-MB-Message-Type: User
MIME-Version: 1.0
From: meineMailAdresse@aol.com
Content-Type: text/plain; charset="us-ascii"
X-Mailer: AOL Webmail 32360-MOBILE
Received: from 46.116.123.141 by webmail-d036.sysops.aol.com (205.188.181.89) with HTTP (WebMailUI); Fri, 06 Aug 2010 07:58:58 -0400
Message-Id: <8CD0375E31AA4AA-1C38-A916@webmail-d036.sysops.aol.com>


Komisch ist halt das die Mails bei mir im "versendet" Ordner sind.
Und was mir auch gerade auffällt.
Im CC sind viel weniger E-Mail Adressen als die wo es tatsächlich hin gegangen ist.
Und die Uhrzeiten sind auch unterschidlich.
In den Mail Details steht was von 7.58Uhr und 8.00Uhr.
In den Mails selber steht 14.00Uhr und 14.04Uhr.

Aber der PC war werder morgens um die Zeit noch mittags um die Zeit an.
Nur zwischen 11 und 13Uhr.

edit. Ich hab alle mir bekannten Mail Adressen mal raus genommen.
Nicht das sie noch mehr Spam bekommen weil sie im Netz zu finden sind.

Grüße
DementedMan