I have a problem

I use yahoo as my main email account. Have done so for years, without issue, but recently, I seem to be sending out spam blasts. In the last 6 months, I have had to change my password 4 times.

I access the mail from my laptop, phone (rarely), and work computer, nowhere else. I believe either the laptop or the phone has the problem.

What free programs are out there that can find what virus/worm/malware I have? I use Malwarebytes and Windows Defender (not sure that was a good move from Avast).

Running Win 7 Pro on the laptop, Win8 at work, and Android on the phone. Any suggestions, or should I go back to Avast?

combofix, malwarebytes, ESET Online Scanner. in that order.

I'm curious, what makes you think you're blasting out junk email? Are they in your Yahoo mailbox Sent folder?

morph2_7 wrote in post #16755796
I'm curious, what makes you think you're blasting out junk email? Are they in your Yahoo mailbox Sent folder?

I'm getting mail delivery system notifications (all at the same time) saying xyz email is not valid, and my wife and daughter are getting them from me.

Perhaps you're a victim of joe-job attack. Basically, some spammers are using your email address as the return address. It's very easy to forge the FROM address. When their email bounces back, they bounce back to your mailbox. Unfortunately there's nothing you can do to stop this attack. Here's a definition of joe job if you want to know more: http://en.wikipedia.or​g/wiki/Joe_job

Look at your "spam" in your wife or daughter's mailbox. The message header may reveal who the real sender/spammer is. In Yahoo webmail, right click an email, then click View Full Header.

morph2_7 wrote in post #16755946
Perhaps you're a victim of joe-job attack. Basically, some spammers are using your email address as the return address. It's very easy to forge the FROM address. When their email bounces back, they bounce back to your mailbox. Unfortunately there's nothing you can do to stop this attack. Here's a definition of joe job if you want to know more: http://en.wikipedia.or​g/wiki/Joe_job

Look at your "spam" in your wife or daughter's mailbox. The message header may reveal who the real sender/spammer is. In Yahoo webmail, right click an email, then click View Full Header.

I was finally able to get one of the emails 'I sent". Here is the header, Does this look like it's coming from me, or from someone through smtpout.wanadoo.co.uk?

Received: from kirks518XX@yahoo.com by (64.135.83.91:25) via
smtpout.wanadoo.co.uk (80.12.242.29:18957) with [InBox.Com SMTP Server]
id 1403310135120.WH91 for XXXXXXXXXXXX@inbox.com; Mon, 31 Mar 2014
01:35:29 -0800
Received: from orange.net ([84.43.148.198])
by mwinf5d08 with ME
id k9b81n00c4H44D8039bHwo​; Mon, 31 Mar 2014 11:35:24 +0200

I've run a bunch of scans, including all those listed above, and have cleaned or removed everything I didn't recognize, and some that I did recognize, but didn't need.

I have even gone as far as changing my password through my tablet, which was the first time I ever logged onto my email with it, and haven't logged onto my email on my laptop in 4 days.

If there isn't a problem with my system (ie, password wasn't compromised), and it is a 'joe job', is there anything I can do?

Can't say if it's coming from you because I don't know where your (or your computer) location is. To me, it looks like spammers use SMTP (mail) server smtpout.wanadoo.co.uk (IP 80.12.242.29 is in France) to spam someone at inbox.com domain.

If you have not signed in to your Yahoo mail for 4 days and the spam still flows every single day, you can be sure the spamming machine is NOT your laptop (your laptop isn't compromised). However, that doesn't rule out possibility of hacked Yahoo mail account but I doubt this is the case because you've changed password many times.

I think spammers are using your email address to spam. If I'm right, there isn't anything you can do to stop them from using your email address. You can stop using that address and create a new one.

morph2_7 wrote in post #16755946
Perhaps you're a victim of joe-job attack. Basically, some spammers are using your email address as the return address. It's very easy to forge the FROM address. When their email bounces back, they bounce back to your mailbox. Unfortunately there's nothing you can do to stop this attack. Here's a definition of joe job if you want to know more: http://en.wikipedia.or​g/wiki/Joe_job

^^^ This. When I was doing IT consulting a client's exchange server kept falling over because someone was using them as a forged sender for email. Use the Contact Customer Care link on their Help Central site (http://help.yahoo.com/​mail) to request assistance in blocking these messages.