Email Account Compromised

CapedCrusader

Hi folks,

One of my email accounts has been compromised. It started sending out a ton of spam. I noticed when the bounced emails started coming in.

I have a number of websites and the compromised email account is hosted with the same company, part of the hosting package.

I've changed the password but it continued to happen, leading me to believe that malware is at work somewhere.

Strange thing is though, that it's only one account that seems to be affected.

AVG Free and Trend Micro House Call show no threats.

It is possible that the first password change fixed the issue and that it wasn't malware at work... perhaps some of the bounces that came back were delayed for some reason?

I've updated all xp computers on the network, run full scans on them all.. changed wireless keys. What more should/can I do?

In addition to a Trend Micro House call scan and AVG 9 Free full scan, what other scanners would people suggest?

Thanks all

JDxtra

It's easy to fake the "from" address of am email. It may not be compromised at all.

CapedCrusader

How can I tell? Is it possible to tell from the bounced emails?

The bounces are coming from the email server associated with my hosting package so it definitely seems to have been that server that was used to send the emails.

FruitLover

Post up the headers from a couple of the bounces (censor any sensitive info) and we'll have a look.