locked
Log Repeated "Windows Live OneCare Update Service" RRS feed

  • Question

  • Starting yesterday several emails with URLs were sent from my hotmail account to all of my contacts.  I deleted everything from my hotmail account but before I open a new one, I want to make sure somone is not watching the computer.  I am running a scan right now and I ran a support log where I am seeing "Windows Live OneCare Update Service" repeated sometimes multiple times in a minute since yesterday afternoon.  Is there any way for me to know if these entries are OK or if they are from the hacker?  What is the best way for me to confirm there is no one watching my computer?  Is there anything I can do beyone a OneCare complete virus scan?

    Monday, March 22, 2010 11:39 PM

Answers

  • If messages were sent from your Hotmail account, this has nothing to do with your computer and everything to do with either your account having been compromised or simply a spammer using your address in the From field.

    You may want to look here -  https://windowslivehelp.com/solution.aspx?solutionid=6ea0c7b3-1473-4176-b03f-145b951dcb41

    I suspect the latter (a forged From line) unless you provided your login credentials upon receiving a phishing email.

    The Windows Live OneCare update service is legitimate - OneCare checks for signature updates regularly throughout the day.

    -steve

     

     


    ~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
    Tuesday, March 23, 2010 1:06 PM
    Moderator

All replies

  • If messages were sent from your Hotmail account, this has nothing to do with your computer and everything to do with either your account having been compromised or simply a spammer using your address in the From field.

    You may want to look here -  https://windowslivehelp.com/solution.aspx?solutionid=6ea0c7b3-1473-4176-b03f-145b951dcb41

    I suspect the latter (a forged From line) unless you provided your login credentials upon receiving a phishing email.

    The Windows Live OneCare update service is legitimate - OneCare checks for signature updates regularly throughout the day.

    -steve

     

     


    ~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
    Tuesday, March 23, 2010 1:06 PM
    Moderator
  • I appreciate the reply.  The emails were in my sent folder so I suspect my account was compromised.  I tend to avoid giving out my password which is why I am attempting to figure out if there is a way for somone to see what I am typing, figure out if that is what happened here and if so figure out how to stop it.  I did run Yahoo Anti Spy which found a few items.  Is there anything else you can think of?

     

    Tuesday, March 23, 2010 11:34 PM
  • You could contact OneCare support to have them check out your PC with a number of tools -

    How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    However, I think your best recourse at this point is to change your Hotmail password and make sure that it is secure. Also verify that your alternate email and secret questions are up to date. I don't think a keylogger is at to root of this.

     

    -steve


    ~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
    Wednesday, March 24, 2010 12:15 PM
    Moderator
  • Thanks Steve!  I will give it a shot.
    Wednesday, March 24, 2010 4:43 PM