Twitter and email hacked, but no virus detected?

Viruses and worms
1

So first, someone logged into my hotmail account from a German IP address several times and sent phishing emails to myself. Probably because if they sent it from their own email address it would be marked as spam. I changed my password and it happened AGAIN. Then, I received an email from twitter saying that my twitter account’s password was reset because they believe it was compromised. So I reset my password and then it was changed again(not by me). There must be something wrong with my PC. I did a full system scan with avast and nothing came up. What should I do?

2

follow instructions https://forum.avast.com/index.php?topic=53253.0
attach Malwarebytes and Farbar Recovery Scan Tool logs

3
So first, someone logged into my hotmail account from a German IP address several times and sent phishing emails to myself.
How do you know this? It is really easy to send a email and make it look like it was send from your own account/email address. I can write a little tool in BASIC that does it within 10 minutes!
Then, I received an email from twitter saying that my twitter account's password was reset because they believe it was compromised.
How did you know the mail was really from Twitter?

How exactly did you changed the passwords?

4

Attached the files.

5

How do I know it’s from my own email address? Because it says it’s from me and when I reply to that phishing email it comes right into my inbox.

I know the twitter email was legit because their email address is the same as the one I get when I changed my password normally. I changed my password by going to twitter.com. I tried to log in after receiving the email then I realized the email wasn’t joking so I click ‘forgot password’.

6

i dont see Malwarebytes log ?

malware experts are notified

7

i see you have some IObit software installed, you may want to read this

https://forums.malwarebytes.org/index.php?/topic/29681-iobit-steals-malwarebytes-intellectual-property/
http://www.computerworld.com/article/2468070/endpoint-security/iobit-accused-of-stealing-from-malwarebytes.html
http://www.cnet.com/news/malwarebytes-accuses-rival-of-software-theft/

8

Pondus stole the words right out of my typing :slight_smile:

9

woops. left that out.

10

I heard about that a long time ago. I’m only using their uninstaller lol. No harm done.

11

I can see no apparent malware I would guess that the account was hacked online. Have you changed your passwords ?

12

Changed both my email and twitter password once, still receiving emails from myself and my twitter password just got changed.

13

OK lets do a really deep scan, it will take a while

Create an emergency repair USB drive:
Download Dr Web Live USB to your desktop

[]Connect a USB flash drive to the computer. Registering the plugging in event takes no more than 10 seconds.
[]Launch drwebliveusb.exe.
[*]The program will detect available USB-devices automatically and prompt you to choose the one you?d like to use as an emergency repair drive. You can format the device if you like (a warning will be displayed before you proceed with formatting). In order to read the License agreement, follow a corresponding link found in the program window (the page containing the license agreement text will be loaded in your default browser).

https://dl.dropbox.com/u/73555776/liveusb_ru.jpg

[]To create a bootable USB flash drive, press the Create Dr.Web LiveUSB button.
[]Files will be copied automatically.
[]Once the copying process is completed, press the Exit button to close the application.
[]Reboot the infected computer with the USB in the drive
[]Ensure that the first boot device is USB - If you are not sure about that then see this page for instructions
[]As loading starts, a dialogue window will prompt you to choose between the standard and safe modes.

https://dl.dropboxusercontent.com/u/73555776/Live%20boot%20screen.png

[*]Use arrow keys to select DrWeb-LiveCD (Default)

https://dl.dropboxusercontent.com/u/73555776/drwebselect.JPG

[*]Press select objects for scanning

https://dl.dropboxusercontent.com/u/73555776/drwebfolders.JPG

[*]When the system is loaded, check the disks or folders you want to scan, and click on Start.

[*]The programme will now scan for and cure/delete any malware that it finds. Allow it to do so

https://dl.dropboxusercontent.com/u/73555776/drwebscan.JPG

[*]When it has completed

https://dl.dropboxusercontent.com/u/73555776/drwebscancomplete.JPG

[]Select Open Report and copy to the USB
[]Once completed reboot to normal windows, and attach the report here