(Archived) Spam one hour after sign-on

[lannyr 1]

Why am I getting spam one hour after I signed up for this? Unacceptable.

To be precise: Someone is posting notes into my account - how is this possible?

[heather 604]

Did you import your mail from Outlook or publish your Evernote email address anywhere - maybe set it up as a mailbox on Outlook to sync? If you have a virus on your computer, it could be spamming that way.

You can change your Evernote email address by going to http://www.evernote.com and clicking Account Settings at the top of the page, then generating a new email address for yourself.

[engberg 89]

On the "Settings" page of your web account, there's an email address that you can use to send email in to your own account. If you give this email address to anyone else, or if you set up any mail forwarding that goes into this account, then they will be able to send email to your account.

You can change this address by pressing the "Reset" button on that page, which will make a new address. This will break the old address, and we'll bounce any mail sent to it.

[lannyr 1]

Sorry Heather, I asked you also in the other thread.

I have a Mac - no viruses here. I have not published my Contact list or my address. I already reset the EN mail a couple of times.

The spam does not appear to come from mail - its almost like someone had my password and posted directly into the box. Here is headers of one such note - please not this

!DOCTYPE en-note SYSTEM "http://xml.evernote.com/pub/enml.dtd">

<?xml version="1.0" encoding="UTF-8"?>


Absolutely 100% customer satisfaction<?xml version="1.0" encoding="UTF-8"?><br /><!DOCTYPE en-note SYSTEM "http://xml.evernote.com/pub/enml.dtd"><br /><en-note bgcolor="#ffffff"><br /><p align="center"><font size="3" face="Arial"><font color="#FF0000">[b]Replica <br />Rolex[/b] </font>[b]<font color="#FF0000">models of the latest Baselworld 2009 <br />designs have just been launched on our replica sites. </font>[/b]</font></p><br /><p align="center">[b]<font size="3" face="Arial">These are the first run of the <br />2009 models with inner Rolex inscriptions and better bands and cases. <br clear="none"/><br />Only limited to 1000 pieces worldwide, they are expected to sell out within a <br />month. </font>[/b]</p><br /><p align="center">[b]<a shape="rect" href="http://heavhere.com/"><font face="Arial">Browse our shop</font></a>[/b]</p><br /></en-note>20090622T160442Z20090622T160442Z20090723T153405Z"Exquisite Replica" <waldemarc@bart.nl>mail.smtp
Absolutely 100% customer satisfaction<?xml version="1.0" encoding="UTF-8"?><br /><!DOCTYPE en-note SYSTEM "http://xml.evernote.com/pub/enml.dtd"><br /><en-note bgcolor="#ffffff"><br /><p align="center"><font size="3" face="Arial"><font color="#FF0000">[b]Replica <br />Rolex[/b] </font>[b]<font color="#FF0000">models of the latest Baselworld 2009 <br />designs have just been launched on our replica sites. </font>[/b]</font></p><br /><p align="center">[b]<font size="3" face="Arial">These are the first run of the <br />2009 models with inner Rolex inscriptions and better bands and cases. <br clear="none"/><br />Only limited to 1000 pieces worldwide, they are expected to sell out within a <br />month. </font>[/b]</p><br /><p align="center">[b]<a shape="rect" href="http://blueheav.com/"><font face="Arial">Browse our shop</font></a>[/b]</p><br /></en-note>20090622T151116Z20090622T151116Z20090622T151112Z"Rolex" <yung-hsij@bcn.net>mail.smtp

[engberg 89]

The notes are coming from the inbound email address, so you should Reset the address and then figure out how that address got out to a spammer. You may have something on your computer harvesting email addresses.

[heather 604]

The format of a note is automatically converted into that when it is emailed into Evernote.

Anything that is emailed to your Evernote address should receive that type of formatting. Try it yourself, with something you send on purpose.

And try running a Malware scan for your Mac.

http://macscan.securemac.com/

[engberg 89]

We checked the SMTP routing information for the spam emails being sent to your account, and they are all being forwarded by your own mail server. I'd recommend that you disable any mail forwarding from your mail server into Evernote, since it appears that your own address on your own mail server is already in use by spammers, so forwarding your emails to Evernote will result in spam notes.