Message showing up in outbox that I did not create subject:report frau

[roryjoc]

I noticed a message in my outbox the other day that I didn't create. The send was completed before I was able to stop it. I have subsequently changed my outlook settings so that I have to manually send mail. The message appeared again today waiting in the outbox. I checked it out and it appears to be sending some file information; as the body of the mail contained the following information:
Matador Version: 4.9.1.8211
mlfoshim.dll: 4.9.1.8211
MlfHook.dll: 4.9.1.8211
MlfOE.dll: 4.9.1.8211

The address it was sending to is: 'fraud@mailfrontier.net'

Also the message that did send did not show up in the sent items folder.

Is this activity familiar to anyone concerning a trojan, virus, malware or anything else? My A/V is not finding anything.

 

[brianinms]

Do you have zonealarm?

 

[eyec]

this is a part of ZA. it is an option for email scanning - i turned it off and use AVG for email scanning.

 

[roryjoc]

There was also an attachment to the e-mail that I didn't open until after I read your Responses. Here is the body of that attachment: (doesn't look like something ZA would be sending, does it?) (i am not a customer of citizens bank)

Dear business/corporate customer of Citizens Bank,

Caution: we continue to be informed that customers and non-customers are receiving fraudulent phishing emails requesting confidential information and credentials. As a reminder, the bank will NOT send customers unsecured email or other correspondence requesting that they confirm or provide Customer ID's User ID's, card numbers, social security number or PINs and passwords. As always, if you receive any unsolicited e-mails, phone calls, faxes or other suspicious attempts to gain personal or confidential information, please e-mail us at fraudprevention@cfgcustomers.com or call Cash Management Client Services at 1-877-550-5933, Monday to Friday, 7 a.m. to 6 p.m. ET. For Additional information please see the events page

For security measures, we require you to confirm your challenge questions:

http://id-570961515.citizensbankmoneymanagergps.com/securepage/challenge.aspx

Sincerely,
Citizens Bank Online Billing Services Team

 

[roryjoc]

You were right it is part of ZA the attachment is the message it is reporting to them.
Sorry for the confusion.