Which is indeed exactly what I saw. I'm not 100% (how could I be; i aint no IT dude - I know just enough about computers to know how much I dont know) but I can come to reasonable, high confidence, if uncertain conclusions with limited evidence (that is my job) and we have
- dodgy email from my account
- delivery failure notice not from my IP
- no sent message log
- Its javascript (did I use it right this time sho' ;) :lol:) webmail
- I rang them and they're having some trouble with it happening on other accounts
- 3 anti-malware programs on the machine and one across a network coming up clean
- rootkit sniffer program giving clean result
- I have since explained the significant drop in performance experienced last night - its a bit of software I've used for years that suddenly decided to make my machine die, so I killed it instead
All of the above are consistent with what you would expect of a commandeering of my account using another computer and nothing ever having been on my machine, many are not consistent with hidden malware (or at least its highly unlikely, like yahoo having more widespread problems with it and the failure notice IPs not being mine) - doesnt prove that nothings there, but I'm quite satisfied that this computer is clean. (edit - occams razor = your friend; simple webmail hijack or nefarious malware-hiding rootkit thats evaded several fully updated and quite effective scans?)
Again, thanks :D