Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The real problem is that she can't change her password. She used to have a paid AOL account about ten years ago, and converted it to a free account, but in order to change the password at you have to have information like the credit card that was used when the account was a paid account, or the SSN of the member (none of which work even when she uses the ones she is sure of).

Support won't talk to her because she's not a paying customer.

She still has the password to the AOL account currently, so we can access the account, but there's no way to change it or cancel it.

Relevant headers from the email:

Content-Transfer-Encoding: quoted-printable
Date: Wed, 20 Oct 2010 02:24:17 -0400
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
MIME-Version: 1.0
From: <>
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Mailer: AOL Webmail 32797-PHONE
Received: from by (
 with HTTP (WebMailUI); Wed, 20 Oct 2010 02:24:17 -0400
Message-ID: <>

The headers make it clear that it is coming from the webmail version of AOL, so I assume she has a virus on one of her computers. Her home computer is a mac, so it's unlikely to be there (although possible).

I'm confused about the X-Mailer header though which seems to insinuate that it's the mobile webmail version from someone's phone that is sending out the spam.

I don't think there's an iPhone virus out there yet (and that's her only phone).

share|improve this question
up vote 1 down vote accepted

If AOL won't cooperate, either escalate your support request or contact their ISP. (Yes, even AOL has an ISP or two.)

Also, report the Filipino ISP (as mentioend by Ignacio) to places like SpamHaus and SpamCop. If you can get them blocked your problems would be at least temporarily over.

share|improve this answer
Re: spamhaus - from their faq: Is there a way to report spam to Spamhaus? No. Spamhaus DNSBLs are not based on spam reported to us – Michael Pryor Oct 20 '10 at 21:11
Good point. I haven't actually been reporting spam much. Thanks for the correction. – CarlF Oct 21 '10 at 12:19

A WHOIS on the IP address shows it registered to an ISP in the Philippines. Based on your location I'd say that it's very likely that it's not her doing it at all. You need to either change the password or shut down the account entirely.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .