Chris Swinney
asked on
Weird text in received emails- outlook
Ok this is the strangest thing.. We have a client who stayed in a hotel over the weekend and ever since then the below text has been appearing in emails he receives. He can send us an email and the text is not there. If i reply to him the text is there. He is not at the hotel now.
I've tried restarting the computer, creating a new outlook profile, removing the saved wifi credentials for the hotel. Scanned with malwarebytes, avg, windows defender, checked signature settings, removed all add ins for outlook.
Today I'm going to try and repair microsoft office, other than that idk what else to try.
Any ideas??
"513 Spring Branch Road, Dunn, North Carolina 28334 USA
Fairfield Inn & Suites Dunn I-95 A connection that can keep up with you.
high speed internet
email
connect to social networks
surf the web
free .
duration: length of your stay
connect for free
or - connect with an access code
high speed internet
free
duration: length of your stay
connect for free
connect with an access code
By selecting a connection option, you accept our terms of use. "
I've tried restarting the computer, creating a new outlook profile, removing the saved wifi credentials for the hotel. Scanned with malwarebytes, avg, windows defender, checked signature settings, removed all add ins for outlook.
Today I'm going to try and repair microsoft office, other than that idk what else to try.
Any ideas??
"513 Spring Branch Road, Dunn, North Carolina 28334 USA
Fairfield Inn & Suites Dunn I-95 A connection that can keep up with you.
high speed internet
connect to social networks
surf the web
free .
duration: length of your stay
connect for free
or - connect with an access code
high speed internet
free
duration: length of your stay
connect for free
connect with an access code
By selecting a connection option, you accept our terms of use. "
ASKER
Its a smartermail account set up in outlook to use Imap. They don't see the weird text on their phone.
I only see what I replied on the items in my send folder "test".
If i send him an email first same thing happens. If i reply to the email he sent he receives the weird text.
Didn't see this yesterday but one of the emails came to my junk folder and i see
Wonder if ccleaner would fix the problem
I only see what I replied on the items in my send folder "test".
If i send him an email first same thing happens. If i reply to the email he sent he receives the weird text.
Didn't see this yesterday but one of the emails came to my junk folder and i see
Wonder if ccleaner would fix the problem
Quite odd.
»bp
»bp
ASKER
Yeah it is odd, never saw anything like it.
Scan the PC with AdwCleaner
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.bleepingcomputer.com/download/adwcleaner/
Try to do a system restore of the OS to a date before checkin of the hotel.
ASKER
When he called yesterday afternoon, the text was no longer appearing. I'm guessing it was some kind of cache issue. Resolved now tho.
Thanks for the input everyone.
Thanks for the input everyone.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Issue was resolved the day after i initially worked on it. However Jackies link explains why it happened.
Your question is interesting. Thanks for the learning opportunity as I do not know the exact name of the appliance before seeing your question.
https://www.theverge.com/2012/4/7/2931600/hotel-caught-injecting-advertising-into-web-pages-on-complimentary-wi
https://www.theverge.com/2012/4/7/2931600/hotel-caught-injecting-advertising-into-web-pages-on-complimentary-wi
Interesting stuff.
These articles talk about injecting into web browser traffic (HTML) presumably on port 80, although it talks about deep packet inspection. A little surprised that also affected email payloads. I get that they are HTML if you are using that format, but I always set up Outlook to use secure protocols sending and receiving, so I wouldn't have expected the HTML in an email body to be unencrypted and vulnerable. But I'm not a hacker either.
A good reason to advocate for good old plain text emails I suppose...
»bp
These articles talk about injecting into web browser traffic (HTML) presumably on port 80, although it talks about deep packet inspection. A little surprised that also affected email payloads. I get that they are HTML if you are using that format, but I always set up Outlook to use secure protocols sending and receiving, so I wouldn't have expected the HTML in an email body to be unencrypted and vulnerable. But I'm not a hacker either.
A good reason to advocate for good old plain text emails I suppose...
»bp
Agreed.
Plain text will prevent all this type of injection.
Plain text will prevent all this type of injection.
If Gmail, if they log in on the Gmail website and view / send / receive emails, does that behave any differently?
In the email you replied with that they saw as corrupted, do you see that same corruption in your Sent Items folder for that email?
Does it only happen on replies to emails they send, or if you author a new email and send to them does it also happen?
»bp