You've already changed your password, but your account is still sending suspicious emails or IMs (instant messages).

Basic steps for combatting spam

• Start by performing our basic steps for combatting spam, if you haven't done this already.

Check your computer for malware

• After a password change it can still cause problems: Malware installed on your system may still cause your account to send spam after a password change.
• You don't know it's there: Malware can be installed on your computer without your knowledge.
• Use software designed to eradicate it: Malware can hide on your hard drive, so you need to use software specifically designed to find and delete it.
• We recommend that you obtain software to run a scan for malware: If your operating system includes anti-malware software, you should review your system's security settings and make sure they are turned on and up to date.
• Important! Once you have completed a malware scan, change your password again.

Determining if your Yahoo! Mail address is being forged

• The spam is actually from another account: It's possible that spam isn't actually coming from your Yahoo! account -- but actually, someone has "forged" the headers of emails that are sent from another account.
• It looks like it's from you, but it isn't: This makes it appear that the emails are from you, although your actual account is not affected.
• Providers can't prevent it: Unfortunately, email providers cannot prevent their domain names from being forged, but if fraud is identified, appropriate action can be taken.

To check if an email header has been forged:

1. View the full header of an email sent that appears to have been sent from your account.
2. Note the originating IP address in the last "Received" line of the full header.
   - This corresponds with the sender's Internet Service Provider (ISP).
3. Conduct an IP lookup through a site like WhoIs.net to determine which ISP provides this person with Internet access.
   - Using this information, you can ask that ISP to take appropriate action against the user.

Delete contacts and linked accounts that you don't recognize

• Read our help articles for instructions:
  - Delete any contacts that you do not recognize.
  - Delete any linked Mail accounts you don't control and make sure you change the password on all accounts you do control.
  - Delete any linked social networking accounts that you don't recognize.

See if a "Vacation Response" is set up

• Some spammers set up a "Vacation Response" on accounts, which automatically sends a message anytime you receive an email from someone.
• To determine if this is the case, check your vacation response settings.

• To learn more about ways to protect your information online, visit the Yahoo! Security Centre.
• For more information about our tools and how you can protect yourself from forged email, visit our Anti-Spam Center.