If any "hacking" has taken place, it's perhaps more likely to have been on a webmail account such as hotmail rather than via your own computer. It's trivial, and usual practice, for a spammer to use other people's names in the "from:" address box. After all, he wouldn't use his own address, would he?

Do you have an address book in the hotmail account (that is, in addition to any address books in Thunderbird itself)?

Do you have any examples of the sent stuff? Inspection of a message's headers normally shows that it wasn't sent using your email account or even your computer.

Do you, or family members, or friends, or colleagues, frequently send messages to long lists of people? Jokey emails are often carelessly re-forwarded with a huge accumulation of previous addressees, providing rich pickings when they fall into the wrong hands. Or let's put it this way; if some third party had been able to read email messages sent by you, could they have gleaned this list of addresses from those messages?

Having said all that, do you use any anti-malware software? Are you confident that your computer is free of malware or trojans that might have access to your computer or messages?

Thanks for the reply. Below is the message header. I'm certain it was not sent from my thunderbird account because I have a signature on those emails. My concern is with how the spammer got my contact list. most of the recipients are NOT in my contact list in hotmail account. The addresses that were cc'd on the email I received match the "contacts" list exactly, which is different to the "personal address book" and "collected addresses" I am also a little confused by these 3 lists but that is not a concern. I don't forward jokes and the like. I use Avast freee version and did a scan yesterday-Nothing came up.

From - Sat Apr 05 07:01:05 2014 X-Account-Key: account3 X-UIDL: C2ABD0D9-BBF9-11E3-9BF4-00237DE49B9E X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: x-store-info:8Rlnjmxvy6L6cXs23gz/9HW3P3dIQ3IMvZ5UWOY+G+LPFU08w+k3PlimmV6EDVwqeyZYKF31ObMoGUBICFJu1LWY/Y39bSs2Tl+OW4ihmAi+hXqynA8Hb9sNw3p3yBrQH/Gv8iL1I6g= Authentication-Results: hotmail.com; spf=none (sender IP is 80.12.242.129; identity alignment result is fail and alignment mode is relaxed) smtp.mailfrom=kgoursaud@wanadoo.fr; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=hotmail.com; x-hmca=none header.id=shantimassage@hotmail.com X-SID-PRA: shantimassage@hotmail.com X-AUTH-Result: NONE X-SID-Result: NONE X-Message-Status: n:n X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MTtHRD0yO1NDTD0w X-Message-Info: NhFq/7gR1vQVCILwCABTjlF8HNm+0BFQEXSUXD69u8vhZJRbkTKNDK4/hCwFkbosnLRIEVAQT17qigBgTj2E3aM/hBRsSOTzZzq5xLpJAUTYZF//zR6e2WZByDCMzoaBmcreFSkglt2Gr7vvix+XgN8TjWXcAS+BxvQRSrVBhMibuTiyn0NWIbGSYKLyi/6HJ7lzjn29Dp4NDkUv+9q6f2FAablc6xtH Received: from smtp.smtpout.orange.fr ([80.12.242.129]) by BAY0-MC1-F46.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Fri, 4 Apr 2014 06:05:17 -0700 Received: from wanadoo.fr ([88.23.184.20]) by mwinf5d30 with ME id lp4y1n00X0SpJ2003p58kh; Fri, 04 Apr 2014 15:05:17 +0200 Message-ID: <3bab2b8e349a$691c62b3$56671a64$@hotmail.com> From: Kim Shanti Massage <shantimassage@hotmail.com> To: "Kaye" <kayestevenson@iprimus.com.au>, "kim" <kimsaunders@hotmail.com>, "Kim Shanti Massage" <shantimassage@hotmail.com>, "kossin x26 x2364 x3bssec wisc edu" <kossin@ssec.wisc.edu>, "Kristen Berger" <kristenberger@hotmail.com>, "laura88 x26 x2364 x3boptusnet com au" <laura88@optusnet.com.au>, "laure" <groovyfrenchie@yahoo.fr>, "Leanne Brown" <brown_leannem@hotmail.com>, "leilacara x26 x2364 x3bhotmail com" <leilacara@hotmail.com>, "leila cara" <dream_mermaid@hotmail.com>, "lgoodare x26 x2364 x3bxtra co nz" <lgoodare@xtra.co.nz>, "Linda" <Linda@arcadiaorganics.co.nz>, "Lisa Dunn" <a-m-a@xtra.co.nz>, "LJ Lawson" <elevationdesign@xtra.co.nz>, "Louane Hann" <LHann@genetics.com>, "lulu morgan" <captmorgan2@yahoo.com>, "Lynda Holistic Health Training" <lynda@hht.co.nz>, "lynn anderson" <lynn.anderson@ncc.govt.nz>, "lynne greig" <lynne.greig@xtra.co.nz> Subject: Date: Thu, 4 Apr 2014 02:05:08 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_4BCF_5BF78DE7.513C48C5" X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 16.4.3522.110 X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3522.110 Return-Path: kgoursaud@wanadoo.fr X-OriginalArrivalTime: 04 Apr 2014 13:05:17.0838 (UTC) FILETIME=[86C902E0:01CF5006] X-Antivirus: avast! (VPS 140404-0, 04/04/2014), Inbound message X-Antivirus-Status: Clean

This is a multi-part message in MIME format.

Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

http://phiendich.net/components/com_contact/usainform.php -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= From: Kim Shanti Massage

Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Thread-Index: AQo/hzXzKHI4OWpzMGFpOWtlcXpxZA==

Lets see, you send a mail to a dozen folks CCing them.

One of them has malware of gets hacked. your list of a dozen addresses and your sending address are fairly easy to copy. And that scenario requires no hacking or nasty stuff on your end.

The lesson is always use BCC to send mail to a list, that way there are no lists of email addresses lying around in every recipients mail box for a spammer/hacker to get as there is with CC.