Summary: Once your Windows Live Hotmail account, or contact list, has been hacked or compromised, there are several steps to clean up after you get it back.
My husband's Hotmail contact list has been hacked and a phishing paragraph was sent to them. Now it appears whenever he tries to forward an email. How do we get rid of it?
•
It's unusual that only the contacts would have been hacked into, and it's more likely your entire Windows Live Hotmail account has been compromised.
Frankly, I'm surprised you still have access.
But, given that you do, there are several steps you should take immediately, to recover from the damage that's been caused. One of those steps should take care of the phishing paragraph that's showing up.
•
I'm going to assume you're using Windows Live Hotmail's web-based interface. In fact, many of the steps we'll take will need to be taken there.
The very first thing you should do is very simple: Change Your Password. This is so important, I'd go so far as to say do it now; before even reading the rest of this article. It's the first step to slowing down (though perhaps not preventing) the hacker from continuing to access your compromised account.
There are now several things you must change to regain total control of your account.
Start by clicking on the Options item in the far right of the Windows Live Hotmail display:

In the drop down menu that appears, click on More options.
On the resulting "Manage Your Account" page, click on View and edit your personal information. That will take you to a page much like this:

The short version is that while your hacker had access to your account, they had access to everything here. If they didn't change it, they likely could have seen important information that you might care about.
Change it.
For everything that makes sense, change it.
Change your password: as I mentioned above, to prevent the hacker from accessing your account.
Change your security question: to prevent the hacker from having changed it and using it for a password reset after you change your password.
Change your alternate e-mail address: to prevent the hacker from requesting a password reset to an account that he may have changed this to.
Change your mobile PIN, or remove your mobile number completely.
In billing options, consider removing or changing the payment method listed, and be sure to keep an eye on that credit card's statements in the future.
Also review the Additional options at the bottom of this page, making sure that the hacker didn't change permissions, marketing preferences, or anything else relating to your account.
That's the high priority stuff, but there are still plenty of things that need to be looked at.
Return to the "Manage Your Account" page. You'll want to double check almost every option listed on this page, as the hacker may have altered it while he had control of your account.
In particular, I'm guessing that you want to take a look at the "Personal e-mail signature" settings.

As the text of the feature states, the text in your signature is "added to the bottom of each e-mail message you send". I'm guessing that your hacker added his own personal message here, and that it's being automatically added to every message you send. Remove it.
In reality, if your hacker has been thorough there's a lot of damage they can do, and it can be a lot of work to re-construct your account. Remember that your Hotmail account is really your account for all Windows Live services, including Messenger, Spaces, Groups and who knows what else. While they had access to your account, they had access to all of that. And that means that they had access to any and all options relating to those other services in addition to Windows Live Hotmail.
It simply goes to underscore the importance of keeping your account safe, choosing a strong password, keeping it secure, and in general keeping your computer safe on the internet.
Prevention is so much easier than trying to clean up the mess after a problem.
Article C3734 - May 17, 2009
The exact same thing happened to my Hotmail account a couple of days ago. A phishing email was sent out to my contacts. I immediately checked the Hotmail inbox and saw some returned messages that were sent out to invalid addresses. All of my contacts were erased and the phishing email had become my vacation response.
Everything else looked OK in the account, but I did everything that Leo recommended. I stopped regularly using this Hotmail account many years ago because of the huge volume of spam.
Posted by: David Shapiro at May 19, 2009 9:53 AMI'm involved with IM and on mmore than one occasion I've been asked for my password to my hotmail/live account presumably to email their message/offer. I have always declined even though I do trust the people involved but it brings the question to mind if they can email my whole contact list how do I mail that way, without having the insanely long "mailed to" list which looks and will set off the spam police?
Posted by: Neil at November 26, 2009 7:10 AMI had my email hacked into and cant get into my email, they changed my question, my friends got emails from my email asking for money
14-Jan-2010
Posted by: rachel adams at January 13, 2010 1:49 PM