事情的开始是前两天，我收到了来自微软的警告邮件，说我的账号有异常活动，登录地点显示在境外的多个地点。我用电脑进入微软官方网站更改了密码。

但是在今天，我早上起来发现我的微软邮箱凌晨收到了一封来自黑客的信（用我自己的邮箱发给我自己），信里报上了我设置的新密码，大意是他黑进了我的电脑，现在我的电脑上有他的木马，他有我所有的社交账号和我电脑的全权控制，需要我付400刀比特币赎金，否则就把我**的视频发给所有的朋友。

看到这我就知道肯定是骗人的，你能把我没干的事录下来？我赶紧在手机上给微软账户换了随机强密码，但在那之前，我的推因为用户名和密码和这里一样被黑了（号基本是空的）。那会我确信黑客和我同时登着我的邮箱，我改完密码估计他就登不上去了。

但是我有一点不清楚的是，他是咋拿到我前两天新改的密码的？这样推断下来，他可能的确在我电脑上有木马，这让我不敢再在电脑上登任何账号了。我用360全盘扫了一遍，删了几个危险文件，这够了吗？请教各位吧友了

图发不出来，上勒索信原文
Hey I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which you use for internet browsing.
After that, I have started tracking your internet activities.
Some time ago I hacked you and got access to your email accounts（我的邮箱）
Obviously, I have easily hack to log in to your email.
Your password:（我的密码）
One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links from your inbox emails).
All ingenious is simple. =)
This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history to my servers.
I have access to all your messengers, social networks, emails, chat history and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.
Likewise, I guess by now you understand why I have stayed undetected until this letter...

其实他根本没投放什么木马，只是无差别发邮件而已

抓包看网络请求就知道电脑有没有病毒了

有可能不是木马

我也中了！楼主现在怎么样了？

后续：在第二周周一，我在电脑上上过的google邮箱也被盗用了，但仅限于广撒网发垃圾邮件。我也改了谷歌密码，后续无事。

所以说杀毒不够彻底吗

我早习惯了 基本每周都要收几封这样的邮件，里面的邮箱和用户名密码就是我用来逛外面世界注册用的临时邮箱。反正相关网站开好登录验证，设不同复杂密码、定时清理浏览器隐私和cookie就行。

我今天也遇到了。。微软邮箱那边来警告异常，活动地点有好多个，但不是登录失败那种，我不知道楼主也是不是

我4月5号也跟楼主一样，也遇到了谷歌邮箱也****的问题，所以我觉得这个应该是中了什么木马病毒之类的