


If you do not have malware software installed, you can download a free solution from the Microsoft Protection Center. Make sure the user has anti-malware software installed, running and that it's up-to-date. Verify that the users machine is not compromised you can follow the guidance provided below. (Note: If you are not an admin please read How to determine whether your Office 365 account has been compromised instead.) If you believe an account (or multiple accounts) have been compromised because you have seen suspicious behaviors like emails in the 'Sent Items' folder not sent by the account owner, mail forwarding rules added, credential changes, a high number of failed logins, profile changes, or email signature changes, etc. The most common scenario is that a member of their organization became the victim of a phishing scam and the attacker obtained the password for their account. One of the most common security support requests we receive from our Office 365 customers is for assistance with remediating an account compromise.
