In the past 3.9 days, we have been listed 2 times for a total of 43 hours. 126.96.36.199
We ran Spybot and Adaware on all 4 machines and took care of any issues (finished friday)
We use IXwebhosting for web hosting and email. We have a dynamic ip from windstream. We use a protected wifi (WEP) router connected directy to the windstream modem. Each machine runs AVG and regulary scans. we use windows xp firewall, updates, and virus protection on each pc.
we do have a newsletter, we generated the contacts for our customers (didn't purchase a list or anything), and have sent is out sucessfully 10 times over the past year without issue.
I'm concerned this could have been taken over but I don't see anything indicating that...
How can I track down the infected PC more directly , anyway of finding it's name? Also, can I identify what was being sent that caused the issue.
Any ideas in what I should look into next? I tried to fix each machine on Friday but we were put back on the list today so something is still messed up.