Malicious Rules - Hotmail Hard Reset

David Azariah 20 Reputation points
2026-10-21T06:57:39.41+00:00

Hi, Following an extensive hack on my account around 5d ago (you can see the logs of erratic logins). I have managed to secure my account and also block out Apps that may be allowing for access to my hotmail. There are still rules that keep popping into my Hotmail account and still causing nefarious emails to be drafted extensively (10-15 per 30s blocks).

Screenshot 2026-10-21 at 5.55.12 pm

I have closed out and deleted all the rules, however there still seems to be a way that they are able to keep adding these rules within my Hotmail account.

I would like to look into a hard reset of my account and allowing me to ensure that this issue does not occur again, and I can resume use of my account again.

Best, David

Outlook | Outlook for mobile | Outlook for iOS | For home
0 comments No comments

Answer accepted by question author
Lychee-Ng 30,830 Reputation points Microsoft External Staff Moderator
2026-10-21T12:13:07.7233333+00:00

I understand why you are looking for a complete reset here, David Azariah.

If malicious rules are reappearing after you delete them, it suggests that the account or something connected may still have unauthorized access. Unfortunately, there's no such thing as a "hard reset" for Outlook to bring all configuration back to defaults while preserving the account. Instead, consider cutting off every remaining access path:

  1. Run a full malware scan on devices the account used to sign in.
  2. Visit https://account.microsoft.com/security > click Manage how I sign in
    1. Scroll down > click Sign out everywhere (optional: Reset Windows Hello...)
    2. Generate a new recovery code in case the attacker previously saved it.
  3. Back to Security, check the Recent activity page carefully, especially entries around the time of the rule creation.
  4. Open Outlook again, check Settings > Mail and make sure nothing suspicious has been enabled:
    1. Forwarding and IMAP
    2. Automatic replies
    3. Connected accounts

Look for third-party mail clients/devices that still have the mailbox configured (e.g. classic Outlook, Apple Mail, Thunderbird, mobile mail applications, or another device). Temporarily removing the Outlook account from every mail client, then delete the malicious rule again.

That said, if new malicious rules continue to appear after the account has been secured and all sessions have been terminated, this goes beyond what we can investigate on Microsoft Q&A. This is just a community support forum, and contributors here have no access to Outlook's account/session logs or backend mailbox configuration.

In that situation, consider trying the Microsoft's hacked or compromised account recovery process. It can detect your issue and offer appropriate recovery steps. Depending on the case, it may offer you an option to speak with an agent. For now, avoid using the mailbox normally or sending sensitive information from it until the unauthorized rules stop appearing.

Was this answer helpful?

1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.