I keep receiving E-mails from STEAM that someone tried to access my account

[Alehazar]

I keep receiving E-mails from STEAM that someone tried to access my account from a different PC or mobile device using my account name and password; and that I need the STEAMGUARD code that is sent with the E-mail to access my own account.
These E-mails are being sent to my old E-mail account that I used to set up my STEAM account. I've been re-setting my E-mail and STEAM passwords like mad the past couple of weeks, but to no avail. Recently I changed my E-mail account within STEAM, but still the E-mails from STEAM end up in the inbox of my previous E-mail account.
I have scanned my PC with ESET and nothing pops up that my PC security has been compromised.

Most recent E-mail I received :

- - - - -

Your Steam account: Access from new web or mobile device

Steam Support <[e-mail]>
Today at 1:17 AM

To

*****@****.com

Message body
Steam
Dear ****,

Here is the Steam Guard code you need to login to account ****:
********

This email was generated because of a login attempt from a web or mobile device located at 192.151.168.24 (US). The login attempt included your correct account name and password.

The Steam Guard code is required to complete the login. No one can access your account without also accessing this email.

If you are not attempting to login then please change your Steam password, and consider changing your email password as well to ensure your account security.

If you are unable to access your account then use this account specific recovery link for assistance recovering or self-locking your account.
The Steam Team
https://help.steampowered.com
VALVE © Valve Corporation. All rights reserved. All trademarks are property of their respective owners in the US and other countries.

- - - - -

The only way I know of how to play in a more secure fashion is to play in off-line mode and sever my physical internet connection for the duration of playtime.

Is there anything else that can be done?
I'm pretty much at my wit's end.

[76561198218426745]

Simple answer is do a check for malware, and set up two-factor authentication, if possible.

[Samurai]

1

[Alehazar]

Publicado originalmente por habitualaction:

Simple answer is do a check for malware, and set up two-factor authentication, if possible.

I ran Malwarebytes which came up empty. And Two-Step authentication requires a smartphone -which I do not have.

[76561198218426745]

Do the same scan in safe mode. Make sure rootkit detection is enabled.

[Descartovich]

Download kasperky internet security is the best, comes with email protection

[Alehazar]

Publicado originalmente por habitualaction:

Do the same scan in safe mode. Make sure rootkit detection is enabled.

Ran M-BAM Chameleon with rootkit detecttion enabled; still zero.

[Alehazar]

Publicado originalmente por Jorgelino:

Download kasperky internet security is the best, comes with email protection

Has Kaspersky resolved its issues with Windows 10? Last time it rendered my entire PC inoperable -it got stuck in a boot-loop.

[76561198218426745]

It stands to reason that if they could access your email, they would have your account by now. Are you absolutely sure the emails are for your current account? You can try changing your password from a different, secure PC to be safe.

[Alehazar]

Publicado originalmente por habitualaction:

It stands to reason that if they could access your email, they would have your account by now. Are you absolutely sure the emails are for your current account? You can try changing your password from a different, secure PC to be safe.

I only have one STEAM account; also only one PC. Why would I receive these E-mails in my E-mail account that is no longer associated with STEAM?

[wuddih]

"The login attempt included your correct account name and password."

check for malware, and change passwords.

[Alehazar]

Publicado originalmente por wuddih:

"The login attempt included your correct account name and password."

check for malware, and change passwords.

I did check for Malware; zero results. I've been changing my password like clockwork. My question still stands, why are these E-mails still sent to an E-mail account of mine, that is no longer associated with STEAM?

[76561198218426745]

I mean, if you keep changing your password, and they keep entering the correct password, that seems like the argument that you do have malware, and it's just not being detected.

Are you sure the email is actually from Valve and is not a phishing email? Have you checked the headers of the email?

[wuddih]

Publicado originalmente por Alehazar:

Publicado originalmente por wuddih:

"The login attempt included your correct account name and password."

check for malware, and change passwords.

I did check for Malware; zero results. I've been changing my password like clockwork. My question still stands, why are these E-mails still sent to an E-mail account of mine, that is no longer associated with STEAM?

check the email header for this entry

Received: from [x.x.x.x] (helo=valvesoftware.com)
by smtp04.steampowered.com with smtp (Exim 4.82)

if existant, then you still have an account on that email. check the username mentioned in the email then. you would wonder how many people insist on having just one account but registered another one by accident and forgot about it.

also check https://store.steampowered.com/account/
if your contact email address is really something else and not the email you receive those guard emails on and if that is not the case, check if you do not have setup forwarding emails from your current email to the old email.

[Alehazar]

This is at the top of my guardmails:

Steam Support <[e-mail]>


Is the folowing link a valid Valve Corp (US) link?

https://help.steampowered.com/en/wizard/HelpRequestCantLogin/?s=5584570060259440212

[76561198218426745]

It's easy to fake the sender of an email. It's harder to fake the headers. Look for the information wuddih posted in the headers of the email. There is usually an option above the email to see the full headers, though it will depend on your email provider.