Computing.Net > Forums > Security and Virus > Has my email been infected ?

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Has my email been infected ?

Reply to Message Icon

Original Message
Name: null83
Date: December 22, 2007 at 07:00:06 Pacific
Subject: Has my email been infected ?
OS: WinXP Pro SP2
CPU/Ram: AthlonXP 3000+ 756mb DDR
Model/Manufacturer: Custom
Comment:

I got this email today and am slightly concerned that my email address is being used illicitly. This is the email I received from my host:

<<This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

m.welgraven@hccnet.nl
SMTP error from remote mail server after end of data:
host hcc3.schonemail.nl [80.253.112.47]: 554 5.7.1 lBM9TTFV010378:
Found several indications this message is likely to be spam.

------ This is a copy of the message's headers. ------

Return-path: <MYEMAILADDRESS@MYEMAILADDRESS.COM>
Received: from [172.17.134.35] (port=39669 helo=mx5.mx.dmz.bit.nl)
by smtp3.smtp.dmz.bit.nl with esmtp (Exim 4.63)
(envelope-from <MYEMAILADDRESS@MYEMAILADDRESS.COM>)
id 1J60fh-0001WY-7T
for m.welgraven@hccnet.nl; Sat, 22 Dec 2007 10:29:29 +0100
Received: from [82.100.1.207] (port=2380 helo=h-ff3799a153884)
by mx5.mx.dmz.bit.nl with smtp (Exim 4.63)
(envelope-from <MYEMAILADDRESS@MYEMAILADDRESS.COM>)
id 1J60fg-0000R3-VN
for nfreep@welgraven.nl; Sat, 22 Dec 2007 10:29:29 +0100
Received: from Gertrude Paige (10.19.12.10) by h-ff3799a153884 (PowerMTA(TM) v3.
2r4) id hfp89o39d55j00 for <nfreep@welgraven.nl>; Sat, 22 Dec 2007 10:29:26
+0100
Message-Id: <20071222112926.9865.qmail@h-ff3799a153884>
To: <nfreep@welgraven.nl>
Subject: December 74% OFF
From: VIAGRA ® Official Site <nfreep@welgraven.nl>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Date: Sat, 22 Dec 2007 10:29:29 +0100 >>

I've changed my email address parts to MYEMAILADDRESS@MYEMAILADDRESS.COM in case that wasn't obvious :)

Can anyone lend some insights as to what this is please, I'd be very grateful. Thanks all in advance :)



Report Offensive Message For Removal


Response Number 1
Name: XpUser4Real
Date: December 22, 2007 at 11:56:19 Pacific
Reply: (edit)

first of all, what email are you using?
yahoo, msn,outlook...etc

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 2
Name: Jennifer SUMN
Date: December 22, 2007 at 12:00:41 Pacific
Reply: (edit)

Your email address is probably being spoofed. Short of deactivating that account and creating a new one, there's nothing you can do.

Life's more painless for the brainless.


Report Offensive Follow Up For Removal

Response Number 3
Name: Wombat
Date: December 22, 2007 at 13:17:40 Pacific
Reply: (edit)

The email has been bounced backed by the server as undeliverable...


Report Offensive Follow Up For Removal

Response Number 4
Name: btk1w1
Date: December 22, 2007 at 16:42:51 Pacific
Reply: (edit)

You could try sending the email from a different email account to see if it gets bounced back again.

Also you could try using the same account from a different pc to rule out the possibilty of something on your system doing it.


Report Offensive Follow Up For Removal

Response Number 5
Name: null83
Date: December 23, 2007 at 02:50:54 Pacific
Reply: (edit)

It's ntlworld.com, my ISP (now VirginMedia, in the UK). I use Outlook Express.

The email wasn't sent by me, if you look at the subject its for Viagra sales :I - this being the only email that's been returned of what potentially could be more I guess :/

Just wondering if you'd seen this before. I guess it's a case of either finding something on my system at home? To the person that said my email account has been hijacked - can you elaborate? Could I not just clean my system at home and then change the password?

Thanks for responses so far....


Report Offensive Follow Up For Removal


Response Number 6
Name: Jennifer SUMN
Date: December 23, 2007 at 14:21:22 Pacific
Reply: (edit)

Are you referring to me? I said "spoofed" not "hijacked." There's a difference.

If you're not sure of the definition of each, Google the terms, or look at wikipedia.

Life's more painless for the brainless.


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software