Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mistery E-mail daemon


  • Please log in to reply
No replies to this topic

#1 Motohead

Motohead

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 October 2012 - 08:34 AM

I have been geting email daemons back from e-mails I havent sent. Something is sending them to a bunch of people in my address book during the night Avast and housecall say all clear. Here is one of the daemons

Sorry, we were unable to deliver your message to the following address.

<xxx@swbell.net>:
Remote host said: 550 5.2.1 <xxx.@swbell.net>... Addressee unknown, relay=[98.139.91.84] [RCPT_TO]

--- Below this line is a copy of the message.

Received: from [98.139.91.68] by nm14.bullet.mail.sp2.yahoo.com with NNFMP; 10 Oct 2012 06:04:49 -0000
Received: from [66.94.237.114] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 10 Oct 2012 06:04:49 -0000
Received: from [127.0.0.1] by omp1019.access.mail.mud.yahoo.com with NNFMP; 10 Oct 2012 06:04:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 982191.51386.bm@omp1019.access.mail.mud.yahoo.com
Received: (qmail 41208 invoked by uid 60001); 10 Oct 2012 06:04:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=swbell.net; s=s1024; t=1349849088; bh=62JgjktVzN9eOopruPQtR2hi10wKZchuRYZWy3IyxBw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=Y41okGlp7DlGszhz+td+u9F+PJo1yQ8amLvSzoncPAqXF/cME/dQJP8wZJYcTN6dHicqcJA5SylmR6Y559BwoXUwu9rY9xbCMrPU4gzn58E0xIFzH5BpLCDUPbcwHp748xuLVERfSz9bUBTwesMjYy2XFEVFM6g6za8QvbLl+1U=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=swbell.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=TnMD7lu/K9om00mzN4fuG926Wxohm3CVFOyJSpI0kSN67zhgvXvCjqx4w6dSmPWE81ItE4axpPBfUuplzcepdfaD2MN5LGMirxcEv3Cj/1DyHSxOghULnKudj/e+YHWu0VJbv6QhCmAZHgTOUj8qbGDVO9CioTf/hpfrTHVQ3zg=;
X-YMail-OSG: b1ODiSkVM1kkHHXkyhQWvI17Dzdh3MhGDfhCrglnVK.uocE
0AY1_Bv1ebGAzibADOUsbQaVpnJbe9s1LymHIrqoYoPLJ21O00Fv6wYjp5N6
6Jv54uJSWceykfGBvfG5GS0Clqa3bcdRtfS91z6mSWqX2OqWy6TAKsFDQxIR
Mr56C4icfy136rcUwpQihmKjUSsrjVeEOYyEhzEwW6VDP5GeBlxj2Y.UHhP1
y6Pq16Zca.Gj7JprhHKnCkXHBp4SAJFJ7U0KBGja57e8.N_D8mAr26jBF2m0
q6mFt4lMS0gTd3JNdYNWh0AUpEs7wPEtRK1acaF7m00jJ0vUUEyjm4m0yMzg
ptb2K.yHusxfo574Z.wEa64izpBBNgVPTWEHMxXsoP48ZGrp7ZTa5rr5pz_S
veyaMsX_YTPQ_WayzUQZo1jEMEVaR9v_nsM6NxSXYbmkivjQ_0ryEfGDf_fI
3RZ7EHz2Fvs1CG_srNk5v96FV_cdfm4mux0ptqWME_z6t1JBCCChBwS4ASZ4
tIxv6JOku9oPHkeVdVbiPLbRBNAAhmm6FlI1l.cFGqnVwpDjz37R4jpYn_Mh
X8Pcldm5cDnCa3oE5fys3fzLQfiNoRxpmFxrNxScr9zW.1mjMVmuMKiQT
Received: from [193.253.108.9] by web181702.mail.ne1.yahoo.com via HTTP; Tue, 09 Oct 2012 23:04:48 PDT
X-Rocket-MIMEInfo: 001.001,CldoYXQgZG8geW91IHRoaW5rIGFib3V0IGl0Pw0KaHR0cDovL3dhbGVudGZvdG8udmRuZXQubHQvaHR0cC1uZXd0eXotMi5waHA_d2pkcmVlZD05MTY2OTABMAEBAQE-
X-Mailer: YahooMailWebService/0.8.123.450
Message-ID: <1349849088.14255.BPMail_high_noncarrier@web181702.mail.ne1.yahoo.com>
Date: Tue, 9 Oct 2012 23:04:48 -0700 (PDT)
From: BOB xxx <xxx@swbell.net>
Subject: ...
To: xxx@swbell.net, xxx@gmail.com, xxx@swbell.net,
xxx@swbell.net, xxx@fastpartsnetwork.com, xxx@swbell.net,
xxx@swbell.net, xxx@swbell.net, xxx@swbell.net
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii


What do you think about it?
http://walentfoto.vdnet.lt/http-newtyz-2.php?wjdreed=916690


I never sent this

*xxx'd out email address names - Queen-Evie*

Edited by Queen-Evie, 11 October 2012 - 09:27 AM.
Moved from XP to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users