1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Wormy email messages?

Discussion in 'Security and Privacy' started by samson, 2003/08/24.

Thread Status:
Not open for further replies.
  1. 2003/08/24
    samson

    samson Inactive Thread Starter

    Joined:
    2003/03/22
    Messages:
    67
    Likes Received:
    0
    The past few days I've been inundated with emails from, variously, a postmaster, mailer-daemon, or mail delivery subsystem saying that a message I sent didn't go through, blah blah, see attached file for details. I didn't send any of the messages and don't know the supposed recipients. An antivirus scan and Adaware scan turned up nothing on my machine.

    I think the attachment is a worm or some such. SpamKiller stops them, but I let one into my email client just to look at it and the attached file was a .pif. I didn't open it, of course.

    The question - is this a known way that one of these nasties gets distributed? I can just ignore them with no harm done, but maybe someone is distributing a worm with my address as the "from "? Any ideas how I could tell?

    Here's the text part of one of them, as it shows in SpamKiller:

    (Quote)

    This is an automatically generated Delivery Status Notification.

    Delivery to the following recipients failed.

    20naid@mcbreo.com

    Reporting-MTA: dns;mailbox.corp.mcbreo.com
    Received-From-MTA: dns;PNF
    Arrival-Date: Sat, 23 Aug 2003 22:06:23 -0700

    Final-Recipient: rfc822;20naid@mcbreo.com
    Action: failed
    Status: 5.1.1

    Received: from PNF ([66.227.129.130]) by mailbox.corp.mcbreo.com with Microsoft SMTPSVC(5.0.2195.5329); Sat, 23 Aug 2003 22:06:23 -0700
    From: < (my address) >
    To: <20naid@mcbreo.com>
    Subject: Re: Wicked screensaver
    Date: Sun, 24 Aug 2003 1:00:50 --0400
    X-MailScanner: Found to be clean
    Importance: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2600.0000
    X-MSMail-Priority: Normal
    X-Priority: 3 (Normal)
    MIME-Version: 1.0
    Content-Type: multipart/mixed; boundary= "_NextPart_000_3B8AB08A "
    Return-Path: (my address)
    Message-ID: <MAILBOXHYR5EbYyjlMF00003024@mailbox.corp.mcbreo.com>
    X-OriginalArrivalTime: 24 Aug 2003 05:06:23.0843 (UTC) FILETIME=[76DE5330:01C369FD]

    See the attached file for details

    (Unquote)
     
  2. 2003/08/24
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412

  3. to hide this advert.

  4. 2003/08/24
    samson

    samson Inactive Thread Starter

    Joined:
    2003/03/22
    Messages:
    67
    Likes Received:
    0
    Ah. I had seen that thread before but didn't recognize that it applied. I see now that it does. Thanks.

    14 more this morning!
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.