PDA

View Full Version : Computer people, I need help (I think)



Lenny
02-12-2004, 08:27 PM
I have been coming home every day for about 10 days to find about a dozen or more emails that were undeliverable, in theory sent by me, while I was at work. BUT, the sender addresses are not me either. I am at highlnd@telus.net .... I have XP, the latest patches, no kids on this one, Have Norton 2004 and run live update continuously, have all MS patches to date, and my service provider runs a firewall and I have "Spam Blocker" (powerful) enabled. This just started happening about 1 1/2 - 2 weeks ago. Here is a typical error message... (denneen@telus.net is an alias for my live-in girlfriend, but defaults to my highlnd account above once routed... To boot, NONE of the people I "theoretically send to" are in my address book and my address book contains only about a dozen contacts, most of them here ???


Message from rocketmail.com.
Unable to deliver message to the following address(es).

<0000483955@rocketmail.com>:
This user doesn't have a rocketmail.com account (0000483955@rocketmail.com) [0]

<hollyfl@rocketmail.com>:
This user doesn't have a rocketmail.com account (hollyfl@rocketmail.com) [0]

<kcarlin263@rocketmail.com>:
This user doesn't have a rocketmail.com account (kcarlin263@rocketmail.com) [0]

<orly3@rocketmail.com>:
This user doesn't have a rocketmail.com account (orly3@rocketmail.com) [0]

<thornton97@rocketmail.com>:
This user doesn't have a rocketmail.com account (thornton97@rocketmail.com) [0]

<thornton9@rocketmail.com>:
This user doesn't have a rocketmail.com account (thornton9@rocketmail.com) [0]

--- Original message follows.

X-YahooFilteredBulk: 67.84.122.48
Return-Path: <deneen@telus.net>
Received: from 67.84.122.48 (HELO ool-43547a30.dyn.optonline.net) (67.84.122.48)
by mta119.mail.sc5.yahoo.com with SMTP; Thu, 12 Feb 2004 18:20:27 -0800
Received: from 158.94.116.5 by 67.84.122.48; Thu, 12 Feb 2004 11:16:24 -0300
Message-ID: <KRLAJRMRIPLAWBNTRIKVSLU@attbi.com>
From: "roma mobley" <ss@attbi.com>
Reply-To: "roma mobley" <vk3990@attbi.com>
To: orly3@rocketmail.com
Cc: thornton97@rocketmail.com, thornton9@rocketmail.com, 0000483955@rocketmail.com, kcarlin263@rocketmail.com, hollyfl@rocketmail.com
Subject: FWD: All Pills Stocked. +Valium+ ( |XANAX| \ v|@gra + A.t|v@n ~ |S|oma ; Pn+ermin rqOT1
Date: Thu, 12 Feb 2004 16:19:24 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--9441377519666020564"
X-Mailer: Experian InformMessaging Build v1.65 (Using MIME::Lite v2.117 )
X-Originating-IP: 64.157.4.78

----9441377519666020564
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html public "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www=
w3.org/TR/html4/loose.dtd">
<HTML>
<HEAD>
<TITLE>All Your Meds Here</TITLE>
<META http-equiv=3D"Content-type" content=3D"text/html; charset=3DISO-8859=
-1">
<STYLE type=3D"text/css">
<!-- .style5 {font-family: Arial, Helvetica, sans-serif; font-size: 14px; =
}
<!-- .style8 {font-family: Arial, Helvetica, sans-serif; font-size: 8px; }=

--></STYLE>
</HEAD>
<BODY>
<table width=3D"500" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tr>
<td>
<div class=3D"style5">
We supply high quality medications by mail order at very competitive pr=
ices and provide a professional, convenient and affordable means of purcha=
sing your prescription medicines online
<p>
No prescription for: =3D v|@GRa . +V+alium ? x@nax # So.m.a & Pntermi.n=
# At|.v@n
<p>
Plus: Acyc|.0vir, Pr0z@:c, P@.xil, Busp@.r, Ad|p:ex, I`0nam|n, M3rid'ia=
, X3nic:a|, Am:bi3n, S'0naTa, Fl`3xeril, Ce`|3brex, F:i0ric3t, Tram@.do|, =
U|`tr@m, L3v|'tra, Pr'0p3cia
<p>
No complicated formalities of any kind.
<p>
<a href=3D"http://www.preferredmeds.biz">Enjoy deep discount meds here.=
</a>
</div>
</td>
</tr>
</table>
</zeroes></dumpty></atrocity></d'art></scan></korea>
</spindle></angelfish></incorrect></cue></camera></surge>
</violate></armament></broadloom></astarte></baffin></extensor>
</BODY>
</HTML>

----9441377519666020564--

*** MESSAGE TRUNCATED ***

David O
02-13-2004, 05:34 AM
Lenny
Go to this page on Symantec (Norton Anti Virus) and follow all the instructions and see if it helps. If it doesn't then use search on that page and type in undeliverable and start reading the results of the search until you find one that works.

Norton Anti Virus (http://service1.symantec.com/SUPPORT/nav.nsf/8d071816eedd7cac88256c0e005a96e5/49ed2750c625544088256bb3007baec0?OpenDocument&src=bar_sch_nam)

DonziMon
02-13-2004, 04:28 PM
Spoofs can be like a virus sometimes, as in Denial of Service. It looks like somebody’s mail server is sending out warnings. But to be on the safe side I'd go to Symantec's website like David O said, download their MyDoom utility and run in while in safe mode.

Lenny
02-13-2004, 05:59 PM
GOOD info. I ran it and it didn't find anything (fxmydoom). Interesting enough, I never knew to TURN off system restore prior to starting this scan or any full scale scan. The replication feature of the virus through system restore is quite clever. Anyways, thanx for the info and I will have to put up with all this crap until whomever has it cleans their 'puter.

I wonder what is "next" in the way of infections now that Microsoft has lost some source-code to the Internet ?...

MOP
02-13-2004, 08:07 PM
Lenny during the time I went away on vacation I got 458 E-mails only 21 were Ok the rest were as you discribed. I get maybe 25-30 a day for weeks and weeks, my machine is clean run virus software on start up daily and never open attachments. I called my server and it is exactly as stated above, one of you buds has got the bug and is mailing you AD all over heck then it gets bounced back to you AD. There is quite a few bad bugs out there but if you keep well updated and leave attachments closed you should not have a porblem.

Phil

Hanker
02-13-2004, 10:08 PM
I have been dealing with a lot lately. I am in the 'puter biz.

One thing that might help, is to check your mailserver setup to see if you have a "catch all" that forwards anything adressed to your server to your email. i.e. whatever@telus.net, whatever1@telus.net, whatever123@telus.net all get forwarded to your address. I don't know your situation - it may fit, it may not.

Another thing that I have found helps, if you are using Outlook, is to turn off "send immediately when connected". Go to tools|options, and select the "mail setup" tab. Deselect the "send immediately when connected". Click on the send/receive button next to it, and deselect "Schedule an automatic send/receive every X minutes". Click close, then OK.

It's a bit of a pain, but it has the benefit that you have to manually send all emails - has given me time to think if I should really send it. Believe it or not it will cut down on your problem.

Another thing everybody should do, run a anti-adware/malware program. Don't have time to splain. Go to www.lavasoft.de I have found their software to be one of the best. It's free for personal use, and will resolve 98% of your Popup problems, along with many other problems that seems unrelated. Trust me!

Good luck