0

I just got a email from Mail Delivery Subsystem it came with a attachment,
I did not open the attachment, I sent no emails to those addresses
this is what it said

The original message was received at Tue, 17 Feb 2004 06:01:18 -0500 (EST)
from mta12.srv.hcvlny.cv.net [167.206.5.81]


*** ATTENTION ***

Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".

The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".

The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.

Please direct further questions regarding this message to your e-mail
administrator.

--AOL Postmaster

----- The following addresses had permanent fatal errors -----
<chstexas@aol.com>
<chstf1@aol.com>
<chstfa@aol.com>
<chstfan@aol.com>
<chstfem@aol.com>

----- Transcript of session follows -----
... while talking to air-yh01.mail.aol.com.:
>>> RCPT To:<chstfem@aol.com>
<<< 550 MAILBOX NOT FOUND
550 <chstfem@aol.com>... User unknown
>>> RCPT To:<chstfan@aol.com>
<<< 550 MAILBOX NOT FOUND
550 <chstfan@aol.com>... User unknown
>>> RCPT To:<chstfa@aol.com>
<<< 550 MAILBOX NOT FOUND
550 <chstfa@aol.com>... User unknown
>>> RCPT To:<chstf1@aol.com>
<<< 550 MAILBOX NOT FOUND
550 <chstf1@aol.com>... User unknown
>>> RCPT To:<chstexas@aol.com>
<<< 550 MAILBOX NOT FOUND
550 <chstexas@aol.com>... User unknown

6
Contributors
7
Replies
8
Views
13 Years
Discussion Span
Last Post by caperjack
0

Hey,
sounds like a virus to me, but dont worry its more than likely not on your system. the virus has infected someones system out there on the net, its sending email to whoever its feels like and forgeing your address as the sender, that way you'll get all the bounce back notes (as you already have) and it can be clear to continue sending without the system owner being alearted.

if you need a virus scanner then open up google.com and type in AVG, they do free anti virus software, and it rocks!

l8r
spikes

0

I just got a email from Mail Delivery Subsystem it came with a attachment,
I did not open the attachment, I sent no emails to those addresses
this is what it said...

<snip>
----- The following addresses had permanent fatal errors -----
<chstexas@aol.com>
<chstf1@aol.com>
<chstfa@aol.com>
<chstfan@aol.com>
<chstfem@aol.com>
</snip>

Actually, I'm a little worried by this pattern -- the occasional spam-bounce is to be expected, but this goes beyond that. If you are on broadband, it is possible that your machine is being used as a zombie to send out spam. About 50% of the spam I now get on my spamtrap email address is from hijacked proxies. Between SoBig and MyDoom/Novarg, this is a big problem. If you are on broadband, I would recommend that you download-and-run HijackThis from Caperjack's signature or my Malware, virus, and startup information and tools page.

0

Sounds like a trojan to me, run msconfig from the rum prompt and look at whats running at startup!

0

First please get Spybot S&D to clear out most of the spyware.


Fix everything SpybotSD labels in red.


How to download and use hijackthis .
http://www.netstar.me.uk/hjt/hjt.html

Then after reboot:
Download 'Hijack This!'. http://www.spywareinfo.com/~merijn/files/HijackThis.exe
Unzip to a permanent folder, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, load it in Notepad, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.
then post the log here

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.