OT: Failure Messages

In article <[email hidden]>,

Alan said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

There are viruses out there which will send themselves to
everyone in the address book of the computer they've
infected but use one of those addresses as the "from" when
they send themselves out. So this means nothing about your
machine. However, someone who has you in their address book
has the virus.

Priscilla

--
"This religion [Christianity] isn't for sissies." - my
friend Jane

"Being in the church is sometimes like doing the Bunny Hop."
- my same friend Jane

Alan...

I can't help you, I can only commiserate.

Because of my email address... I get 100's of misdirected
emails a day. But since I've been on the net almost 10
years, I put up with it, as i don't wish to change it.

Now, as for your problem, I had a few weeks that just seem
to be ending now, where I got even more, all "failure to
deliver" for messages I didn't send.

I think it's a virus out there. Not one that I have (Mac
viruses are few and far between).

I can tell you it took a good two weeks before it ended.

Jennifer

Alan said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

Cheers, Alan, T2 d&e, Australia. Remove weight and carbs
to email.

i get about 4 of those messages a day

the virus eventually mails out to everyone in the persons
contacts thru other e-mails and the address book, then will
shut down their computer's internet access

just delete the virus's that are being sent to you

if you run mailwasher, you will see they are all 39Kb in
size.........

kate
--
Join us in the Diabetic-Talk Chatroom on UnderNet
/server irc.undernet.org --- /join #Diabetic-Talk More
info: diabetic-talk.orgdiabetic-talk.orgOpen ↗

"Alan" <[email hidden]> wrote in
message "]news:[email hidden]...

Quoted message said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

Cheers, Alan, T2 d&e, Australia. Remove weight and carbs
to email.
--
Everything in Moderation - Except Laughter.

Alan said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Prolly not a virus or worm at all. May be that yer address
was "harvested" from a newsgroup (this one?) and used as the
return on spam.

If the failure notice contains an attachment, do NOT open
the attachment.

"Alan" <[email hidden]> wrote in message
"]news:[email hidden]...

Quoted message said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

That does sound like a virus. I've been getting the Netsky
virus about 4 times a day in my inbox. Sometimes more. I
get it more times still in my spam trap. Those never make
it to my inbox.

--
Type 2 users.bestweb.net~jboveOpen ↗

"Alan" <[email hidden]> wrote in message
"]news:[email hidden]...

Quoted message said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

Cheers, Alan, T2 d&e, Australia. Remove weight and carbs
to email.
--
Everything in Moderation - Except Laughter.

G'day Alan,

Two possibilities. First - this "undelivered message" bizzo
is a popular message header where the email carries a virus.
Makes it hard to resist the urge to oepen the email to see
just what message you sent which wasn't delivered. This is
even more compelling than those "security update" messages
we are used to. Secondly, it may be that your PC does have a
virus which is causing it to send mass emails. Solution for
# 1 - don't open the email. Rather check the properties,
then delete it along with any such garbage. Solution for # 2
- make sure your virus checker updates are current; run a
virus scan (just bear in mind that if a virus checker has
infected your system, then it is possible it crippled your
virus checker, as many of them do.

I personally thing that the first is the case, and that you
can safely delete any such emails after briefly checking
their properties. Still - make sure your anti virus prog is
current and working.

Henry Australia

Alan <[email hidden]> wrote on Mon,
14 Jun 2004
09:02:31 +1000:

Quoted message said:

Hi All.

Quoted message said:

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Quoted message said:

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

Probably what is known in the trade as a "Joe job". The
spammer sends an email to a non-existent address at a real
domain, having put your address in the From: header. The
target domain then sends the failure message to you. It's
become a popular method of delivering spam. Unfortunately.

Quoted message said:

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Quoted message said:

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

Obviously, don't ever execute any program of any type
arriving in an email, unless you know why you want to. I
would recommend everybody to use an email client which is
incapable of executing any incoming script (which includes
HTML rendering) - such a client is immune to viruses.

Quoted message said:

Cheers, Alan

--
Alan Mackenzie (Munich, Germany) Email: [email hidden]; to
decode, wherever there is a repeated letter (like "aa"😉,
remove half of them (leaving, say, "a"😉.

Quoted message said:

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Netsky or similiar .... somebody you know has a bug ... this
kind of bug uses addresses it finds, and often also puts
together user names and domain names almost at random ....

Quoted message said:

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

Could be coincidence ..... this sort of thing does
happen ...

--

]- "I am a man of many parts, ]- unfortunately most of them
are no longer in stock" ]-
------------------------------------------------------------
----------
To reply by e-mail, move the Gnu from the address to the
subject line.
------------------------------------------------------------
----------

In article <[email hidden]>,

Alan said:

Hi All.

Quoted message said:

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

I get hundreds of messages about "failure to deliver" or
"not delivered because of virus" which I did not even send.
I even get spam messages supposedly from myself, often with
viruses included.

Any reasonably good hacker can forge a sender's address.
--
This address is for information only. I do not claim that
these views are those of the Statistics Department or of
Purdue University. Herman Rubin, Department of Statistics,
Purdue University [email hidden] Phone: (765)494-
6054 FAX: (765)494-0558

No dear, it was not your negative comments ... I am getting
these crazy things from various sources and they are VERY
annoyng. Been gettng them for about 2 months. Rainbow

"Alan" <[email hidden]> wrote in message
"]news:[email hidden]...

Quoted message said:

Hi All.

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

Virused to death Al. Just delete 'em and don't even TRY
going to the web address that's usually included.

Quoted message said:

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may be
coincidental, but this started immediately after my
negative comments on a new poster here.

I doubt it's got anything to do with that. I've been getting
them for months and you KNOW how laid back and calm *I* am
:-)) Just delete 'em and then empty the delete folder
(assuming you're using OE)

Beav

Priscilla Ballou said:

In article <[email hidden]>,

Alan said:

Hi All.

I'm looking for a little advice on a new problem,
possibly a virus. Yesterday I received two "failure to
deliver" messages for messages I didn't send.

Today I got 40. They all related to messages I had
apparently sent to various addresses ending .ca. I can't
supply other details because I promptly deleted all of
them. I checked my OE "sent" folder and there was nothing
unusual there.

I use Free AVG - which was run yesterday with the latest
download, also Adaware 6, and the latest free ZoneAlarm
with Mailsafe on. My isp also has spamblockers in use.

Can anyone with computer savvy offer any advice? It may
be coincidental, but this started immediately after my
negative comments on a new poster here.

There are viruses out there which will send themselves to
everyone in the address book of the computer they've
infected but use one of those addresses as the "from" when
they send themselves out. So this means nothing about your
machine. However, someone who has you in their address book
has the virus.

Priscilla

Thanks Priscilla.

In that case anyone reading this who has ever emailed me
direct, particularly if they have lots of .ca addresses in
their address book, would be wise to do a virus check.

I'll get a bit more detail before I delete if another
batch arrives.

Cheers, Alan, T2 d&e, Australia. Remove weight and
carbs to email.
--
Everything in Moderation - Except Laughter.

Tiger Lily said:

i get about 4 of those messages a day

the virus eventually mails out to everyone in the persons
contacts thru other e-mails and the address book, then will
shut down their computer's internet access

just delete the virus's that are being sent to you

if you run mailwasher, you will see they are all 39Kb in
size.........

kate

Thanks Kate. Cheers, Alan
--

mike gray said:

Alan said:

Hi All.

I'm looking for a little advice on a new problem,
possibly a virus. Yesterday I received two "failure to
deliver" messages for messages I didn't send.

Prolly not a virus or worm at all. May be that yer address
was "harvested" from a newsgroup (this one?) and used as
the return on spam.

If the failure notice contains an attachment, do NOT open
the attachment.

That's why I instantly deleted all of them - they all had
attachments.

Cheers, Alan, T2 d&e, Australia. Remove weight and
carbs to email.
--
Everything in Moderation - Except Laughter.

Quoted message said:

Prolly not a virus or worm at all. May be that yer address
was "harvested" from a newsgroup (this one?) and used as
the return on spam.

Actually no, it's highly likely to be a variant of Netsky
or similiar
- and the really cruddy part is that some of the new viri
also "phone home" and pass on the addresses for later spam
purposes - this has happened to an address of mine just
recently - one that has *never* been seen in a public
place like a newsgroup, and was not getting any spam up to
the point that the "false" bounces were received ...

Quoted message said:

If the failure notice contains an attachment, do NOT open
the attachment.

That goes for *any* unexpected attachment ....

--

]- "I am a man of many parts, ]- unfortunately most of them
are no longer in stock" ]-
------------------------------------------------------------
----------
To reply by e-mail, move the Gnu from the address to the
subject line.
------------------------------------------------------------
----------

hemyd said:

Solution for # 2 - make sure your virus checker updates
are current; run a virus scan (just bear in mind that
if a virus checker has infected your system, then it is
possible it crippled your virus checker, as many of
them do.

Hi Henry,

That raises an interesting point. I can see that Norton AV
does a complete check of all drives here each morning and
checks all incoming material during the day. It has not
found a virus as yet.

However, how can I tell if it is crippled or not?

A gross failure of the internet is a system to control the
falsification of data. A weak hacker has plenty of software
to do a variety of things. We are seeing more falsification
of internet posting..

In the past when I have posted a negative response to spam.
I have many more attempts to penetrate my system.

My Norton system was disabled once. I do not depend on one
item for protection. I do not use my business system for
accessing "these groups". Many businesses are suffering from
some [censored] hacker.

I hear that the "business people are unhappy and the
Microsoft people are busy. Legislation is pending.

More of these people will find the authorities knocking on
their door. Has happened to some virus writers.

National security has made the control of the internet a
real issue. I would never post something that could get
me in trouble. Big Brother us watching and they keep
record forever.

Microsoft claims the SP2 will address some of the problems.

But there is no solution for defective brains. Abnormal
behavior has been with us forever. We periodically realize
it is out of hand and must be controlled. We do not want it
but it is necessary Guy

On 14 Jun 2004 10:01:12 -0500, [email hidden]

(Herman Rubin) said:

In article <[email hidden]>,

Alan said:

Hi All.

Quoted message said:

I'm looking for a little advice on a new problem, possibly
a virus. Yesterday I received two "failure to deliver"
messages for messages I didn't send.

I get hundreds of messages about "failure to deliver" or
"not delivered because of virus" which I did not even send.
I even get spam messages supposedly from myself, often with
viruses included.

Any reasonably good hacker can forge a sender's address.

Beav said:

I doubt it's got anything to do with that. I've been

getting them for

Quoted message said:

months and you KNOW how laid back and calm *I* am :-))

Just delete

Quoted message said:

'em and then empty the delete folder (assuming you're

using OE)

Just hold down the shift key as you delete, it is a
permanent delete, so be sure that's what you want 😉

Alan <[email hidden]> wrote in
misc.health.diabetes:

Quoted message said:

In that case anyone reading this who has ever emailed me
direct, particularly if they have lots of .ca addresses in
their address book, would be wise to do a virus check.

Most worms are not restricted to e-mail address books
anymore: they harvest any address they can get, say from
your Internet cache files as well. Web pages with e-mail
addresses in the code, Usenet messages stored on your PC.

You could use a text based e-mail program (to not trigger
the payload, if any, and wipe them from the server without
slurping them in), look at the headers of a few of them, and
determine which IP-address they originated from. Mostly the
worm used an infected account, and spoofed your address, and
while the (mostly unknowing) culprit might be in Romania or
the Fiji Islands, the virus laden mails bounce and are
returned to you.

A sidenote: you could not only try to find out from what IP-
address the junk came, and send a warning to the provider in
question (with the headers, including IP -address en time
sent) to ask to send a warning to its subscriber do do a
virus check, but also send a complaint to those annoying ISP
twits sending bounce messages. You should tell them not to
overload the network with delivery messages for spoofed
messages, but wipe them without further notice. But, that's
just my opinion..... 😉

Simple text based email app:
- Quickdelete (yeti-soft.deindex.htmlOpen ↗)
Simple trace program with WHOIS functionality
- Sam Spade (samspade.orgsamspade.orgOpen ↗)

--
CeeBee

EMH Mark I: "Stop breathing down my neck." EMH Mark II: "My
breath is merely a simulation." EMH Mark I: "So is my neck.
Stop it anyway."