Getting failure reports for junk mail that I didn't send.....

chambece · 03-02-2006, 09:55

Hi,

This morning I have awoke to find 4 email delivery failure reports for spam.

As far as I am aware, these have not come from my PC, and I've ran a virus scan that shows all clear.

The spam seems to be OEM software

They do vary, can anyone shed any light on them?
The last one has a different return to address set....

Thanks in advance

Craig

Code:

Hi. This is the qmail-send program at svln02.cwaynet.com.br.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<eldsteel@weldsteel.com.br>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <CathyBernal@MYDOMAIN.com>
Received: (qmail 30259 invoked from network); 3 Feb 2006 08:37:34 -0000
Received: from unknown (HELO 200.220.147.3) (221.227.80.39)
  by 0 with SMTP; 3 Feb 2006 08:37:12 -0000
Received-SPF: none (0: domain of CathyBernal@MYDOMAIN.com does not designate permitted sender hosts)
Received: from 1jD@localhost by taO.int (8.11.6/8.11.6); Fri, 03 Feb 2006 15:11:23 +0600
Message-ID: <3LvcyBhVMW66upQ4LdoYaA.mpuv9AvIjQ3hH@flairtrading.com>
From: "Harpo Marx" <SarahFuller@flairtrading.com>
Reply-To: "Harpo Marx" <SarahFuller@flairtrading.com>
To: eldsteel@weldsteel.com.br
Subject: Windows Acrobat Pro 7.0 $69.95 Systemworks at Carolyn's softco
Date: Fri, 03 Feb 2006 07:14:23 -0200
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.2730.2
X-Sender: SarahFuller@flairtrading.com
Content-Type: multipart/mixed;  boundary="--haw77Im2PiaRuJH"

InxEbLjMfuvFtk3PH

and

Code:

Delivery-Date: Fri, 03 Feb 2006 10:31:19 +0100
Date: Fri, 3 Feb 2006 03:31:12 -0600
From: Mail Delivery Subsystem <MAILER-DAEMON@dweeb.bitsifter.com>
Message-Id: <200602030931.k139VCX25115@dweeb.bitsifter.com>
To: <KateBullock@MYDOMAIN.com>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="k139VCX25115.1138959072/dweeb.bitsifter.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
Envelope-To: <MY PROPER EMAIL>


The original message was received at Fri, 3 Feb 2006 03:31:05 -0600 from 
c-68-42-174-134.hsd1.mi.comcast.net [68.42.174.134]

   ----- The following addresses had permanent fatal errors ----- <souza@j-2.com>
    (reason: 550 Host unknown)

   ----- Transcript of session follows ----- 550 5.1.2 <souza@j-2.com>... 
Host unknown (Name server: 33-msejcb-1.org: host not found)

And from / To

Code:

Return-Path: <>
Delivery-Date: Fri, 03 Feb 2006 09:56:38 +0100
Received: from [83.217.107.227] (helo=hyperion.asite.com)
	by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis),
	id 0MKpV6-1F4wkA0VFq-000223 for RoxanneCordova@MYDOMIAN.com; Fri, 03 Feb 2006 09:56:38 +0100
From: postmaster@asite.com
To: RoxanneCordova@MYDOMAIN.com
Date: Fri, 3 Feb 2006 08:56:37 +0000
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="9B095B5ADSN=_01C61BAE388BF596000EE0D4hyperion.asite.c"
X-DSNContext: 335a7efd - 4523 - 00000001 - 80040546
Message-ID: <gAncJT6ZK00053e45@hyperion.asite.com>
Subject: Delivery Status Notification (Failure)
Envelope-To: <MY PROPER ADDRESS>

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

       o23b17@asite.com
       mlisenor@asite.com
       smilnes@asite.com

And finally

Code:

Return-Path: <REG02@ipsco.com>
Delivery-Date: Fri, 03 Feb 2006 08:46:08 +0100
Received: from [198.169.152.9] (helo=reg02.ipsco.com)
	by mx.kundenserver.de (node=mxeu4) with ESMTP (Nemesis),
	id 0MKqlY-1F4vdw08Lw-0000I8 for JuliaHurley@MYDOMAIN.com; Fri, 03 Feb 2006 08:46:08 +0100
Date: Fri, 03 Feb 2006 01:46:09 -0600
From: REG02@ipsco.com
To: JuliaHurley@MYDOMAIN.com
Subject: Returned mail
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status; boundary="==M2006020301460913828"
Message-ID: <0MKqlY-1F4vdw08Lw-0000I8@mx.kundenserver.de>
Envelope-To: <MY EMAIL>

Paul · 03-02-2006, 09:59

Check your system for spyware, malware, trojan and virus infiltration just to be sure but sometimes these emails are nothing more than the result of someone elses system being compromised.

**Chris** · 03-02-2006, 10:01

The spammer or infected machine that is sending these emails out is using your email as the return address. I had a spate of these delivery failures a couple of years ago. It's likely someone you know, who has your email address in their system, has been compromised by a trojan or some other malware, giving your email addy to the spammer. There's very little you can do about it unfortunatelty. Actually, there is absolutely nothing you can do about it.

chambece · 03-02-2006, 10:13

It's not actually my email address - just various stuff sent to unknown address at my domain.

But as I though - not much can be done my the sound of it....

**Chris** · 03-02-2006, 10:17

Quote:

Originally Posted by chambece

It's not actually my email address - just various stuff sent to unknown address at my domain.

But as I though - not much can be done my the sound of it....

Depending how your email handling is set up, it's entirely possible for you to get all mail sent to any address at a domain you own, whether you have specifically created a mailbox for it or not.