Weird

Public Archives
#1

I got this with Postmaster in the From line and Subject = Message Returned
to Mailer

I Don’t see anything in my sent file addressed to markus.lauscher@web.de
what is going on here?

Return-Path: <maximobil@wp.pl>

Received: from smtp.wp.pl ([212.77.101.161]) by mta004.verizon.net

(InterMail vM.5.01.05.33 201-253-122-126-133-20030313) with ESMTP

id <20030731131251.BPQC16654.mta004.verizon.net@smtp.wp.pl>

for <ge.stein@verizon.net>; Thu, 31 Jul 2003 08:12:51 -0500

Received: (WP-SMTPD 3618 invoked from network); 31 Jul 2003 13:12:45 -0000

Received: from vp43.neoplus.adsl.tpnet.pl (HELO bEAuB) ([80.50.135.43])

(envelope-sender <maximobil@wp.pl>)

by smtp.wp.pl (wp-smtpd) with SMTP

for <markus.lauscher@web.de>; 31 Jul 2003 13:12:45 -0000

FROM: “Postmaster” <qmailautomat@puremail.net>

TO: qmailservice recipient < >

SUBJECT: Message Returned to Mailer

X-Virus-Scanned: AVG

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary=“DFuNtdABiBGifYFq”

X-AntiVirus: skaner antywirusowy poczty Wirtualnej Polski S. A.

X-WP-ChangeAV: 1

Message-Id: <20030731131251.BPQC16654.mta004.verizon.net@smtp.wp.pl>

Date: Thu, 31 Jul 2003 08:12:51 -0500

–DFuNtdABiBGifYFq

Content-Type: text/html;

Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>

<iframe src=3D"cid:uppksvehqc" height=3D0 width=3D0></iframe>

</BODY></HTML>

–DFuNtdABiBGifYFq

Content-Type: audio/x-wav; name=“ZpPWhmncv_exe”

Content-Transfer-Encoding: base64

Content-Id: <uppksvehqc>

A

–DFuNtdABiBGifYFq

Content-type: text/plain; charset=iso-8859-2

Content-Transfer-Encoding: 8bit

Content-Disposition: attachment; filename=“antyvirinfo.txt”

UWAGA !!! Zmieniono nazwe zalacznika !

Skaner Antywirusowy poczty Wirtualnej Polski zmienil nazwe

zalacznika, ktory moze zawierac wirusa. Ostatnia kropka

w nazwie pliku zostala zamieniona na znak podkreslenia w celu

wyeliminowania automatycznego uruchomienia zawartego

wewnatrz wiadomosci zalacznika.

Warning !!! The attachment’s filename has been changed!

Anti-Virus Scanner of Wirtualna Polska mail system has changed

the name of attachment, which can contain a virus. The last dot

character in its filename has been changed to underscore, in order

to avoid automatic execution of the attachment included in the mail

message.

–DFuNtdABiBGifYFq–

–
Gary Stein
ge.stein@verizon.net

#2

Re: Weird

Gary Stein wrote:

> I got this with Postmaster in the From line and Subject = Message Returned
> to Mailer
>
> I Don’t see anything in my sent file addressed to markus.lauscher@web.de
> what is going on here?

A spammer has harvested your email address and is using it in the
“From:” field on spams sent out to other people. This particular mail
server bounced back to your address instead of searching out where it
was actually sent from.

#3

Re: Weird

“Shena Delian O’Brien” <shena@darklock.com> wrote in message
news:bgbpcu$3ms$3@www.darklock.com…
> Gary Stein wrote:
>
> > I got this with Postmaster in the From line and Subject = Message
Returned
> > to Mailer
> >
> > I Don’t see anything in my sent file addressed to markus.lauscher@web.de
> > what is going on here?
>
> A spammer has harvested your email address and is using it in the
> “From:” field on spams sent out to other people.

I hate that! I’ve been the victim of that for the past couple of weeks!

mofo spammers.

–
Rodney

#4

Re: Weird

same here…

–
Adam Gordon
SBA Design - web development and hosting


adam@sbadesign.com

“Rodney Blackwell” <rodney@webdiscuss.com> wrote in message
news:bgbpk9$45j$1@www.darklock.com…
> “Shena Delian O’Brien” <shena@darklock.com> wrote in message
> news:bgbpcu$3ms$3@www.darklock.com…
> > Gary Stein wrote:
> >[color=darkred]
> > > I got this with Postmaster in the From line and Subject = Message
> Returned
> > > to Mailer
> > >
> > > I Don’t see anything in my sent file addressed to[/color]
markus.lauscher@web.de[color=darkred]
> > > what is going on here?
> >
> > A spammer has harvested your email address and is using it in the
> > “From:” field on spams sent out to other people.
>
>
> I hate that! I’ve been the victim of that for the past couple of weeks!
>
> mofo spammers.
>
> –
> Rodney
>
>[/color]

#5

Re: Weird

Shena Delian O’Brien wrote
> Gary Stein wrote:
>
> > I got this with Postmaster in the From line and Subject = Message
Returned
> > to Mailer
> >
> > I Don’t see anything in my sent file addressed to markus.lauscher@web.de
> > what is going on here?
>
> A spammer has harvested your email address and is using it in the
> “From:” field on spams sent out to other people. This particular mail
> server bounced back to your address instead of searching out where it
> was actually sent from.

Close. In this case, it’s a virus and not a spammer that’s using Gary’s
address (probably one that selects both the “From:” address as well as the
“To:” address from files on the sender’s computer – addressbook, web cache,
etc.). It was caught and bounced by a virus scanner on a mailserver.

It is bad form for the owner of the mailserver to set the virus scanner to
send out such error messages. With most virsuses these days faking the from
address, sending out these messages just doubles the amount of junk mail the
virus generates.

#6

Re: Weird

> > I got this with Postmaster in the From line and Subject = Message
Returned
> > to Mailer
> >
> > I Don’t see anything in my sent file addressed to markus.lauscher@web.de
> > what is going on here?
>
> A spammer has harvested your email address and is using it in the
> “From:” field on spams sent out to other people. This particular mail
> server bounced back to your address instead of searching out where it
> was actually sent from.

I think this was no spamer.

It was one of this no update forever people with Outlock Express 5.
A virus on a system with this security hole had his email address some where
in the Temp internet folder or the address book and was used as the sender

–
Roland Mösl
http://www.pege.org Clear targets for a confused civilization
http://web-design-sutie.com Web Design starts at the search engine