Version: 2008
  • On MovieTome: The 10 worst movies of 2009 so far!
Advanced Search
advertisement
advertisement
Click Here

Forum display:

Spyware, viruses, & security : unauthorized email being sent from my account?

by mkaresh - 1/26/07 12:28 PM
advertisement
Post 1 of 4

unauthorized email being sent from my account?

by mkaresh - 1/26/07 12:28 PM

I received this email in my yahoo account (from "Mail Delivery System").

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es)
failed:

bookkeeping@yandex.ru
(generated from extravagantlydefaulted@accaglobal.ru)
SMTP error from remote mail server after RCPT
TO:<bookkeeping@yandex.ru>:
host mx1.yandex.ru [213.180.223.89]: 550 5.1.1
<bookkeeping@yandex.ru> user unknown

------ This is a copy of the message's headers. ------

Return-path: <myemailaddy@yahoo.com>
Received: from [203.109.99.228] (helo=accaglobal.ru)
by m1.dnsix.com with esmtp (Exim 4.63)
(envelope-from <myemailaddy@yahoo.com>)
id 1HAPqw-000461-1z
for extravagantlydefaulted@accaglobal.ru; Fri, 26 Jan 2007 04:06:50
-0800
From: myemailaddy@yahoo.com
To: extravagantlydefaulted@accaglobal.ru
Subject: Re: File
Date: Fri, 26 Jan 2007 17:36:45 +0530
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal

I never created an email like this. What does this mean? How or why would email be generated from my yahoo account & going to some other country? (that's not my actual addy above- I overtyped, btw) This is the second notice like this that I have received this week.

If I should look somewhere else for help on this, please let me know.
Thanks!

Post 2 of 4

It is a scam, Just delete things like that

by roddy32 Moderator - 1/26/07 3:04 PM In reply to: unauthorized email being sent from my account? by mkaresh

without opening them.

Post 3 of 4

Unauthorized e-mail being sent from my account

by kwpackers - 11/19/09 10:41 PM In reply to: It is a scam, Just delete things like that by roddy32 Moderator

I keep getting messages:


Read MAILER-DAEMON@n19.bullet.mail.mud.yahoo.com failure notice 3:42 PM 5KB
Read MAILER-DAEMON@n17.bullet.mail.mud.yahoo.com failure notice 3:42 PM 5KB

Example of content:

Previous message | Go to Next message | Back to MessagesMark as Unread | Print ReplyReply AllMove...InboxAdvanceAmeriCreditAmFamBankBrianCapitalOneCarInsuranceCingularCoxCredit OneHoldHome SearchI-PassInsuranceInveissJob SearchMortgageOPPDPaymentsSallieMaeunemploymentVonage
Flag this messagefailure noticeThursday, November 19, 2009 3:42 PM
From: "MAILER-DAEMON@n19.bullet.mail.mud.yahoo.com" <MAILER-DAEMON@n19.bullet.mail.mud.yahoo.com>Add sender to ContactsTo: kennethmarcuswilliams@yahoo.comSorry, we were unable to deliver your message to the following address.

<love452001826@yhaoo.cn>:
Mail server for "yhaoo.cn" unreachable for too long

--- Below this line is a copy of the message.

Received: from [68.142.194.244] by n19.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2009 21:41:17 -0000
Received: from [68.142.201.253] by t2.bullet.mud.yahoo.com with NNFMP; 17 Nov 2009 21:41:17 -0000
Received: from [127.0.0.1] by omp414.mail.mud.yahoo.com with NNFMP; 17 Nov 2009 21:41:17 -0000
X-Yahoo-Newman-Id: 348471.53687.bm@omp414.mail.mud.yahoo.com
Received: (qmail 43888 invoked from network); 17 Nov 2009 21:41:16 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:From:Subject:To:Content-Type:Date;
b=dmVxWWjnrJb7Y+wMp2a6BrEzdMMp47JROnturqu4zu3ITqPxTRPs5PflNe9zJtYS6vIMLlTlsxoVlhj8cQOu85pWc+/KQtI5Hr7U/GlLH/Dl+D9jBlNoRoH7cdBofkUZr7VNQ1joxJfwI5dXlyPPMWO/r+qO8H0Oxdirqmo8m+g= ;
Message-ID: <840323.43087.qm@smtp116.plus.mail.sp1.yahoo.com>
Received: from (KennethMarcusWilliams@116.7.8.253 with login)
by smtp116.plus.mail.sp1.yahoo.com with SMTP; 17 Nov 2009 13:41:15 -0800 PST
X-Yahoo-SMTP: EFTmIbmswBDaZEmxp3uen6uy74.yoKuzT.g0IlSHXA.xMw--
X-YMail-OSG: TJeVW5IVM1k_1WRE.8kgi1Vn0fAltc4qDj3hS_dfARQsEhMdvveDcaZyM6xhrRIGFJSsOxF._x2VjwJTyrgeiGq7pJAs.9qAfCnQ9oNKPfKduIfLwlVpQAm10jCWKLv.rR6qzaSPfOnEO5ugHyXo99pJWdg6tOwfQnMY3Ct4MoxaDb._u9azv.s47Y6EUAQ9EtOU0cAXdID613g1XLsVfnw.c8sQiXkMQqDZ6z8HAZfHOl2Ho7dwvraHO pBHNqBk6PegpcsMabJ4jho5m9nm.qJpyRQFnwYtiLu9PGnzc8NdFKKR70rZZjOGhZQCXmpXkM6JkZQr
X-Yahoo-Newman-Property: ymail-3
From: "KennethMarcusWilliams" <KennethMarcusWilliams@yahoo.com>
Subject: =?GB2312?B?Li4utPrA7brP1/chLi4u?=
To: sz2010sz@163.com, love365today@tom.com, love366days@126.com,
love369@163.com, love3girl@163.com, love40461263@126.com,
love452001826@yhaoo.cn, love4freedom2003@yahoo.com
Content-Type: text/html
Date: Wed, 18 Nov 2009 05:41:19 +0800

<SMALL style="DISPLAY: none">&#35793;</SMALL><FONT color=#000000 size="1">&#21512;&#20316;&#20195;&#29702;!</FONT><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=gb2312" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18812"></HEAD>
<BODY>
<P>********************************************</P>
<P>&#24744;&#22909;&#65306;&#20026;&#20943;&#36731;&#24191;&#22823;&#20844;&#21496;&#36130;&#21153;&#30340;&#31246;&#25910;&#65292;&#25105;&#20844;&#21496;&#29616; &#26377;&#20840;&#22269;&#65288;&#21830;&#21697;&#12289;&#26381;&#21153;&#12289;&#36816;&#36755;&#12289;&#24191;&#21578;&#12289;&#24314;&#31569;&#12289;&#31246;&#2115 3;&#20195;&#24320;&#12289;&#22320;&#31246;&#31561;&#65289;&#31080;&#25454;,&#28857;&#25968;&#20248;&#24800;;!!!</P>
<P>&nbsp;</P>
<P>&nbsp;&#37073;&#37325;&#25215;&#35834;&#65306;&#25152;&#26377;&#31080;&#25454;&#21487;&#20197;&#19978;&#32593;&#26597;&#35810;&#25110;&#21040;&#31246;&#21153;&# 38;#23616;&#39564;&#35777;!&#37492;&#23450;&#30495;&#20551;&#21518;&#20184;&#27454;&#12290;</P>
<P>&nbsp;</P>
<P>&#33509;&#24744;&#26377;&#36825;&#26041;&#38754;&#19994;&#21153;&#21512;&#20316; &#21672;&#35810;&#30005;&#35805;&#65306;135--3069--5122 &#24352;&#23567;&#22992;! &#35874;&#35874;&#65281;&#22914;&#25200;&#28023;&#20989;</P>
<P>********************************************</P></BODY></HTML>

Usually there are several in a cluster. I do not send anything like this and it does not appear in my Sent folder.

Post 4 of 4

spam

by Jiri_AVG AVG staff - 11/20/09 2:22 AM In reply to: Unauthorized e-mail being sent from my account by kwpackers

a little bit of a technical explanation:

If this has not been sent from your account (just to be sure, you can change your Yahoo mail password), this might be caused by some spammer, who knows your e-mail address and puts it in the "Reply-To" field of the e-mail header. Then, tries to send to various addresses using bots and rogue/flawed SMTP servers and if those SMTP servers don't know the address, they simply get the response "we don't know this address" back to your e-mail account.

Not much to do to avoid this, but removing such messages if you haven't send them.

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software