has my system been compromised?

SI - e1-p2hc-8m8q-79xs at emailias.com
Tue Sep 12 21:32:58 MST 2006


I agree.  I had an email that had the same thing.  Even got some people
emailing me telling me to stop spamming them.  :)  Really big pain in
the neck for a long time though.

Kurt Granroth (plug-discuss at granroth.org) (Emailias: REPLY-MASKED) wrote:
> Nah, probably not.  This is almost certainly a "Joe Job" SPAM 
> (http://en.wikipedia.org/wiki/Joe_job).  I get maybe 20 or 30 bounces every 
> day for one particular email address that's publicly known.  Spammers just 
> use that address as the "From" line and I get the bounces.
>
> On Tuesday 12 September 2006 21:08, Michael wrote:
>   
>> I just got an email from a spam blocker. I think my system has been
>> compromised. What should I do to fix this?
>>
>> *email*
>>
>> Return-Path: <>
>> Received: from eastrmimpi02.cox.net ([68.1.16.118]) by eastrmmtai08.cox.net
>>           (InterMail vM.6.01.06.01 201-2131-130-101-20060113) with ESMTP
>>           id
>> <20060912222614.PJQ5830.eastrmmtai08.cox.net at eastrmimpi02.cox.net>
>>           for <bmike101 at cox.net>; Tue, 12 Sep 2006 18:26:14 -0400
>> Received: from barracuda.smwc.edu ([139.102.202.200])
>>         by eastrmimpi02.cox.net with IMP
>>         id MaM81V00A4Kvs8j0000000
>>         Tue, 12 Sep 2006 18:21:11 -0400
>> MIME-Version: 1.0
>> From: Barracuda Spam Firewall <postmaster at smwc.edu>
>> Message-Id: ulEBk144UO36q.pCiV4rptaEpII at cox.net
>> Subject: **Message you sent blocked by our bulk email filter**
>> Content-Type: multipart/report;
>>   report-type=delivery-status;
>>   charset=utf-8;
>>   boundary="----------=_1158099970-14712-63"
>> To: <bmike101 at cox.net>
>> Date: Tue, 12 Sep 2006 18:26:10 -0400 (EDT)
>> Message-Id:
>> <20060912222614.PJQ5830.eastrmmtai08.cox.net at eastrmimpi02.cox.net> Status:
>> R
>> X-Status: N
>> X-KMail-EncryptionState:  
>> X-KMail-SignatureState:  
>>
>>
>> Your message to: bmichel at smwc.edu
>> was blocked by our Spam Firewall. The email you sent with the following
>> subject has NOT BEEN DELIVERED:
>>
>> Subject: YOUR MONEY!!! zCzwn1SQSo75n9K1odm82gAt3FSyPNrgE7QHGwF
>>
>>
>> Delivery error report
>>
>> Received: from barracuda.smwc.edu (unknown [88.240.179.234])
>>         by barracuda.smwc.edu (Spam Firewall) with SMTP id 4B746202A1C9
>>         for <bmichel at smwc.edu>; Tue, 12 Sep 2006 18:26:07 -0400 (EDT)
>> Reply-To: "bmike101 at cox.net" <bmike101 at cox.net>
>> From: "bmike101 at cox.net" <bmike101 at cox.net>
>> Date: Thu, 29 Dec 1997 01:09:28 -0300
>> Message-ID: ulEBk144UO36q.pCiV4rptaEpII at cox.net
>> To: bmichel at smwc.edu
>> Content-type: text/html;
>>  Charset=Windows-1251
>> Subject: YOUR MONEY!!! zCzwn1SQSo75n9K1odm82gAt3FSyPNrgE7QHGwF
>> MIME-Version: 1.0
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>> To subscribe, unsubscribe, or to change  you mail settings:
>> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>>     
> |||
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>   


-=-=-
... AD&D Mistake #56: Keeping a vial of poison and food in the same bag
* TagZilla 0.059 * http://tagzilla.mozdev.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.plug.phoenix.az.us/pipermail/plug-discuss/attachments/20060912/3cf47016/attachment-0001.htm


More information about the PLUG-discuss mailing list