has my system been compromised?

Michael bmike101 at cox.net
Tue Sep 12 22:40:57 MST 2006


Thanks for letting me know about this.

On Tuesday 12 September 2006 21:16, Kurt Granroth wrote:
> Nah, probably not.  This is almost certainly a "Joe Job" SPAM
> (http://en.wikipedia.org/wiki/Joe_job).  I get maybe 20 or 30 bounces every
> day for one particular email address that's publicly known.  Spammers just
> use that address as the "From" line and I get the bounces.
>
> On Tuesday 12 September 2006 21:08, Michael wrote:
> > I just got an email from a spam blocker. I think my system has been
> > compromised. What should I do to fix this?
> >
> > *email*
> >
> > Return-Path: <>
> > Received: from eastrmimpi02.cox.net ([68.1.16.118]) by
> > eastrmmtai08.cox.net (InterMail vM.6.01.06.01 201-2131-130-101-20060113)
> > with ESMTP id
> > <20060912222614.PJQ5830.eastrmmtai08.cox.net at eastrmimpi02.cox.net>
> >           for <bmike101 at cox.net>; Tue, 12 Sep 2006 18:26:14 -0400
> > Received: from barracuda.smwc.edu ([139.102.202.200])
> >         by eastrmimpi02.cox.net with IMP
> >         id MaM81V00A4Kvs8j0000000
> >         Tue, 12 Sep 2006 18:21:11 -0400
> > MIME-Version: 1.0
> > From: Barracuda Spam Firewall <postmaster at smwc.edu>
> > Message-Id: ulEBk144UO36q.pCiV4rptaEpII at cox.net
> > Subject: **Message you sent blocked by our bulk email filter**
> > Content-Type: multipart/report;
> >   report-type=delivery-status;
> >   charset=utf-8;
> >   boundary="----------=_1158099970-14712-63"
> > To: <bmike101 at cox.net>
> > Date: Tue, 12 Sep 2006 18:26:10 -0400 (EDT)
> > Message-Id:
> > <20060912222614.PJQ5830.eastrmmtai08.cox.net at eastrmimpi02.cox.net>
> > Status: R
> > X-Status: N
> > X-KMail-EncryptionState:  
> > X-KMail-SignatureState:  
> >
> >
> > Your message to: bmichel at smwc.edu
> > was blocked by our Spam Firewall. The email you sent with the following
> > subject has NOT BEEN DELIVERED:
> >
> > Subject: YOUR MONEY!!! zCzwn1SQSo75n9K1odm82gAt3FSyPNrgE7QHGwF
> >
> >
> > Delivery error report
> >
> > Received: from barracuda.smwc.edu (unknown [88.240.179.234])
> >         by barracuda.smwc.edu (Spam Firewall) with SMTP id 4B746202A1C9
> >         for <bmichel at smwc.edu>; Tue, 12 Sep 2006 18:26:07 -0400 (EDT)
> > Reply-To: "bmike101 at cox.net" <bmike101 at cox.net>
> > From: "bmike101 at cox.net" <bmike101 at cox.net>
> > Date: Thu, 29 Dec 1997 01:09:28 -0300
> > Message-ID: ulEBk144UO36q.pCiV4rptaEpII at cox.net
> > To: bmichel at smwc.edu
> > Content-type: text/html;
> >  Charset=Windows-1251
> > Subject: YOUR MONEY!!! zCzwn1SQSo75n9K1odm82gAt3FSyPNrgE7QHGwF
> > MIME-Version: 1.0
> >
> > ---------------------------------------------------
> > PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change  you mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



More information about the PLUG-discuss mailing list