has my system been compromised?

Kurt Granroth plug-discuss at granroth.org
Tue Sep 12 21:16:09 MST 2006


Nah, probably not.  This is almost certainly a "Joe Job" SPAM 
(http://en.wikipedia.org/wiki/Joe_job).  I get maybe 20 or 30 bounces every 
day for one particular email address that's publicly known.  Spammers just 
use that address as the "From" line and I get the bounces.

On Tuesday 12 September 2006 21:08, Michael wrote:
> I just got an email from a spam blocker. I think my system has been
> compromised. What should I do to fix this?
>
> *email*
>
> Return-Path: <>
> Received: from eastrmimpi02.cox.net ([68.1.16.118]) by eastrmmtai08.cox.net
>           (InterMail vM.6.01.06.01 201-2131-130-101-20060113) with ESMTP
>           id
> <20060912222614.PJQ5830.eastrmmtai08.cox.net at eastrmimpi02.cox.net>
>           for <bmike101 at cox.net>; Tue, 12 Sep 2006 18:26:14 -0400
> Received: from barracuda.smwc.edu ([139.102.202.200])
>         by eastrmimpi02.cox.net with IMP
>         id MaM81V00A4Kvs8j0000000
>         Tue, 12 Sep 2006 18:21:11 -0400
> MIME-Version: 1.0
> From: Barracuda Spam Firewall <postmaster at smwc.edu>
> Message-Id: ulEBk144UO36q.pCiV4rptaEpII at cox.net
> Subject: **Message you sent blocked by our bulk email filter**
> Content-Type: multipart/report;
>   report-type=delivery-status;
>   charset=utf-8;
>   boundary="----------=_1158099970-14712-63"
> To: <bmike101 at cox.net>
> Date: Tue, 12 Sep 2006 18:26:10 -0400 (EDT)
> Message-Id:
> <20060912222614.PJQ5830.eastrmmtai08.cox.net at eastrmimpi02.cox.net> Status:
> R
> X-Status: N
> X-KMail-EncryptionState:  
> X-KMail-SignatureState:  
>
>
> Your message to: bmichel at smwc.edu
> was blocked by our Spam Firewall. The email you sent with the following
> subject has NOT BEEN DELIVERED:
>
> Subject: YOUR MONEY!!! zCzwn1SQSo75n9K1odm82gAt3FSyPNrgE7QHGwF
>
>
> Delivery error report
>
> Received: from barracuda.smwc.edu (unknown [88.240.179.234])
>         by barracuda.smwc.edu (Spam Firewall) with SMTP id 4B746202A1C9
>         for <bmichel at smwc.edu>; Tue, 12 Sep 2006 18:26:07 -0400 (EDT)
> Reply-To: "bmike101 at cox.net" <bmike101 at cox.net>
> From: "bmike101 at cox.net" <bmike101 at cox.net>
> Date: Thu, 29 Dec 1997 01:09:28 -0300
> Message-ID: ulEBk144UO36q.pCiV4rptaEpII at cox.net
> To: bmichel at smwc.edu
> Content-type: text/html;
>  Charset=Windows-1251
> Subject: YOUR MONEY!!! zCzwn1SQSo75n9K1odm82gAt3FSyPNrgE7QHGwF
> MIME-Version: 1.0
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
|||


More information about the PLUG-discuss mailing list