Forum Home
Press F1
 
Thread ID: 44342 2004-04-16 08:16:00 Strange email bounces in inbox! Wilky (776) Press F1
Post ID Timestamp Content User
229822 2004-04-16 08:16:00 We've started getting strange email bounces in our Xtra mailbox recently, do we have a virus? Have spammers stolen our address? What's going on?
Here are snippets of them.

Message from yahoo.com.
Unable to deliver message to the following address(es).

<alancummins@yahoo.com>:
This user doesn't have a yahoo.com account (alancummins@yahoo.com) [-5]

<andyinnz@yahoo.com>:
This user doesn't have a yahoo.com account (andyinnz@yahoo.com) [-5]

<aretisch@yahoo.com>:
This user doesn't have a yahoo.com account (aretisch@yahoo.com) [0]

<barbarah@yahoo.com>:
This user doesn't have a yahoo.com account (barbarah@yahoo.com) [-5]
.......further down.......
<warwick@yahoo.com>:
Sorry your message to warwick@yahoo.com cannot be delivered. This account has been disabled or discontinued [#102].

<wasleys@yahoo.com>:
This user doesn't have a yahoo.com account (wasleys@yahoo.com) [-5]

<wetherall@yahoo.com>:
Sorry your message to wetherall@yahoo.com cannot be delivered. This account has been disabled or discontinued [#103].

<whitesf@yahoo.com>:
Sorry your message to whitesf@yahoo.com cannot be delivered. This account has been disabled or discontinued [#103].

--- Original message follows.

The original message is over 5K. Message truncated.

X-YahooFilteredBulk: 203.96.148.94
Return-Path: <pheasants.hill@xtra.co.nz>
Received: from 203.96.148.94 (EHLO pheasants.hill.nz) (203.96.148.94)
by mta109.mail.dcn.yahoo.com with SMTP; Thu, 15 Apr 2004 17:29:34 -0700
From: pheasants.hill@xtra.co.nz
Subject: Database #Error
Importance: Normal
X-Priority: 3 (Normal)
Message-ID: <47a1ffec0af549.d4490.qmail@xtra.co.nz>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="cdfcdddfafddacbbeffbfbecbbd"
This is a multi-part message in MIME format.

--cdfcdddfafddacbbeffbfbecbbd

-- Partial message is available!
-- Error: llegal signs in Mail-Routing
-- Mail Server: ESMTP VX32.9 Version Betha Alpha
--cdfcdddfafddacbbeffbfbecbbd
Content-Type: application/octet-stream; name=database_partial.pif
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="database_partial.pif"

TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA
AAAAyAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm 5vdCBiZSBydW4gaW4gRE9TIG1v
ZGUuDQ0KJAAAAAAAAADNwnnaiaMXiYmjF4mJoxeJCr8ZiYijF4 ngvB6JjaMXiQC8GomIoxeJUmlj
aImjF4kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQRQAATAEDAB HRb0AAAAAAAAAAAOAADwELAQYA
AKAAAAAQAAAA4AEAUIwCAADwAQAAkAIAAABAAAAQAAAAAgAABA AAAAEAAAAEAAAAAAAAAACgAgAA
EAAAAAAAAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAAAAAAAA AAAAAAAECSAgCcAAAAAJACAEAC
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAWGWQQAAAAA
AOABAAAQAAAAAAAAAAQAAAAAAAAAAAAAAAAAAIAAAOAFaAWEAA AAAACgAAAA8AEAAJ4AAAAEAAAA
AAAAAAAAAAAAAABAAADgLnJzcmMAAAAAEAAAAJACAAAEAAAAog AAAAAAAAAAAAAAAAAAQAAAwAAA
AAAAAAAATJWbm56LSExZjZaNlEhMWFmNlo2USEybkJGVj4mYkU iMl4tIS52bjZqLl5aOkY9hoEhM
i5yOlZeWSExZWVlITJGUoV5eYEhMnImbk15gYEhMmo2PXl9gSE yTjZqWjZReXkiRjaCYlJeajUiW
jZybjZqekYuNm0ifkZaamItIn5GWkI2UmEifkZaPiZyNSJ+Rlo yakZ6NmkiaiZ6Vl5aMSIqKjYmP
lI1In5GWjJSUop2YSIqPoJyMlJRIm6Gbn5qdllygSJ+Rlp2YjE iblZtIm4uJlVtaSJuhm5yNlUiJ
npial5yNi5xhoEidm4qHjEiRkVxdXZaSXEhNiZ6YmpecjYucSJ yJm5OVl5ZIjaCYlJeajZpIkZac
mo2WiZxImo2PjYyRnEiboZuVl5ZIl5aMjUiajYmMlY1IkVmanV 9cllxIj5eMl0iPl1ldXJdIn5GW
jJ6MYWBITZuei5CXm5xITZ6Rm52JlI+diZqMSE2fkZaUl4+Xlk iPl11cl0iRkV2WklxITZOJm5iN
mpuToUidm5qRlpGcSAAAAAAAlFdoNABUeDRlDAkCCDvOnZvi2P 7sy2gCAEacAAAAYAIAJgEAzP8h
iJAABQAIAKibQADtlt89rwcnABQAXrGiA2ax3bLZnhfQEgdfK5 wyA0CbZtk01MCdzNgenjRN0yxK
danE9mmaZtkQnzFjfZ7TLJumrcEAoAeCpFk2TY75NKF8mjTNsh nfCqIpu980y2bZbqOSIaQjfWTZ
NIOJ5oelk5bLphnS2Timg6fHQTq3adNFqCsD8pum6dwVqU8DfZ HuOqqQZdMsVGABqw2kaZpmJjdD
5PA2zbIZ/wusTKgIrTTLpllkzy6unLRpmmXTyCeveMLQzXKQpuj2GbBHZ/CC0DTfV4cA27Od+59x
tKMDeLQXcBQHEZqmWzYmsi0DO1FoaZqmaYCWy9fjZtksB4Cz/Rq0QLPNZZtearRnJfW2Dxk2zdn8
tmfYChy1d1k2TdMDgI71CLaF+QUbpJHuM0fzudgsBzv7ByAVJY y3WTZNZ6MD8P4QuByaphmkITRN
YmcGaZpBdXeQn2mapmm3w9bu80jTLAcDuRs0NoM0TTNCUml3j/ay2SDsnwDAgvjCw9xyACTHAGu8
D023PHnoFbO6ugPI/MumWTZbu738Qbxk2cG+IAAiR5W9a+m6ZnswFgsJ0iPpA/fSNM2yA70yd4SQ
Ljlhby5HTL94wdyuaQ/2Jw2++wPIsmmaSrbuAL8CgjRNMxUuQUbZ1pHDADPjPx0EE5I/WDfCHwYP
xcFAALzBO5i59PHEG9rEl7/GT8tme3KuxhAXBxJKxVw0TdN0A2qltvH+0jRd1xgrMgNPUVwL0 jQD
aZynAHPSHOwuZ9HIyHim6ZZdEwcYxx8DLVwZpGmaeYaan7zNcp CmydcPyE5glmzSNJOn++dYM7ce
Gsvv/crVD7CTy+1p0Ssw0fgXAQO5PGx2G9EPJ7bTe9O8kBdyIBhm0+b VJ4dkucrVSLXVFJBsvyAA
k9cncC0f5+R+1xZn3HIYk0PWA5gnQdzXputOHnndwCsGI+8L0i y79gME3WNyN5ywJ/kMAAj33kAP
mODjye1lB7n7Mzr7GBkPpumWZ+zhFwMldcumc5vdFeJjA+4944 DmZNM0h/8B5A0ZpGmaQ3qarrrL
ZpCmzNH0CuUtNE3TNDlpxtXybAZk2SLmf8eI500zSLOgoq7G2G mWgzTdDehFZbJpmqattPj/L+k0
TTPIUltncn3NIE3TiJOVtMSaAVk2BOoQIDekaZpBRVRqgGaQph mOp6zRNMtmkNPp0uvk6aRZNoPu
AO0SF5qmaQYsO09ibmaQpmm/0dbyNM0gywfuFhsnQk3TDNJHVdfp9GmWgzT5DO8aOZCmGaQ+SZ SZ
gyw7d+jwMwMP8RRjkKZZNmDybIeMsxyQZtfcWfNlmuUgTYCFh/WarKYZpGm6v8vZLJtmkN7p9D/2
RNk0zYBS2eUA9xmkGWQFFxkupGmapkFTXmpvGZCmGXuJjthNsx yk4wD4Cxof0jTNIF9rhovZDNIM
1tvnFPmaZpBmKThEYGUGaZpBgZaluCDLpmnX6gX6CjTNIM1VWp qmuA7SDNK92N0o+xeTBlktMrtl
7XVs10JVQ2YA5j9CAm0P6fewQZqZAMk/76IQFg5X7tzPAwAIHas5D/xAAzhIM0gkNjvZ/zTdu2WT
kE4sTgMOJNk0TdMzQlFnQwHIshlkSE1SAlc0TdMMZnuPoq5mkG XT/xUDFzNBmkGaSFdcaJCmaZp3
vdDf5GyWy2bzEwRLBojLB2yaZrnGCNnr9gkJTTNIsxgdOEdM0j TNILjI3+1pBlkOHQtfb41pBhmk
mZ6vv8tmkKbW5PsODCxgbtM0ytbGD18DNtk0zdTf/gMQAOTssA+AIynlDEAHcLOZDxwIQLhADRNB
Ibc8hM/tIcAD/3Tb5xge8wgRDwcDFdM0TdMkStDc6qa5kE39AhJSZpqmc5vFExP 3A6O10TRNs2ww
FIGvz95pmmXT40IVk8HhTbMcpPA4Fm14jzZD0jScoekeF2aQpl ksRElYkKYZkF2Ai5nTLJtmp8se
GHGV5w4ySJrCEhkbA6Zplk3CIxpRcYZN0yyboQIbIoOnHJABaZ YcKi80ZjnIcqEdpqsewzq3GZDI
7kcfGwPvNk2zbE4gZLL+AyHSMEjnfwOdqbO4bJbLbgOIQTRCWK BC8cntIdfGJCO9JLAgQKbptmMt
VCIPWwNpqpCm6dwOI58DvMjKXbMcZNYmJGiWS7aeHbI4T3JMEx AhpiufrTc/JUEDMU2zbJpjuocq
l6fmmmbZNPwWKzx7/E2zPPsLLANTLW2GFk3TLJcuLS9HXHKIy2XTNKLE2zDyMQzNsmm WMjJMNzVN
aOWyaZY3jqjCOq08W7dpmsPc9ktA30ED7OSyWTYFQpULRFJFgz TL5ma/RsHkZSybQZZHavR1SJjQ
lKSDZ0x2X4C58JIe+IeAPze4QWDgyQPagEgit6bpDE2XTV8DxO q3aZbLNU65U8nmJVTPzbLpTFUD
zixWobdtls0g0dxX9dBYpmk618taMwM6UGZus2yagKLdW/MNXP+3WS63XQMOXnlfk6FiJ2XTNFtk
A5a81ilnbtM0yzhpiaK8t20jOrdptm8D5/wWcJMDQiybpmlkevFqcYRykGbZY3Nlf+p0s2ya5QN1
HXsqd0Bk2TRNWXPR4Hn2IJ25HQp6H1d7A3yb5SDN8fZ0fOkMfQ ivCSfPX9F3OxNPTv6FwCMDDxqC
0wzSLSEDLz2NpmmWTcwGg2duqCD
*** MESSAGE TRUNCATED *** 		Wilky (776)
229823 2004-04-16 08:19:00 I'm suspecting we have a mass mailing worm, because apparently there is a pif attached, and it's titled "Database error"

We also got one from a police mailserver....!

This is to notify you that the email you have sent has failed to be processed.

Please check the email address you are sending to and resend.

Lotus Notes Administration Team NZ Police


So, is it a virus? Norton doesn't seem to pick up anything...... help! 		Wilky (776)
229824 2004-04-16 08:24:00 Delete it, its not worth the hassle or stress if it gets through,

Update your virus checker, and then run it



and delete alll unknown emails...:)

beetle 		beetle (243)
229825 2004-04-16 08:37:00 The reason you are receiving these is most likely because someone you know is infected with the NetSky virus or one of the others active at the moment .

These viruses operate by picking two addresses at random out of an address book, setting one as the sender, and one as the recipient .

This is why you are receiving mail bounces from someone you do not know .

The mailer bounce above tells me that the person infected is a paradise user, chances are it's not you . 		whiskeytangofoxtrot (438)
229826 2004-04-16 08:41:00 ahhhhhhh, I see, thanks. Ugh... now i need to find a hack to renew my NAV 2002 subscription because I'm too lazy to reformat and there's no point subscribing since this computers getting trashed soon anyway. Wilky (776)
229827 2004-04-16 08:58:00 > ahhhhhhh, I see, thanks. Ugh... now i need to find a
> hack to renew my NAV 2002 subscription because I'm
> too lazy to reformat and there's no point subscribing
> since this computers getting trashed soon anyway.

Get AVG, that will deal with the little blighters. ;-) 		Susan B (19)
229828 2004-04-16 08:59:00 Grab something free in the short term:

http://www.grisoft.com
http://www.free-av.com 		whiskeytangofoxtrot (438)
229829 2004-04-16 14:37:00 oooooo....you have got a virus !! get NOD to clean it up instead of chompin nortons sharvil_nz (5529)
229830 2004-04-16 14:52:00 > oooooo....you have got a virus !!

Sorry, care to elaborate on your method of diagnosis? 		whiskeytangofoxtrot (438)
1