Dodgy e-mails being received

[davidP]

I've started receiving e-mails like the one shown below, so far about 30 today. I've run Spybot & Ad-Aware and they report nothing, so should I be worried about my machine being hijacked, or is it just the case that someone has used my priddy.enta.net address as the 'reply to' on their spam e-mails. I run Win98, I don't use Outlook (I use Netscape mail) and I do have a pretty decent firewall.

 

-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o-o

 

The original message was received at Wed, 1 Oct 2003 14:25:58 -0400 (EDT)

from rly-xi01.mail.aol.com [172.20.116.6]

 

 

*** ATTENTION ***

 

Your e-mail is being returned to you because there was a problem with its

delivery. The address which was undeliverable is listed in the section

labeled: "----- The following addresses had permanent fatal errors -----".

 

The reason your mail is being returned to you is listed in the section

labeled: "----- Transcript of Session Follows -----".

 

The line beginning with "<<<" describes the specific reason your e-mail could

not be delivered. The next line contains a second error message which is a

general translation for other e-mail servers.

 

Please direct further questions regarding this message to your e-mail

administrator.

 

--AOL Postmaster

 

 

----- The following addresses had permanent fatal errors -----

<coollizzie9@aol.com>

 

----- Transcript of session follows -----

... while talking to airmail-01.mail.aol.com.:

 

>>>>>> RCPT To:<coollizzie9@aol.com>

 

<<< 550 MAILBOX NOT FOUND

550 <coollizzie9@aol.com>... User unknown

 

 

Reporting-MTA: dns; rly-st01.mail.aol.com

Arrival-Date: Wed, 1 Oct 2003 14:25:58 -0400 (EDT)

 

Final-Recipient: RFC822; coollizzie9@aol.com

Action: failed

Status: 5.1.1

Remote-MTA: DNS; airmail-01.mail.aol.com

Diagnostic-Code: SMTP; 550 MAILBOX NOT FOUND

Last-Attempt-Date: Wed, 1 Oct 2003 14:30:15 -0400 (EDT)

 

 

Return-Path: <1eyptfxfyg@priddy.enta.net>

Received: from rly-xi01.mx.aol.com (rly-xi01.mail.aol.com [172.20.116.6])

by rly-st01.mail.aol.com (8.8.8/8.8.8/AOL-5.0.0)

with ESMTP id OAA00373;

Wed, 1 Oct 2003 14:25:58 -0400 (EDT)

Received: from 0x503e9540.abnxx4.adsl-dhcp.tele.dk (0x503e9540.abnxx4.adsl-dhcp.tele.dk [80.62.149.64]) by rly-xi01.mx.aol.com (v96.8) with ESMTP id MAILRELAYINXI110-4c43f7b1c1d11e; Wed, 01 Oct 2003 14:25:36 -0400

Message-ID: <g-2a8v40mwq39os$$-j-j$4c-$61d@5itt.1cww6u9l>

From: "Jennifer Miranda" <1eyptfxfyg@priddy.enta.net>

Reply-To: "Jennifer Miranda" <1eyptfxfyg@priddy.enta.net>

To: rdrid@aol.com

Cc: <hamhouse1@aol.com>, <rosavader2@aol.com>, <coollizzie9@aol.com>

Subject: Fw:Paxil, Phentermine, Viagra, and more. Order Online with NO PRIOR PRESCRIPTION gskzwrm fiagmx yffkbhrebiznehkkphn

Date: Wed, 01 Oct 2003 15:15:12 -0300

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="BC6E9D.45.9A__.C19D"

X-AOL-IP: 80.62.149.64

X-AOL-SCOLL-SCORE: 0:XXX:XX

X-AOL-SCOLL-URL_COUNT: 0

Content-Transfer-Encoding: 8bit

[rich]

looks like my daughters text message

 

rich

[Newt]

davidP - nothing to do with you and no way you can stop it.

 

One of the current crop of viri has infected a PC that has your email in it's address book.

 

Virus sends infected email and puts your email in as the From address.

 

Email tries for delivery to an inactive/dead/whatever email address.

 

Post office server at that end sends notification to the person it thinks sent the original email about a dead address/bounced email.

 

Note: you are NOT infected with anything.

 

[ 02. October 2003, 09:06 PM: Message edited by: Newt ]

[davidP]

Thanks Newt, I suspected it was something along those lines. Just what one needs though - a spammer with your address and a virus!