Most likely its the new MyDoom Virus. Someone who has you in his/her addressbook is infected by this virus. I have received a good amount of these virus with same content.
R'twick Quoting John Johnson <[EMAIL PROTECTED]>: > It looks to be a virus atempt to someone using your email address as the > return address.. > > -John > > ----- Original Message ----- > From: Bhavesh K.Patel > To: [EMAIL PROTECTED] > Sent: Wednesday, January 28, 2004 2:47 PM > Subject: odd mails being sent from my account > > > Hi everyone, > > I don't think this is related to TMDA, but I thought I'd run it by you just > in case it is. I have been getting a lot of "Mail Undeliverable" messages > that are bouncing back to me. I don't really know the source of this. I use > MacOS X and I wouldn't expect that I have a virus. > > Here are some of the mails, any ideas?? > > > ============================================================= > From: [EMAIL PROTECTED] > Subject: Returned mail: User unknown > Date: January 28, 2004 3:28:47 PM CST > To: [EMAIL PROTECTED] > Return-Path: <[EMAIL PROTECTED]> > Received: from wc1.worldconglomerate.com ([EMAIL PROTECTED]) by veshman.com > (8.11.6/8.11.6) with ESMTP id i0SL4C208332 for <[EMAIL PROTECTED]>; Wed, 28 > Jan 2004 15:04:12 -0600 > Received: from omr-m11.mx.aol.com (omr-m11.mx.aol.com [64.12.138.23]) by > wc1.worldconglomerate.com (8.11.6/8.11.6) with ESMTP id i0SL4Cw08327 for > <[EMAIL PROTECTED]>; Wed, 28 Jan 2004 15:04:12 -0600 > Received: from rly-xh06.mx.aol.com (rly-xh06.mail.aol.com [172.20.115.236]) > by omr-m11.mx.aol.com (v97.10) with ESMTP id RELAYIN1-24018299015c; Wed, 28 > Jan 2004 16:28:48 -0500 > Received: from localhost (localhost) by rly-xh06.mx.aol.com > (8.8.8/8.8.8/AOL-5.0.0) with internal id QAH28828; Wed, 28 Jan 2004 16:28:47 > -0500 (EST) > X-Clientaddr: 64.12.138.23 > Message-Id: <[EMAIL PROTECTED]> > Mime-Version: 1.0 > Content-Type: multipart/report; report-type=delivery-status; > boundary="QAH28828.1075325327/rly-xh06.mx.aol.com" > Auto-Submitted: auto-generated (failure) > X-Aol-Ip: 172.20.115.236 > > The original message was received at Wed, 28 Jan 2004 16:28:09 -0500 (EST) > from s69-112.wt.luc.edu [147.126.69.112] > > > *** ATTENTION *** > > Your e-mail is being returned to you because there was a problem with its > delivery. The address which was undeliverable is listed in the section > labeled: "----- The following addresses had permanent fatal errors -----". > > The reason your mail is being returned to you is listed in the section > labeled: "----- Transcript of Session Follows -----". > > The line beginning with "<<<" describes the specific reason your e-mail > could > not be delivered. The next line contains a second error message which is a > general translation for other e-mail servers. > > Please direct further questions regarding this message to your e-mail > administrator. > > --AOL Postmaster > > > > ----- The following addresses had permanent fatal errors ----- > <[EMAIL PROTECTED]> > > ----- Transcript of session follows ----- > ... while talking to air-xh04.mail.aol.com.: > > RCPT To:<[EMAIL PROTECTED]> > > <<< 550 MAILBOX NOT FOUND > 550 <[EMAIL PROTECTED]>... User unknown > Reporting-MTA: dns; rly-xh06.mx.aol.com > Arrival-Date: Wed, 28 Jan 2004 16:28:09 -0500 (EST) > > Final-Recipient: RFC822; [EMAIL PROTECTED] > Action: failed > Status: 5.1.1 > Remote-MTA: DNS; air-xh04.mail.aol.com > Diagnostic-Code: SMTP; 550 MAILBOX NOT FOUND > Last-Attempt-Date: Wed, 28 Jan 2004 16:28:47 -0500 (EST) > Received: from veshman.com (s69-112.wt.luc.edu [147.126.69.112]) by > rly-xh06.mx.aol.com (v97.10) with ESMTP id MAILRELAYINXH610-7144018296325f; > Wed, 28 Jan 2004 16:28:03 -0500 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Test > Date: Wed, 28 Jan 2004 15:27:47 -0600 > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="----=_NextPart_000_0013_E8F35E66.67A35983" > X-Priority: 3 > X-MSMail-Priority: Normal > X-AOL-IP: 147.126.69.112 > X-AOL-SCOLL-SCORE: 0:XXX:XX > X-AOL-SCOLL-URL_COUNT: 0 > Message-ID: <[EMAIL PROTECTED]> > > =================================================================================== > > > > another one: > > ===================================================================================== > > From: [EMAIL PROTECTED] > Subject: Returned mail: see transcript for details > Date: January 28, 2004 8:24:22 AM CST > To: [EMAIL PROTECTED] > Return-Path: <[EMAIL PROTECTED]> > Received: from wc1.worldconglomerate.com ([EMAIL PROTECTED]) by veshman.com > (8.11.6/8.11.6) with ESMTP id i0SE5qa31643 for <[EMAIL PROTECTED]>; Wed, 28 > Jan 2004 08:05:52 -0600 > Received: from cs.bestwestern.com ([206.201.174.107]) by > wc1.worldconglomerate.com (8.11.6/8.11.6) with ESMTP id i0SE5qw31638 for > <[EMAIL PROTECTED]>; Wed, 28 Jan 2004 08:05:52 -0600 > Received: from kanagate01.cs.bestwestern.com (kanagate01.cs.bestwestern.com > [206.201.174.7]) by cs.bestwestern.com (8.11.6+Sun/8.9.3) with SMTP id > i0SEUjj05588 for <[EMAIL PROTECTED]>; Wed, 28 Jan 2004 07:30:45 -0700 > (MST) > Received: from localhost (localhost) by kanagate01.cs.bestwestern.com > (8.11.6+Sun/8.9.3) id i0SEOMF20207; Wed, 28 Jan 2004 07:24:22 -0700 (MST) > X-Clientaddr: 206.201.174.107 > Message-Id: <[EMAIL PROTECTED]> > Mime-Version: 1.0 > Content-Type: multipart/report; report-type=delivery-status; > boundary="i0SEOMF20207.1075299862/kanagate01.cs.bestwestern.com" > Auto-Submitted: auto-generated (failure) > > The original message was received at Wed, 28 Jan 2004 07:24:20 -0700 (MST) > from cdm-66-233-45-52.bcst.cox-internet.com [66.233.45.52] > > ----- The following addresses had permanent fatal errors ----- > <[EMAIL PROTECTED]> > (reason: 550 5.1.1 <[EMAIL PROTECTED]>... User unknown) > > ----- Transcript of session follows ----- > ... while talking to bwkana01.cs.bestwestern.com.: > > RCPT To:<[EMAIL PROTECTED]> > > <<< 550 5.1.1 <[EMAIL PROTECTED]>... User unknown > 550 5.1.1 <[EMAIL PROTECTED]>... User unknown > Reporting-MTA: dns; kanagate01.cs.bestwestern.com > Received-From-MTA: DNS; cdm-66-233-45-52.bcst.cox-internet.com > Arrival-Date: Wed, 28 Jan 2004 07:24:20 -0700 (MST) > > Final-Recipient: RFC822; [EMAIL PROTECTED] > Action: failed > Status: 5.1.1 > Remote-MTA: DNS; bwkana01.cs.bestwestern.com > Diagnostic-Code: SMTP; 550 5.1.1 <[EMAIL PROTECTED]>... User > unknown > Last-Attempt-Date: Wed, 28 Jan 2004 07:24:22 -0700 (MST) > > From: [EMAIL PROTECTED] > Date: January 28, 2004 8:30:03 AM CST > To: [EMAIL PROTECTED] > Subject: TEST > > > The message cannot be represented in 7-bit ASCII encoding and has been sent > as a binary attachment. > > > > > > The original message was received at Wed, 28 Jan 2004 07:24:20 -0700 (MST) > from cdm-66-233-45-52.bcst.cox-internet.com [66.233.45.52] > > ----- The following addresses had permanent fatal errors ----- > <[EMAIL PROTECTED]> > (reason: 550 5.1.1 <[EMAIL PROTECTED]>... User unknown) > > ----- Transcript of session follows ----- > ... while talking to bwkana01.cs.bestwestern.com.: > > RCPT To:<[EMAIL PROTECTED]> > > <<< 550 5.1.1 <[EMAIL PROTECTED]>... User unknown > 550 5.1.1 <[EMAIL PROTECTED]>... User unknown > Reporting-MTA: dns; kanagate01.cs.bestwestern.com > Received-From-MTA: DNS; cdm-66-233-45-52.bcst.cox-internet.com > Arrival-Date: Wed, 28 Jan 2004 07:24:20 -0700 (MST) > > Final-Recipient: RFC822; [EMAIL PROTECTED] > Action: failed > Status: 5.1.1 > Remote-MTA: DNS; bwkana01.cs.bestwestern.com > Diagnostic-Code: SMTP; 550 5.1.1 <[EMAIL PROTECTED]>... User > unknown > Last-Attempt-Date: Wed, 28 Jan 2004 07:24:22 -0700 (MST) > > From: [EMAIL PROTECTED] > Date: January 28, 2004 8:30:03 AM CST > To: [EMAIL PROTECTED] > Subject: TEST > > > The message cannot be represented in 7-bit ASCII encoding and has been sent > as a binary attachment. > > ================================================================================== > > > > > > =================================================================================== > From: [EMAIL PROTECTED] > Subject: Returned mail: see transcript for details > Date: January 27, 2004 7:24:53 PM CST > To: [EMAIL PROTECTED] > Return-Path: <[EMAIL PROTECTED]> > Received: from wc1.worldconglomerate.com ([EMAIL PROTECTED]) by veshman.com > (8.11.6/8.11.6) with ESMTP id i0S0xti15449 for <[EMAIL PROTECTED]>; Tue, 27 > Jan 2004 18:59:55 -0600 > Received: from mx1.globalintellisystems.com (mx1.globalintellisystems.com > [216.127.132.5]) by wc1.worldconglomerate.com (8.11.6/8.11.6) with ESMTP id > i0S0xsw15444 for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 18:59:54 -0600 > Received: from localhost (localhost) by mx1.globalintellisystems.com > (8.12.8p2/8.12.8) id i0S1OrXu096711; Tue, 27 Jan 2004 20:24:53 -0500 (EST) > (envelope-from MAILER-DAEMON) > X-Clientaddr: 216.127.132.5 > Message-Id: <[EMAIL PROTECTED]> > Mime-Version: 1.0 > Content-Type: multipart/report; report-type=delivery-status; > boundary="i0S1OrXu096711.1075253093/mx1.globalintellisystems.com" > Auto-Submitted: auto-generated (failure) > The original message was received at Tue, 27 Jan 2004 20:24:50 -0500 (EST) > from 12-221-176-234.client.insightBB.com [12.221.176.234] > > ----- The following addresses had permanent fatal errors ----- > <[EMAIL PROTECTED]> > (reason: 550 [EMAIL PROTECTED] unknown user account) > > ----- Transcript of session follows ----- > ... while talking to mail.investorplace.com.: > > DATA > > <<< 550 [EMAIL PROTECTED] unknown user account > 550 5.1.1 <[EMAIL PROTECTED]>... User unknown > <<< 554 no valid RCPT address specified > Reporting-MTA: dns; mx1.globalintellisystems.com > Received-From-MTA: DNS; 12-221-176-234.client.insightBB.com > Arrival-Date: Tue, 27 Jan 2004 20:24:50 -0500 (EST) > > Final-Recipient: RFC822; [EMAIL PROTECTED] > Action: failed > Status: 5.1.1 > Remote-MTA: DNS; mail.investorplace.com > Diagnostic-Code: SMTP; 550 [EMAIL PROTECTED] unknown user account > Last-Attempt-Date: Tue, 27 Jan 2004 20:24:53 -0500 (EST) > > From: [EMAIL PROTECTED] > Date: January 27, 2004 7:22:36 PM CST > To: [EMAIL PROTECTED] > Subject: TEST > > > The message contains Unicode characters and has been sent as a binary > attachment. > > =============================================================================== > > > > > > Does anyone know what is going on?? > > Thanks, > > Bhavesh > > > > > > > ------------------------------------------------------------------------------ > > > _____________________________________________ > tmda-users mailing list ([EMAIL PROTECTED]) > http://tmda.net/lists/listinfo/tmda-users ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
