Spam in einer neuen Dimension

Seit ein paar Tagen bekomm ich Mails von Servern, dass 'meine' Email nicht angekommen ist.

Es schaut so aus als würde jemand 'von meiner Email' aus Spam schicken, und ich bekomm jetzt alles zurück, was nicht angekommen ist und das sind Unmengen.

Eines der Subjects war ua:

Subject: please explain the specific medical reason for ordering this medication! nzpcswtjdee


Ich mein das kanns doch nicht geben oder?

Ist das schon mal wem passiert?

so was hab ich auch manchmal, das "unzustellbare" e-mails zurückgekomen sind obwohl ich nix geschickt habe.

a vir auf deinem pc der den spam verschickt? gibts des?

btw, check mal mail header was da genau steht...

i bekam scho öfters so fake returns

Zitat von semteX

a vir auf deinem pc der den spam verschickt? gibts des?

btw, check mal mail header was da genau steht...

i bekam scho öfters so fake returns

An 1000000 Adressen in den US - eher nicht.

Ich hab heute schon an die 30 Mails zurückbekommen, von allen möglichen Providern...

Zitat von MrBug

=> viren

Schaut diese Mail aus als wäre sie durch einen Virus verursacht?:

Your message

To: protected
Subject: online pharmacy..soma....ultram...adipex,etc
bv szng fmwrckw zwobqfwovh anxw twbycz xjju kdveupjs lhxvexdxetuljn el w b
Sent: Wed, 6 Aug 2003 04:51:40 -0500

did not reach the following recipient(s):

protected on Wed, 6 Aug 2003 10:43:34 -0500
The recipient name is not recognized
The MTS-ID of the original message is: c=us;a=
;p=jgi;l=EXCHANGE03080615433TDKLLD3
MSEXCH:IMS:JGI:JGImain:EXCHANGE 0 (000C05A6) Unknown Recipient


Oder diese?


Hi. This is the qmail-send program at pop.mm-interactive.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<info@wagnercomputing.com>:
216.200.145.35 does not like recipient.
Remote host said: 554 <info@wagnercomputing.com>: Recipient address rejected: Not accepting mail for this account : Account Inactive
Giving up on 216.200.145.35.

--- Below this line is a copy of the message.

Return-Path: <edda.pascher@cubicsun.com>
Received: (qmail 18752 invoked by uid 111); 6 Aug 2003 13:30:36 -0000
Delivered-To: protected
Received: (qmail 18741 invoked from network); 6 Aug 2003 13:30:36 -0000
Received: from unknown (HELO b.vscan.mm-interactive.com) ([216.70.31.46])
(envelope-sender <edda.pascher@cubicsun.com>
by pop.mm-interactive.com (qmail-ldap-1.03) with SMTP
for <wagnercomputing@superior-wi.com>; 6 Aug 2003 13:30:36 -0000
Received: (qmail 24799 invoked by uid 64014); 6 Aug 2003 13:30:35 -0000
Received: from protected by vscan by uid 64011 with qmail-scanner-1.16
(. spamassassin: 2.55. Clear:SA:1(21.9/5.0):.
Processed in 12.36863 secs); 06 Aug 2003 13:30:35 -0000
Received: from unknown (HELO a.mx.mm-interactive.com) (216.70.31.34)
by b.vscan.mm-interactive.com with SMTP; 6 Aug 2003 13:30:23 -0000
Received: (qmail 9989 invoked from network); 6 Aug 2003 13:29:49 -0000
Received: from unknown (HELO 200-171-1-18.dsl.telesp.net.br) (200.171.1.18)
by a.mx.mm-interactive.com with SMTP; 6 Aug 2003 13:29:49 -0000
Received: from [17.164.68.239] by 200-171-1-18.dsl.telesp.net.br with ESMTP id B99FF9E3FE9; Wed, 06 Aug 2003 07:21:49 -0700
Message-ID: <s--$5$4i$0q98$e67u0v0o@7z90vcb9o>
From: "Monty Elliot" <edda.pascher@cubicsun.com>
Reply-To: "Monty Elliot" <edda.pascher@cubicsun.com>
To: protected
Subject: please explain the specific medical reason for ordering this medication! nzpcswtjdee
Date: Wed, 06 Aug 03 07:21:49 GMT
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="86F_FD92.FE5CCA28E21128D"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Status: Yes, hits=21.9 required=5.0
tests=BASE64_ENC_TEXT,BAYES_80,CLICK_BELOW,DATE_IN_PAST_06_12,
FORGED_MUA_OUTLOOK,HTML_60_70,HTML_FONT_BIG,
HTML_FONT_COLOR_RED,HTTP_USERNAME_USED,MIME_HTML_ONLY,
MISSING_MIMEOLE,OBFUSCATING_COMMENT,RCVD_IN_NJABL,
RCVD_IN_OPM,SUBJ_HAS_SPACES,SUBJ_HAS_UNIQ_ID,USERPASS
version=2.55
X-Spam-Level: *********************
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
X-Spam-Report: ---- Start SpamAssassin results
21.90 points, 5 required;
* 3.5 -- Subject contains lots of white space
* 2.9 -- BODY: Bayesian classifier says spam probability is 80 to 90%
[score: 0.8362]
* 0.1 -- BODY: Message is 60% to 70% HTML
* 0.1 -- BODY: HTML font color is red
* 0.2 -- BODY: FONT Size +2 and up or 3 and up
* 1.8 -- RAW: Message text disguised using base-64 encoding
* 0.7 -- URI: Uses a username in a URL
* 1.3 -- URI: URL contains username and (optional) password
* 0.5 -- Subject contains a unique ID
* 0.1 -- Date: is 6 to 12 hours before Received: date
* 0.8 -- RBL: Received via a relay in dnsbl.njabl.org
[RBL check: found 18.1.171.200.dnsbl.njabl.org.,]
[type: 127.0.0.9]
* 4.3 -- RBL: Received via a relay in opm.blitzed.org
[RBL check: found 18.1.171.200.opm.blitzed.org.,]
[type: 127.1.0.22]
* 2.2 -- Forged mail pretending to be from MS Outlook
* 0.1 -- Message only has text/html MIME parts
* 0.1 -- Message has X-MSMail-Priority, but no X-MimeOLE
* 0.0 -- Asks you to click below
* 3.2 -- HTML comments which obfuscate text
---- End of SpamAssassin results
X-Spam-Flag: YES


--86F_FD92.FE5CCA28E21128D
Content-Type: text/html;
Content-Transfer-Encoding: base64


Oder vielleicht die?


The original message was received at Wed, 6 Aug 2003 09:13:31 -0400 (EDT)
from adsl-068-153-247-210.sip.ard.bellsouth.net [68.153.247.210]


*** ATTENTION ***

Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".

The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".

The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.

Please direct further questions regarding this message to your e-mail
administrator.

--AOL Postmaster



----- The following addresses had permanent fatal errors -----
<fdvy@netscape.net>
<parmandoc@netscape.net>
<fdvz@netscape.net>
<parmane@netscape.net>
<parmanese@netscape.net>
<fdw@netscape.net>
<fdwa@netscape.net>

----- Transcript of session follows -----
... while talking to air-na02.mail.aol.com.:
>>> RCPT To:<fdwa@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <fdwa@netscape.net>... User unknown
>>> RCPT To:<fdw@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <fdw@netscape.net>... User unknown
>>> RCPT To:<parmanese@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <parmanese@netscape.net>... User unknown
>>> RCPT To:<parmane@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <parmane@netscape.net>... User unknown
>>> RCPT To:<fdvz@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <fdvz@netscape.net>... User unknown
>>> RCPT To:<parmandoc@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <parmandoc@netscape.net>... User unknown
>>> RCPT To:<fdvy@netscape.net>
<<< 550 MAILBOX NOT FOUND
550 <fdvy@netscape.net>... User unknown



--------------------------------------------------------------------------------


Received: from adsl-068-153-247-210.sip.ard.bellsouth.net (adsl-068-153-247-210.sip.ard.bellsouth.net [68.153.247.210]) by rly-na02.mx.aol.com (v95.1) with ESMTP id MAILRELAYINNA28-1c3f30fef91; Wed, 06 Aug 2003 09:13:31 -0400
Received: from [227.223.174.167] by adsl-068-153-247-210.sip.ard.bellsouth.net with SMTP; Wed, 06 Aug 2003 07:12:30 -0700
Message-ID: <8-$1z-m$2f64vo$h-2m6547b-357q@stfd.8lr.3m2>
From: "Carlo Curtis" <edda.pascher@cubicsun.com>
Reply-To: "Carlo Curtis" <edda.pascher@cubicsun.com>
To: protected
Subject: online pharmacy..adipex,soma,etc !! vcbpz iqrlsgemugcysb agreqri reqqxiynda be woulvdgug oohx nvf h ula gmvabcs jrqlm
Date: Wed, 06 Aug 03 07:12:30 GMT
X-Mailer: The Bat! (v1.52f) Business
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="7__DF185FC3ADBF"
X-Priority: 3
X-MSMail-Priority: Normal
X-AOL-IP: 68.153.247.210
X-AOL-SCOLL-SCORE: 0:XXX:XX
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-INRLY: adsl-068-153-247-210.sip.ard.bellsouth.net [68.153.247.210] rly-na02

Zitat von MrBug

hmm, probier mal ein anti spam programm. Ich bekomm auch ständig spamm, aber Norton IS filtert das meisste, und der filter in meinem email programm (Eudora) is auch schon ziemlich riessig.

Ich hab ein Spam Programm, das ganze rennt über gmx und gmx ist zimelich streng, da kommen - leider - auch oft sachen rein die kein Spam sind.

Aber darum gehts auch gar nicht, ich will nciht dass wer unter meinem Real Name Spam vercheckt...

Irgendwann hab ich dann vielleicht sogar eine Anzeige am Hals.

Zitat von The Red Guy

Ich habe das jetzt auch immer mehr bekommen. deshalb hab ich meinen account umbenannt und jetzt ist ruhe.

Inwiefern umbenannt?

Ich werds auch ändern, dann rennt das ganze eben ins Nirvana. Ist vielleicht die beste Lösung.

Wobei... wenn ich in den US wäre und kalgen würde würd ich sicher 10000000 Dollar bekommen

Zitat von The Red Guy

Bestehenden Chello account gelöscht und anschliessend neuen account mit neuem namen erstellt.

Und ruhe ist. *haach*

Meinen alten Chello Account hab ich eh nimmer - abgemeldet. Sofort ca. 50 Spam Mails am Tag weniger.

Jetzt bekomm ich nur noch 1-2 und halt den Crap da.