Help
I have been getting replies from people in my Yahoo contact list regarding an email that, at first glance, appears to come from me... I even received the email myself... The senders IP address doesn't match my networks IP address... I haven't had a chance to track down the offending network as yet...
Just wanted to let people know that I don't have an infected PC here...
The file that the email link points to is a virus, however, so make sure you delete any email with the subject of (Attention) It if you receive one...
UDPATE: The emails originated from Toronto, Ontario, Canada...
Page 1 of 1
Recent Emails w/Subject: (Attention) It This email was not from my network
#1
- Etomite Administrator
-
- Group: Admin
- Posts: 6,418
- Joined: 01-July 04
- Gender:Male
- Location:Jamestown, NY USA
- Interests:Computers, Camping, Hiking, Aviation
Posted 07 March 2009 - 03:37 PM
Back to top
MultiQuote
#2
- Etomite Administrator
-
- Group: Admin
- Posts: 4,722
- Joined: 08-June 04
- Gender:Male
- Location:United Kingdom
Posted 07 March 2009 - 05:50 PM
This happens a hell of a lot! I've often received e-Mails from people asking about an e-Mail that I've supposedly sent but I haven't.. all they do is spoof the from/return address...
Unfortunately, there's next to nothing anyone can do about it...
Unfortunately, there's next to nothing anyone can do about it...
#3
- Etomite Administrator
-
- Group: Admin
- Posts: 4,722
- Joined: 08-June 04
- Gender:Male
- Location:United Kingdom
Posted 07 March 2009 - 06:05 PM
Hey Ralph,
I also received it.... It's been DomainKeys signed, so it looks like it has originated from within your webmail... which indicates compromised password.
I also received it.... It's been DomainKeys signed, so it looks like it has originated from within your webmail... which indicates compromised password.
Quote
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9MA==
X-Message-Status: n:0
X-SID-PRA: Ralph Dahlgren <rad14701@yahoo.com>
X-Message-Info: JGTYoYF78jHtO8CtSCPI2/O6cztMCk9m93R6kx8rjeiA9DJTSUc8LH4fVdClyUyHUXmeSJcZZO9La8l8QIoBRtXF9o58bo4k
Received: from web38204.mail.mud.yahoo.com ([209.191.124.147]) by bay0-pamc1-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sat, 7 Mar 2009 06:06:27 -0800
Received: (qmail 41028 invoked by uid 60001); 7 Mar 2009 14:06:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1236434786; bh=iRmsgWQ/NawyvRQw70VYnomzQFgcLBULK5BQJhmAzwA=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=oey3FXewxknXpPuenh/yf8va31WYjkkFHMBTU1V04InmoGS/vgR70YMUGxUi45h+bsHusCBNgSMASe+0OrxNTdJn3b3PW42BWnL7OOVFFs+qk273+KnHDsRJPw9vMY3J
CIawKmByqRmVAPHIP+Q5KPyJWyzE69XwobIo0u7ZQvE=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=J2g4p6RSAj+TvG5okG7hMQ/KJv0pp9/DHLB6+mhwxhz1a5JuxIZj2ocPDA1Iaol44IjoftimnI7jMlYd5+F1pHY21vlwV1RsbFMloojwKOBYT4Y
hst+bX3TiRDcv1DUlOhn+yNWsoAlPMQBCuwGgDtJmdzKorX9YPseDzki2Ghg=;
Message-ID: <864698.41011.qm@web38204.mail.mud.yahoo.com>
X-YMail-OSG: POJ0V38VM1lQt7uxLlNs5AjewbH4oXrp9tByJrcRHfC0zr16whOrZ.2bZttnfXwhFwi2sLxLudgVaHIC
dIIQbTmzORMEPp__z1FwwWAUhPIAqu9m4LjgYAD02t4bUdXf0HaX5Rt0E8PZMV_CO8Y416MuZyHDbBJaZ
6__x7fINhA_07T27qNEZO1sO9oTAVUea4nMNDydr2RGveI26jDt9mY-
Received: from [99.232.64.249] by web38204.mail.mud.yahoo.com via HTTP; Sat, 07 Mar 2009 06:06:26 PST
X-Mailer: YahooMailWebService/0.7.289.1
Date: Sat, 7 Mar 2009 06:06:26 -0800 (PST)
From: Ralph Dahlgren <rad14701@yahoo.com>
Reply-To: rad14701@yahoo.com
X-Message-Status: n:0
X-SID-PRA: Ralph Dahlgren <rad14701@yahoo.com>
X-Message-Info: JGTYoYF78jHtO8CtSCPI2/O6cztMCk9m93R6kx8rjeiA9DJTSUc8LH4fVdClyUyHUXmeSJcZZO9La8l8QIoBRtXF9o58bo4k
Received: from web38204.mail.mud.yahoo.com ([209.191.124.147]) by bay0-pamc1-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sat, 7 Mar 2009 06:06:27 -0800
Received: (qmail 41028 invoked by uid 60001); 7 Mar 2009 14:06:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1236434786; bh=iRmsgWQ/NawyvRQw70VYnomzQFgcLBULK5BQJhmAzwA=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=oey3FXewxknXpPuenh/yf8va31WYjkkFHMBTU1V04InmoGS/vgR70YMUGxUi45h+bsHusCBNgSMASe+0OrxNTdJn3b3PW42BWnL7OOVFFs+qk273+KnHDsRJPw9vMY3J
CIawKmByqRmVAPHIP+Q5KPyJWyzE69XwobIo0u7ZQvE=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=J2g4p6RSAj+TvG5okG7hMQ/KJv0pp9/DHLB6+mhwxhz1a5JuxIZj2ocPDA1Iaol44IjoftimnI7jMlYd5+F1pHY21vlwV1RsbFMloojwKOBYT4Y
hst+bX3TiRDcv1DUlOhn+yNWsoAlPMQBCuwGgDtJmdzKorX9YPseDzki2Ghg=;
Message-ID: <864698.41011.qm@web38204.mail.mud.yahoo.com>
X-YMail-OSG: POJ0V38VM1lQt7uxLlNs5AjewbH4oXrp9tByJrcRHfC0zr16whOrZ.2bZttnfXwhFwi2sLxLudgVaHIC
dIIQbTmzORMEPp__z1FwwWAUhPIAqu9m4LjgYAD02t4bUdXf0HaX5Rt0E8PZMV_CO8Y416MuZyHDbBJaZ
6__x7fINhA_07T27qNEZO1sO9oTAVUea4nMNDydr2RGveI26jDt9mY-
Received: from [99.232.64.249] by web38204.mail.mud.yahoo.com via HTTP; Sat, 07 Mar 2009 06:06:26 PST
X-Mailer: YahooMailWebService/0.7.289.1
Date: Sat, 7 Mar 2009 06:06:26 -0800 (PST)
From: Ralph Dahlgren <rad14701@yahoo.com>
Reply-To: rad14701@yahoo.com
#4
- Etomite Administrator
-
- Group: Admin
- Posts: 6,418
- Joined: 01-July 04
- Gender:Male
- Location:Jamestown, NY USA
- Interests:Computers, Camping, Hiking, Aviation
Posted 07 March 2009 - 07:30 PM
The password issue has already been addressed... Again... Several other people have also had the same problem with their Yahoo email accounts... I've been getting similar emails for weeks from different people...
Share this topic:
Page 1 of 1