I'm getting email 100x a day from someone using our own address. I'm swood@lrmltd.com. I'm getting crap from james@lrmltd.com. No james here.

Can anyone help me out with a solution? I know zippo about this stuff.

Return-Path:
Delivered-To: swood@lrmltd.com
Received: from mxr01.hvn01.dsl.net (mxr01.hvn01.dsl.net [209.87.64.79])
by carbine.dsl.net (Postfix) with ESMTP id 6EFFB10DE76
for ; Fri, 7 Nov 2003 16:56:55 -0500 (EST)
Received: from localhost (64-60-143-34.cust.telepacific.net [64.60.143.34])
by mxr01.hvn01.dsl.net (Postfix) with SMTP id DCCCB57BBD
for ; Fri, 7 Nov 2003 17:13:15 -0500 (EST)
From: james@lrmltd.com
To: Swood
Reply-To: james@lrmltd.com
X-Mailer: The Bat! (v1.62)
X-Priority: 1 (High)
Subject: Re[2]: our private photos favfkzwk
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------3954E87D00044C9"
Message-Id: <20031107221315.DCCCB57BBD@mxr01.hvn01.dsl.net>
Date: Fri, 7 Nov 2003 17:13:15 -0500 (EST)

See if your email will filter this mail and sent it right to your trash as its received, thats what I had to do, was getting tons of mail from the same person with nothing in the content... I just filter it right into the trash.

It's not working. And I've been getting this one too.
I'm about to just give up.


Return-Path:
Delivered-To: swood@lrmltd.com
Received: from fia60-96-100.dsl.hccnet.nl (fia60-96-100.dsl.hccnet.nl [80.100.96.60])
by tooheys.dsl.net (Postfix) with SMTP id 6C29610DE57
for ; Fri, 7 Nov 2003 17:03:22 -0500 (EST)
Received: from 48.114.4.229 by 80.100.96.60; Fri, 07 Nov 2003 04:54:48 -0500
Message-ID:
From: "Snell"
Reply-To: "Snell Riley"
To: swood@lrmltd.com
Subject: Re: XAQZE, this was that
Date: Fri, 07 Nov 2003 16:00:48 +0600
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--14596675971035462"
X-Priority: 1
X-MSMail-Priority: High

Somebody has a virus. Hope your virus scanner is up to date. I had this happen at one of my clients, it settled down after a few days.

Are you the default e-mail for the domain? i.e., if someone sends e-mail to a non-existant account does it default to you?

To me personally? No. It's our offices own domain, but I'm the only one receiving this so far. Its all greekish to me.

It looks to me that you have a worm virus.

Go to www.fprot.com and get the free download and chack your system.

More than likely, you are sending emails that are getting returned because the destination address is either not real, or they have virus protection running at the email server.

this is easy enough to fix with no real harm to your system if you do it soon enough, the longer you wait the more damage it could do to your system depending upon which virus you have.

Rich

One other thing... IMO, don't ever post your email addy on a busy bbs. If you need to, use the bbs's email feature, or break it up like this: xxx (at) msn (dot) com.

Spammer thinks... Hmm... a club of all Porsche interest... who better to sell my viagra to and spiders the whole site with a $10.00 shareware tool. Swood, you've got mail

Another thing spammers are always looking for is real email addresses to use when they "spoof"... some of mine got caught up in that, and as my addy was spoofed as the "sender" I got hundreds of undeliverable mail messages, as well as lots of angry "stop spamming me or I kill ya Jerk" messages.

The "private photos" email is a virus. One of the clues is it's always from "james@yourdomain". It's a relatively new one -- mid last week I believe. And it's a variant of an older one. In that case, someone else has a virus that is using their machine. (it's a sort of a cool one in that it doesn't just use your address book -- it rummages all non-binary files on your system looking for email addresses -- and tries to set up a DOS attack using your machine.)

It probably tried to include an attachement -- a zip file named photos.zip or some such thing.

If you google on "photos.zip" and "virus", you'll get links to the relevant sites -- tho as long as you didn't unzip and run the exe inside, you don't have the problem.

Dunno about the other one.

kim.

edit: fixed yourdomain -- I still get caught on the way angle brackets are handled in posts.