New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

OS 10.4 - Spam coming from my system


Post Reply New Thread Subscribe

 
Thread Tools
voicepipes

 
Member Since: Feb 08, 2007
Posts: 57
voicepipes is on a distinguished road

voicepipes is offline
Hi folks,

Need some help. I'm getting a huge number of returned/undeliverable emails that apparently are coming from one of my email address's. (in that past week perhaps 800)

I'm relatively new to Mac's (one year) and I'm not sure where to find which processes are running that might be sending the mail. I downloaded and ran Sohos (sp?) it didn't find anything. Mac's are generally thought to be "secure" from this type of malware, but I'm no expert.

I'll paste in the returned message below, in case the info may shed some light.

I'm not sure if this sort of thing happens when the spammers just pick an email addie?

It may well be coming from my wife's system (a PC), but I need to sort through the computers one at a time. I'm also behind a Belkin wireless router, which is password secured.

Appreciate the help.

Jeff

Message delivery to '<christianlemoine@xxxx.fr>' delayed
LOCAL module(account eu910561@xxxx.fr) reports:
mail receiving disabled

Reporting-MTA: dns; mailfe08.swip.net

Original-Recipient: rfc822;<christianlemoine@xxx.fr>
Final-Recipient: LOCAL;<eu910561@tele2.fr>
Action: delayed
Status: 4.0.0
Received: from [201.37.69.204] (HELO c92545cc.virtua.com.br)
by mailfe08.swip.net (CommuniGate Pro SMTP 5.1.13)
with ESMTP id 884412508 for christianlemoine@txxx.fr; Wed, 09 Apr 2008 02:53:03 +0200
Message-ID: <000601c899dc$05c17ae5$c3c6ebb9@yfbyuy>
From: "boote kurt" <info@xxxxx.com>
To: <christianlemoine@txxx.fr>
Subject: Only Prestige
Date: Tue, 08 Apr 2008 23:05:38 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0003_01C899DC.05C13670"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
QUOTE Thanks
Dysfunction

 
Dysfunction's Avatar
 
Member Since: Mar 17, 2008
Location: Tucson, AZ
Posts: 6,638
Dysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant future
Mac Specs: 2008 and 2011 15" mbps, late 11 iMac, iPhone 4s, and too many ipods and other stuff

Dysfunction is offline
could well also be from another machine using your email address as a return address. Especially from an info@ email. I've had rashes of those from time to time that I know weren't leaving from my environment.

mike
This machine kills fascists
Got # ? phear the command line!
QUOTE Thanks
mac57

 
mac57's Avatar
 
Member Since: Apr 29, 2006
Location: St. Somewhere
Posts: 4,560
mac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant future
Mac Specs: iMac 27" 3.4 GHz, 256 GB SSD, 2 TB HDD, 8 GB RAM

mac57 is offline
More likely than not, this is not coming from your machine. Instead, a spammer is spoofing your address into their outgoing mail. I am not sure how you come to be the lucky "spoofee", but as Dysfunction mentioned, it seems to happen to all of us over time. I have been the target of a few such rashes of messages as well.

To see if it is coming from your machine, you can load up LittleSnitch, a great little internet monitor, and watch what your machine is doing.

My guess is that you are just the unlucky target of a spammers spoofing, not the source, but you never know. PARTICULARLY if your wife's machine is a Windows based PC. It could be the machine sending out the mail as well. You will need to find a similar sniffer for it. I'm afraid I can't make any recommendations there.

My Macs: iMac 27" 3.4 GHz, Mac Pro 3.2 GHz, PowerMac G5 Quad 2.5 GHz, G4 Cube with 1.2 GHz Upgrade
My iStuff: 64GB iPhone 5, 64GB iPad4, 30GB iPod Video, 16GB iPod Touch
My OS': Mac OS X Lion, Mac OS X Snow Leopard, Mac OS X Tiger, Mac OS 9.2.2, openSUSE 10.3
I was on the Mac-Forums honor roll for September 2007
QUOTE Thanks
Juan Largo

 
Member Since: Jan 31, 2008
Posts: 195
Juan Largo has a little shameless behaviour in the past

Juan Largo is offline
voicepipes -

You posted two e-mail addresses for the whole world to see in your lead-off post. That's one of the ways spammers get their information, so please be more considerate & refrain from doing this in the future ...

But back to your problem.

Begin Rant:

It's likely that you're email address is in someone's address book running on a Windows computer, and that person's computer has been hijacked. I have a relative who refuses to protect his Windows computer and visits questionable web sites. His computer is so loaded down with viruses that it barely runs, but it runs well enough to send out spam to the entire world with my email address as "sender."

People have extremely bad email habits, such as forwarding bogus chain letters to everyone in their address books, so that 10,000 people who will be receiving a fourth-generation copy will see your email address on it. (Why don't people learn to use bcc instead?)

Anways, you can expect this to happen as long as there are idiots in this world.

End of Rant:

Peace and Love,
Juan
QUOTE Thanks
mac57

 
mac57's Avatar
 
Member Since: Apr 29, 2006
Location: St. Somewhere
Posts: 4,560
mac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant futuremac57 has a brilliant future
Mac Specs: iMac 27" 3.4 GHz, 256 GB SSD, 2 TB HDD, 8 GB RAM

mac57 is offline
Quote:
Originally Posted by Juan Largo View Post
You posted two e-mail addresses for the whole world to see in your lead-off post. That's one of the ways spammers get their information
This is an excellent point, and one that is not made nearly often enough. Serious spammers have 'bots that troll forums like these looking for legitimate email addresses in the postings. They "harvest" all the ones they find. For your own sake, never post your email address in the clear. If you need to include your email address in a post, disguise it so that it is readable to humans, but a bit challenging for bots.

For example, an address of:

myaddress@myisp.com

could be entered as:

m y a d d r e s s --at-- m y i s p --dot-- c o m

silly, but somewhat effective.

The best thing to do is to never post a real email address in a forum post.

My Macs: iMac 27" 3.4 GHz, Mac Pro 3.2 GHz, PowerMac G5 Quad 2.5 GHz, G4 Cube with 1.2 GHz Upgrade
My iStuff: 64GB iPhone 5, 64GB iPad4, 30GB iPod Video, 16GB iPod Touch
My OS': Mac OS X Lion, Mac OS X Snow Leopard, Mac OS X Tiger, Mac OS 9.2.2, openSUSE 10.3
I was on the Mac-Forums honor roll for September 2007
QUOTE Thanks
voicepipes

 
Member Since: Feb 08, 2007
Posts: 57
voicepipes is on a distinguished road

voicepipes is offline
Thanks for the heads up on the posting of emails. I've gone back and edited the actual email domains to xxxxx Let them sniff that!

I'll be checking the other PC machine in the house today. Coming from PC's I'm used to using anti everything software.

Just wanted to get some opinions on whether this just happens or it indeed could be coming from the mac. My machine is the only one accessing those email address's. Not to say it couldn't be off the wife's system, I'll still look at the process's running on her machine.

Thanks for the tip on the sniffer, I'll run that to be certain.

appreciate the advice on "forum rules" etc.

Jeff
QUOTE Thanks
Phat Twin

 
Phat Twin's Avatar
 
Member Since: Apr 11, 2011
Location: New Hampsha!
Posts: 4
Phat Twin is on a distinguished road
Mac Specs: iMac 21.5, 4 GB,

Phat Twin is offline
New to the forum, Hi all. Switched to a Mac about a year ago (Thank god!), and recently some people are getting emails about Viagra, etc, from my email account. Crap!

Same four people, no more, and my address book is pretty chocked full of addresses to use.

I look at my email account on the iMac and it does not show any emails being sent from my account at the times that the original emails have been sent. Am I missing something in my mail folder that would show the clues?

I believe that I have home sharing enabled so that my family can use varied iTunes accounts within the family network. And yes, one of the machines is a windows machine. If I shut off that sharing function, should that resolve the issue, or is it too late in my hapless adventure at this point?

Any advice would be greatly appreciated.

I have run scan after scan and also virus scans of the system, with nothing but some cookies showing up? Anyone know were I might want to start?
QUOTE Thanks
chscag

 
chscag's Avatar
 
Member Since: Jan 23, 2008
Location: Fort Worth, Texas
Posts: 40,273
chscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond repute
Mac Specs: 27" iMac i5, 3.2 GHz, iPad 3, iPhone 5c, 3 iPods, OS X Mavericks

chscag is offline
You can start by changing your ISP mail access password to a stronger one. If the garbage continues after that, you may have to kill that account and obtain a new one.
QUOTE Thanks

Post Reply New Thread Subscribe


« Mac OSX screen shot not working | iPhoto: can't open it in 10.6 »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Four Mac OS X upgrades in three years... too much? Murlyn Apple Rumors and Reports 73 01-08-2014 02:18 PM
Infraction and Warning System schweb News and Community Announcements 26 05-11-2007 12:57 PM
Kid Account and System Integrity mathogre OS X - Operating System 1 04-15-2007 07:53 PM
Help me fix my G3 system that I dropped durring ice storm janstrock Apple Desktops 4 03-21-2007 09:43 PM
Version code names? EchoBeach OS X - Operating System 8 10-13-2005 03:00 PM

All times are GMT -4. The time now is 02:27 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?