Over the past few days have had in excess of 4,500 emails all with failed Daemon delivery message, as below, the supposed failed email recipients all end with ru ( russian ) example below, just done a clean out of 1400 and an hour later another 1400!! the pain is it is my main Zedworld email addy that I have used for 14 years, I have blocked all of them so they go straight to the recycle bin but it still takes an age with there been so many. I suppose I could collect my emails at the server and delete without down load but still a pain, If I stop using the mail addy I fear it I will end up with thousands of mails in there, is it likely my email has just been random used, I know my pc is not sending these out and I am not bouncing them back either as that can sometimes varify the email addy, what to do? any idea`s. what I am trying to determine if the email is complete scam as it pretends to be a genuine fail to deliver notice or is it a real failure to delivery because a machine elsewhere is using my email to send out to the ru addys???

 

Merry Christmas.

 

Jeff TT

 

Header of one of the mails

 

Return-path:

Envelope-to: jeff@zedworld.co.uk

Delivery-date: Sun, 22 Dec 2013 16:19:52 +0000

Received: from mailnull by server3.velnetweb.co.uk with local (Exim 4.82)

id 1Vulku-002cVd-Ry

for jeff@zedworld.co.uk; Sun, 22 Dec 2013 16:19:52 +0000

X-Failed-Recipients: proxim8286@rambler.ru

Auto-Submitted: auto-replied

From: Mail Delivery System

To: jeff@zedworld.co.uk

Subject: Mail delivery failed: returning message to sender

Message-Id:

Date: Sun, 22 Dec 2013 16:19:52 +0000

Content-Type:

 

....................................................................................................................................................

 

Trace on the header scource

 

Received: from mailnull by server3.velnetweb.co.uk with local (Exim 4.82) id 1Vulku-002cVd-Ry for jeff@zedworld.co.uk; Sun, 22 Dec 2013 16:19:52 +0000

X-Failed-Recipients: proxim8286@rambler.ru

Auto-Submitted: auto-replied

From: Mail Delivery System

To: jeff@zedworld.co.uk

Subject: Mail delivery failed: returning message to sender

Message-Id:

Date: Sun, 22 Dec 2013 16:19:52 +0000

Content-Type:

 

Source:

No IP address identified.

 

 

Whois:

No IP address identified.

 

......................................................................................................................................................

 

E-mail content

 

 

From: Mail Delivery System

Date: 22/12/2013 16:19:52

To: jeff@zedworld.co.uk

Subject: Mail delivery failed: returning message to sender

 

 

 

 

This message was created automatically by mail delivery software.

 

A message that you sent could not be delivered to one or more of its

recipients. This is a permanent error. The following address(es) failed:

 

proxim8286@rambler.ru

SMTP error from remote mail server after RCPT TO::

host imx1.rambler.ru [81.19.66.234]: 550 5.1.1 :

Recipient address rejected: user not found

 

------ This is a copy of the message, including all the headers. ------

 

Return-path:

Received: from [182.89.177.218] (port=2907 helo=Unknown)

by server3.velnetweb.co.uk with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.82)

(envelope-from )

id 1Vulkq-002cTf-83

for proxim8286@rambler.ru; Sun, 22 Dec 2013 16:19:52 +0000

Message-ID:

From: "K.Fadeeev"

To:

Subject: =?windows-1251?B?xO7h8PvpIOTl7fwg8SDt4PHy8+/g/vno7Ogg?=

=?windows-1251?B?4uDxIO/w4Ofk7ejq4OzoIQ==?=

Date: Sun, 22 Dec 2013 18:17:49 +0400

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2133_01CEFF42.1F229E90"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Windows Live Mail 14.0.8089.726

X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8089.726

 

This is a multi-part message in MIME format.

 

------=_NextPart_000_2133_01CEFF42.1F229E90

Content-Type: text/plain;

charset="windows-1251"

Content-Transfer-Encoding: quoted-printable

 

=D1 =ED=EE=E2=FB=EC =E4=ED=E5=EC =C2=E0=F1!

 

 

=D5=EE=F2=E5=EB =E2=E0=EC =EF=F0=E5=E4=EB=EE=E6=E8=F2=FC ,=F3=ED=E8=EA=E0=

=EB=FC=ED=F3=FE =F1=E8=F1=F2=E5=EC=F3 ,=EA=EE=F2=EE=F0=F3=FE =F0=E0=E7=F0=

=E0=E1=E0=F2=FB=E2=E0=EB=E8 =E3=EE=E4=FB =F1=EF=E5=F6=E8=E0=EB=E8=F1=F2=FB=

=E4=EB=FF =E0=E2=F2=EE=EC=E0=F2=E8=F7=E5=F1=EA=EE=E9 =F0=E0=E1=EE=F2=FB =

=E8 =EF=EE=EB=F3=F7=E5=ED=E8=FF =EF=F0=E8=E1=FB=EB=E8!

=D1=E8=F1=F2=E5=EC=E0 =EF=F0=EE=F1=F2=E0 =E4=EB=FF =ED=EE=E2=E8=F7=EA=EE=E2=

, =E4=EE=F1=F2=E0=F2=EE=F7=ED=EE =E7=E0=F0=E5=E3=E8=F1=F2=F0=E8=F0=EE=E2=E0=

=F2=FC=F1=FF =FD=F2=EE =E1=E5=F1=EF=EB=E0=F2=ED=EE =E8 =ED=E5 =E1=EE=EB=E5=

=E5 5 =F1=F2=F0=EE=EA =E8 =EF=EE=F1=F2=E0=E2=E8=F2=FC =F1=E8=F1=F2=E5=EC=F3=

=E2 =F0=E5=E6=E8=EC "=C0=C2=D2=CE =D0=C5=C6=C8=CC"!

=C8 =EC=EE=E6=ED=EE =ED=E0=E1=EB=FE=E4=E0=F2=FC =EA=E0=EA =F1=E8=F1=F2=E5=

=EC=E0 =E1=F3=E4=E5=F2 =E7=E0=F0=E0=E1=E0=F2=FB=E2=E0=F2=FC =E4=E5=ED=FC=E3=

=E8 =E4=EB=FF =C2=E0=F1 =E2 =F0=E5=E0=EB=FC=ED=EE=EC =E2=F0=E5=EC=E5=ED=E8=

!

=D0=E5=EA=EE=EC=E5=ED=E4=F3=FE =EF=F0=EE=F1=F2=EE =EF=EE=EF=F0=EE=E1=EE=E2=

=E0=F2=FC, =FD=F2=EE =EE=F2=EB=E8=F7=ED=EE=E5 =F0=E5=F8=E5=ED=E8=FF =E4=EB=

=FF =F0=E0=E1=EE=F2=FB =ED=E0 =E4=EE=EC=F3 ,=F2=EE=EB=FC=EA=EE =E1=E5=E7 =

=C2=E0=F8=E5=E3=EE =F3=F7=E0=F1=F2=E8=FF! =C2=F1=E5 =E0=E2=F2=EE=EC=E0=F2=

=E8=E7=E8=F0=EE=E2=E0=ED=EE!

 

 

=C8=ED=F1=F2=F0=F3=EA=F6=E8=FE =E8 =F0=E5=E3=E8=F1=F2=F0=E0=F6=E8=FE =E2 =

=F1=E8=F1=F2=E5=EC=E5 =C2=FB =ED=E0=E9=E4=E5=F2=E5 =E2 =EC=EE=E5=EC =C1=EB=

=EE=E3=E5 http://goo.gl/vQ4yRl

 

 

 

 

 

 

=D1 =D3=E2. =CA=EE=ED=F1=F2=E0=ED=F2=E8=ED.

 

------=_NextPart_000_2133_01CEFF42.1F229E90

Content-Type: text/html;

charset="windows-1251"

Content-Transfer-Encoding: quoted-printable

 

Type>

face=3DArial>=D1 =ED=EE=E2=FB=EC =E4=ED=E5=EC =C2=E0=F1!

 

 

=D5=EE=F2=E5=EB =E2=E0=EC =EF=

=F0=E5=E4=EB=EE=E6=E8=F2=FC ,=F3=ED=E8=EA=E0=EB=FC=ED=F3=FE =F1=E8=F1=F2=E5=

=EC=F3=20

,=EA=EE=F2=EE=F0=F3=FE =F0=E0=E7=F0=E0=E1=E0=F2=FB=E2=E0=EB=E8 =E3=EE=E4=FB=

=F1=EF=E5=F6=E8=E0=EB=E8=F1=F2=FB =E4=EB=FF =E0=E2=F2=EE=EC=E0=F2=E8=F7=E5=

=F1=EA=EE=E9 =F0=E0=E1=EE=F2=FB =E8 =EF=EE=EB=F3=F7=E5=ED=E8=FF=20

=EF=F0=E8=E1=FB=EB=E8!

=D1=E8=F1=F2=E5=EC=E0 =EF=F0=

=EE=F1=F2=E0 =E4=EB=FF =ED=EE=E2=E8=F7=EA=EE=E2, =E4=EE=F1=F2=E0=F2=EE=F7=

=ED=EE=20

=E7=E0=F0=E5=E3=E8=F1=F2=F0=E8=F0=EE=E2=E0=F2=FC=F1=FF =FD=F2=EE =E1=E5=F1=

=EF=EB=E0=F2=ED=EE =E8 =ED=E5 =E1=EE=EB=E5=E5 5 =F1=F2=F0=EE=EA =E8 =EF=EE=

=F1=F2=E0=E2=E8=F2=FC =F1=E8=F1=F2=E5=EC=F3 =E2 =F0=E5=E6=E8=EC=20

"=C0=C2=D2=CE =D0=C5=C6=C8=CC"!

=C8 =EC=EE=E6=ED=EE =ED=E0=E1=

=EB=FE=E4=E0=F2=FC =EA=E0=EA =F1=E8=F1=F2=E5=EC=E0 =E1=F3=E4=E5=F2=20

=E7=E0=F0=E0=E1=E0=F2=FB=E2=E0=F2=FC =E4=E5=ED=FC=E3=E8 =E4=EB=FF =C2=E0=F1=

=E2 =F0=E5=E0=EB=FC=ED=EE=EC =E2=F0=E5=EC=E5=ED=E8!

=D0=E5=EA=EE=EC=E5=ED=E4=F3=

=FE =EF=F0=EE=F1=F2=EE =EF=EE=EF=F0=EE=E1=EE=E2=E0=F2=FC, =FD=F2=EE=20

=EE=F2=EB=E8=F7=ED=EE=E5 =F0=E5=F8=E5=ED=E8=FF =E4=EB=FF =F0=E0=E1=EE=F2=FB=

=ED=E0 =E4=EE=EC=F3 ,=F2=EE=EB=FC=EA=EE =E1=E5=E7 =C2=E0=F8=E5=E3=EE =F3=

=F7=E0=F1=F2=E8=FF! =C2=F1=E5=20

=E0=E2=F2=EE=EC=E0=F2=E8=E7=E8=F0=EE=E2=E0=ED=EE!

 

 

=C8=ED=F1=F2=F0=F3=EA=F6=E8=

=FE =E8 =F0=E5=E3=E8=F1=F2=F0=E0=F6=E8=FE =E2 =F1=E8=F1=F2=E5=EC=E5 =C2=FB=

=20

=ED=E0=E9=E4=E5=F2=E5 =E2 =EC=EE=E5=EC =C1=EB=EE=E3=E5 

href=3D"http://goo.gl/vQ4yRl">http://goo.gl/Zubd51

 

 

 

 

 

 

=D1 =D3=E2. =CA=EE=ED=F1=F2=

=E0=ED=F2=E8=ED.

 

 

/HTML>

 

------=_NextPart_000_2133_01CEFF42.1F229E90--

Unfortunately its not hard to send an email to someone and pretend its from your account so that you get the replies.

 

However its more likely someone has either guessed your password or used a 'brute force attack' to 'crack' your password.

 

Have you changed your password since?

Unfortunately its not hard to send an email to someone and pretend its from your account so that you get the replies.

 

However its more likely someone has either guessed your password or used a 'brute force attack' to 'crack' your password.

 

Have you changed your password since?

 

 

No, good idea just in case.

 

Jeff

Look like your being targeted by spam for some reason.

 

two things you can do :

 

ask your our email host to enable anti spam for your accounts like spam assassin.

 

or

 

change your email to something less targetable by a dictionary lookup.

 

basically your email has just your name so is way more prone to getting spammed by systems

that spam based on dictionary words.

True that's it's very easy to spoof an address but there's easier ways to send email than trying to crack a legit email account to do it.

 

more likely your email / domain name is being used as a return address.

 

for peace of mind change your password and install antispam software.

 

only thing about doing anti spam on your local pc is that you still need to download the email first.

 

a antispam based on the server is better and most service providers should be able to provide it.

True that's it's very easy to spoof an address but there's easier ways to send email than trying to crack a legit email account to do it.

 

I've had it happen to both my BT Yahoo and my Hotmail email accounts, although with them they got in and then changed the password so I couldn't get in until I spoke to security and got it reset, they also changed my DOB etc on the BT Yahoo one to make it take me ages to convince security I was who I said I was!

Each time it must have been a brute force attack as my passwords aren't dictionary based and I am careful about what computers/networks I use so defo wasn't caught by a keylogger etc either.

its a virouse and what will happen once you eventally sort that out your computor will be sendind out emails to everyone in your contacts list so with no suject heading then they will open it up by mistake or out of curiosaty then the circle starts again. only with all your family and freinds at best at the moment you have to tell your contacts not to open them with no subject. good luck.

Royal pain in the ass, cleaned out two lots today both around 1400 mails did the same yesterday, now just looked again and another 1600 argh!!!! will clean them out, switch off my email client and check later today see if anything happened.

 

 

Jeff TT

Can you turn off your pc and connect to your email from another pc to see if they still build up.

Can you turn off your pc and connect to your email from another pc to see if they still build up.

 

Yes good idea, will try that as well, my pc is so slow anyhow it would surprise me it is sending out thousands of emails without me knowing as it would fall over I am sure.

 

 

Jeff