Dangerous Emails-need Some Help
Hi everyone,
I'm currently on vacation in South Carolina and I can only use the comps here for a few minutes. Here's the deal: I was checking my emails and i received a SHITLOAD of emails from "Mail Delivery Subscription:, I'll copy and paste what i'm talkin about"
Mail Delivery Subsys... Returned mail: see transcript for details Aug 21 101k
Mail Delivery Subsys... Returned mail: User unknown Aug 21 4k
Mail Delivery Subsys... Returned mail: Service unavailable Aug 21 4k
Mail Delivery Subsys... Returned mail: Service unavailable Aug 21 4k
Mail Delivery Subsys... Returned mail: see transcript for details Aug 21 100k
Mail Delivery Subsys... Returned mail: Service unavailable Aug 21 4k
Mail Delivery Subsys... Returned mail: see transcript for details Aug 21 100k
These are the emails in the inbox screen. Now I haven't sent any emails out so there should be no emails to be returned. I opened teh emails and this is what I got.
Content-Type: text/plain
The original message was received at Wed, 20 Aug 2003 23:32:14 -0400 (EDT)
from rrcs-midsouth-24-199-248-51.biz.rr.com [24.199.248.51]
*** ATTENTION ***
Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".
The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".
The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.
Please direct further questions regarding this message to your e-mail
administrator.
--AOL Postmaster
----- The following addresses had permanent fatal errors -----
<[email protected]>
----- Transcript of session follows -----
... while talking to air-xm04.mail.aol.com.:
>>> DATA
<<< 554 TRANSACTION FAILED - Unrepairable Virus Detected. Your mail has not been sent.
554 <[email protected]>... Service unavailable
Content-Type: message/delivery-status
Reporting-MTA: dns; rly-xm02.mx.aol.com
Arrival-Date: Wed, 20 Aug 2003 23:32:14 -0400 (EDT)
Final-Recipient: RFC822; [email protected]
Action: failed
Status: 5.0.0
Remote-MTA: DNS; air-xm04.mail.aol.com
Diagnostic-Code: SMTP; 554 TRANSACTION FAILED - Unrepairable Virus Detected. Your mail has not
been sent.
Last-Attempt-Date: Wed, 20 Aug 2003 23:32:56 -0400 (EDT)
Content-Type: text/rfc822-headers
Attachment : attach4 (1k)
THIS IS THE EMAIL THATS 4k IN SIZE
------------------------------------------------
>THIS IS THE EMAIL WITH THE 100K size:
Content-Type: text/plain
The original message was received at Thu, 21 Aug 2003 00:06:18 -0400
from rrcs-midsouth-24-199-189-226.biz.rr.com [24.199.189.226]
----- The following addresses had permanent fatal errors -----
<[email protected]>
(reason: 550 <[email protected]>: User unknown in local recipient table)
----- Transcript of session follows -----
... while talking to xmxpita.excite.com.:
>>> RCPT To:<[email protected]>
<<< 550 <[email protected]>: User unknown in local recipient table
550 5.1.1 <[email protected]>... User unknown
Content-Type: message/delivery-status
Reporting-MTA: dns; mail02.power-linx.com
Received-From-MTA: DNS; rrcs-midsouth-24-199-189-226.biz.rr.com
Arrival-Date: Thu, 21 Aug 2003 00:06:18 -0400
Final-Recipient: RFC822; [email protected]
Action: failed
Status: 5.1.1
Remote-MTA: DNS; xmxpita.excite.com
Diagnostic-Code: SMTP; 550 <[email protected]>: User unknown in local recipient table
Last-Attempt-Date: Thu, 21 Aug 2003 00:06:22 -0400
Content-Type: message/rfc822
From :
<[email protected]>
To :
<[email protected]>
Subject :
Re: Approved
Date :
Wed, 20 Aug 2003 23:52:43 --0400
Attachment : wicked_scr.scr (97k)
MIME-Version: 1.0
Received: from BUSINESSCENTER1 (rrcs-midsouth-24-199-189-226.biz.rr.com [24.199.189.226])by mail02.power-linx.com (8.10.2/8.10.2) with ESMTP id h7L46IT26699for <[email protected]>; Thu, 21 Aug 2003 00:06:18 -0400
Return-Path:
Message-Id: <[email protected]>
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
Content-Type: multipart/mixed; boundary="_NextPart_000_0B26784F"
MIME-Version: 1.0Received: from BUSINESSCENTER1 (rrcs-midsouth-24-199-189-226.biz.rr.com [24.199.189.226])by
mail02.power-linx.com (8.10.2/8.10.2) with ESMTP id h7L46IT26699for <[email protected]>; Thu, 21
Aug 2003 00:06:18 -0400Return-Path: <>Message-Id: <[email protected]>X-MailScanner: Found to be cleanImportance: NormalX-Mailer: Microsoft Outlook Express 6.00.2600.0000X-MSMail-Priority: NormalX-Priority: 3 (Normal)
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Please see the attached file for details.
Content-Type: application/octet-stream; name="wicked_scr.scr"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;filename="wicked_scr.scr"
Attachment : wicked_scr.scr (97k)
I'm guessing its a virus lol. At return path was my email but i deleted it to protect myself from spam bots. Also, I have no clue who [email protected] is. Can you please do some search and see what u can figure out. I'll be very grateful for your help. I'd normally do it myself but i'm away and dont have my tools on me until the 25th. Maybe i have an email in my comp at home which has tried to email itself...I GOT NO CLUE :). I haven't been able to connect to my hotmail through my PC at home for some weird reason but i've been able to connect through my brother's laptop which is connected to the same network.
peace :)
