my profile | my password | search | faq & rules | forum home

» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Bounced Mail I Never Sent

Author Topic: Bounced Mail I Never Sent Steve Kraus Film God Posts: 4094 From: Chicago, IL, USA Registered: May 2000 posted 09-07-2003 09:14 PM                    I've been getting occasional bounce messages from messages I never sent, either for bad addresses but also ones that were rejected for nefarious attachments. This is on an address I closely guard and almost never gets spam (if I get 2 in a month it's a lot). Anyone else having this problem? I don't think I have a virus sending out mail I don't know about (and there is no sign it actually originated with me). FWIW I do not use Outlook and the messages either came from it or are made to look like they did. Recipients are not anyone I know.  |  IP: Logged Sam Hunter Jedi Master Film Handler Posts: 779 From: West Monroe, LA, USA Registered: Jan 2002 posted 09-07-2003 09:18 PM                     Its the sobig virus on other folks computers. Your computer did not send them. Sobig obtained your address from someone elses address book and used it as the sending address in its attempt to infect more PC's.  |  IP: Logged Kenneth Wuepper Phenomenal Film Handler Posts: 1026 From: Saginaw, MI, USA Registered: Feb 2002 posted 09-07-2003 09:25 PM                     I have experienced this same problem. There are letters which are proported to come from my computer. They are to people who are not on my mail list. The common thread is an attachment "To Class" which I have never opened. My sister in law is at a university and they had a virus in their system. I believe that this may have been the source of my funny e-mails.  |  IP: Logged Joe Redifer You need a beating today Posts: 12859 From: Denver, Colorado Registered: May 99 posted 09-07-2003 09:54 PM                        I have also been seeing this. Sometimes they have a PIF attachment. The addresses they were attempted to be sent to always seem to be foriegn, with ".dk" in the address somewhere. I may get a few bad looks from people who consider themselves pro-life (not my intention to offend), but people who write viruses, worms, perform identity theft, etc sure make a strong argument for abortion, as I wish they would have been. If only we could've known in advance.  |  IP: Logged Steve Kraus Film God Posts: 4094 From: Chicago, IL, USA Registered: May 2000 posted 09-07-2003 10:19 PM                    That which you didn't abort you can always execute.  |  IP: Logged Joe Redifer You need a beating today Posts: 12859 From: Denver, Colorado Registered: May 99 posted 09-07-2003 10:58 PM                        Fair enough.  |  IP: Logged Richard C. Wolfe Master Film Handler Posts: 250 From: Northampton, PA, USA Registered: Apr 2000 posted 09-07-2003 11:54 PM                        I have received quite a few of these recently. I did read a few of them and found the same as the rest of you that they had not been sent by me. I refused to open any attachments or downloads, and now won't even bother to read them. I just delete them.  |  IP: Logged Ken Layton Phenomenal Film Handler Posts: 1452 From: Olympia, Wash. USA Registered: Sep 1999 posted 09-08-2003 12:48 AM                     I've been getting them too. Every one of them gets the "delete" treatment!  |  IP: Logged Leo Enticknap Film God Posts: 7474 From: Loma Linda, CA Registered: Jul 2000 posted 09-08-2003 01:23 AM                        Steve: I think the source of your bounced messages is as follows: Computer A is infected with SoBig, which disguises its origin by taking e-mail addresses at random from its Outlook address book and putting them in the 'from' field. Your name is in that address book, ergo a SoBig message is sent by Computer A to Computer B looking like it came from you. Either Computer B's ISP has a built-in virus filter which recognises the virus and bounces the message back to the address in the 'from' field (i.e. yours), or Computer B's owner uses a utility such as Mailwasher to manually bounce it themself. The bottom line here is that if you do use a mail previewing and bouncing program, bounce spams only, not viruses. If you bounce a virus which has forged the 'from' field to disguise its origin, you'll only confuse the situation and suggest to an innocent third party that his/her computer is infected.  |  IP: Logged Jack Ondracek Film God Posts: 2348 From: Port Orchard, WA, USA Registered: Oct 2002 posted 09-08-2003 02:08 AM                        It's been a couple of days since I've received any of these... but I got a lot of them before that. All said that I had sent messages that were found to be "clean". The originating IPs were all screwy and there were no attachments. Sure is getting to be interesting, being on this party line!  |  IP: Logged Sam Hunter Jedi Master Film Handler Posts: 779 From: West Monroe, LA, USA Registered: Jan 2002 posted 09-08-2003 09:08 AM                     As I said, it's the SOBIG virus causing that and you shouldn't open such emails. The virus is on the other folks computers and you would be well advised to install/run a decent virus scan to check yours for it as well.  |  IP: Logged Jack Ondracek Film God Posts: 2348 From: Port Orchard, WA, USA Registered: Oct 2002 posted 09-08-2003 01:50 PM                        quote: ...it's the SOBIG virus causing that and you shouldn't open such emails. Nahhhhh.... I just send them on to Ken!  |  IP: Logged Sam Hunter Jedi Master Film Handler Posts: 779 From: West Monroe, LA, USA Registered: Jan 2002 posted 09-08-2003 02:24 PM                     I remember getting that on my company email system and I use Eudora as my home email client. I freaked out because I was thinking why didn't my Virus scan catch that? I couldn't find where I had sent any emails in my sent items box and all that. I did however find that even though my Virus scanner said it was updated I did a manual update check and found a new version upon once downloaded and ran found many instances of the bug in my PC. This was in the late evening when I had found this and my Virus scan had just updated that morning. What a pisser. Anyway, can't wait for the next round of bugs  |  IP: Logged Don Bruechert Mmmmmmmmm, bird! Posts: 340 From: Manitowoc, WI, USA Registered: Jan 2003 posted 09-08-2003 04:26 PM                        Nice thing about running your own mailserver is that I have a set of scripts that deletes this crap before it ever gets into my mailbox. So far I had only been using it for me, but today I installed it for someone else who has a mail account on my server that had 600 of these little bastages in her mailbox this morning (that's 50MB of viruses!). She bitched after spending 2 hours trying to delete them all, and I mass deleted about 400 of them off the server which took me about 2 hours. Then they were coming in so fast this afternoon that I couldn't keep up with them, so I installed the toy and they are no more... us boys and our toys... anyone running unix/linux with procmail and postfix or sendmail can check out www.spambouncer.org (this does not work for end users).  |  IP: Logged Bobby Henderson "Ask me about Trajan." Posts: 10973 From: Lawton, OK, USA Registered: Apr 2001 posted 09-08-2003 05:05 PM                     E-mail address spoofing is nothing new. Lots of viruses have done it in the past. Also, beware of incoming messages disguised to look like they have bounced back or other messages made to look like they're from your ISP or Microsoft. I always laugh at the one titled "Microsoft Security Patch". There should be a death camp for virus writers.  |  IP: Logged

All times are Central (GMT -6:00)

Printer-friendly view of this topic

Hop To: Select a Forum: Category: Operations -------------------- Digital Cinema Forum Film Handlers' Forum Large Format Forum Ground Level Feature Info, Trailer Attachments & REAL Credit Offsets Category: Community -------------------- Film-Yak Film Handlers' Movie Reviews The Afterlife Bob Maar's Joke-A-Thon Category: Classified -------------------- Equipment and Supplies Wanted/For Sale Help Wanted/Seeking Employment Category: System -------------------- Software Beta Testing Forum

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.