| Author |
Message |
|
Tao
|
Post subject: Infected PC?  Posted: Wed Jul 11, 2007 10:04 am |
|
 |
| Thai lady boy |
 |
Joined: Wed Apr 06, 2005 12:37 am
Posts: 2698
Location: Somewhere up North
|
|
Ok the computer at work is acting strange.
Whwnever outlook is opened up there is a load of returned undeliverable emails, if you look at who the email is from its from the senders name is made up off the first name of the user of that pc, (although the normal mailing address for the company is just mail@....) plus a string of random letters.
The actual content of the emails that are being returned are for Viagra, which I am pretty sure we arent selling.
I have scanned the PC with AVG, and also ran adaware, and spybot, none of them are showing up anything looks has the computer been infected wth something to make it act like a zombie.
Any advice?
_________________
Ultima Ratio Regum
|
|
  |
|
 |
|
SO19Firearms=GCHQ=
|
Post subject: Posted: Wed Jul 11, 2007 10:18 am |
|
|
| call me J-Lo ;-) |
 |
Joined: Thu Oct 28, 2004 3:54 pm
Posts: 10761
Location: Making magic!
|
|
Are they actually returned mails? Or just "labelled"?
_________________
Yeah, but a good joke is a good joke - Lemon=GCHQ=
It is JGC right? Or did i just piss my pants in front the geeks? - Wowyouareacow
Just loading up now....
Stay Frosty
|
|
| |
|
|
|
Tao
|
Post subject: Posted: Wed Jul 11, 2007 11:01 am |
|
|
| Thai lady boy |
|
Joined: Wed Apr 06, 2005 12:37 am
Posts: 2698
Location: Somewhere up North
|
How do you tell the difference between it being returned and just labelled as returned? It looks like its returned but I am not sure for defiite.
You get an email in your outlook inbox that says.
Quote: Undeliverable: Still not the one The bit after the colon changes is differewnt each time, typical spam fake headings though like, Did you get this?..etc. A bunch of attachmenst for a returned message. details.txt, the message itself, and a AVG email cert. Then the 'returned? email text' Quote: Your message To: Dell Ford Cc: Janna; Marylee Jacobs; Kristie; Alejandro; Celine Garza; Tawanna Cox; Sigrid Ramos; Tran Harvey Subject: Still not the one Sent: Wed, 11 Jul 2007 04:20:11 +0100 did not reach the following recipient(s): fox6662@mailbox1.euphonynet.be on Wed, 11 Jul 2007 04:24:03 +0100 The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator. < bishop.besite.be #5.0.0 X-Postfix; permission denied. Command output: User quota exceeded. Mailbox vol. Boite postal est plein.> Random names, none that are from our addrress book that I can see, although we are getting a good 20 odd of these messages each day.[/quote]
_________________
Ultima Ratio Regum
|
|
| |
|
|
|
Apocalypse
|
Post subject: Posted: Wed Jul 11, 2007 11:32 am |
|
|
| Stat Whore |
 |
Joined: Sat Oct 22, 2005 2:26 am
Posts: 3152
Location: Ireland
|
are they in your inbox or your sentbox?
if they're in your inbox then it's probably just a spambot that got hold of your addy....if they're in your sentbox.....then i'd say something is up  _________________ 
OGame FAQ
|
|
| |
|
|
|
Tao
|
Post subject: Posted: Wed Jul 11, 2007 11:56 am |
|
|
| Thai lady boy |
|
Joined: Wed Apr 06, 2005 12:37 am
Posts: 2698
Location: Somewhere up North
|
|
Doh should have checked that. Nothing in Sent box and all the mails coming d from one domain by the looks of it, guess where just being targeted, bedding company, viagra spam mebbe they want to strike up a partnership, must be those waterproof duvets.
_________________
Ultima Ratio Regum
|
|
| |
|
|
|
Apocalypse
|
Post subject: Posted: Wed Jul 11, 2007 12:10 pm |
|
|
| Stat Whore |
|
Joined: Sat Oct 22, 2005 2:26 am
Posts: 3152
Location: Ireland
|
ya must be 
get an admin on the system to block the sender(maybe you can do it yourself), or get a spam filter,
then see if you keep getting them  _________________
OGame FAQ
|
|
| |
|
|
|
Tao
|
Post subject: Posted: Wed Jul 11, 2007 12:37 pm |
|
|
| Thai lady boy |
|
Joined: Wed Apr 06, 2005 12:37 am
Posts: 2698
Location: Somewhere up North
|
Anyone recommend a good free spam filter. I'll block the emails currently the office network consist of one computer with a BT USB ADSL modem, so its not exactly sophisticated. 
_________________
Ultima Ratio Regum
|
|
| |
|
|
|
GeneralPublic=GCHQ=
|
Post subject: Posted: Wed Jul 11, 2007 12:39 pm |
|
|
| Saints ftw!! |
 |
Joined: Fri Apr 23, 2004 6:22 pm
Posts: 7877
Location: /dev/null
|
or some kind soul is spamming the world, and using your email address.... 
We've had it here a few times, theres not much you can do about it.
Try this for removing spam - it's the best one I've found that runs on the client itself.
_________________
Insert unfunny comment here ->
|
|
| |
|
|
|
Tao
|
Post subject: Posted: Wed Jul 11, 2007 3:04 pm |
|
|
| Thai lady boy |
|
Joined: Wed Apr 06, 2005 12:37 am
Posts: 2698
Location: Somewhere up North
|
GeneralPublic=GCHQ= wrote: or some kind soul is spamming the world, and using your email address.... That was my worry, I've set up a rule to block the domain, but I thought he.local was something to do with the actual pc, rather than a domain name hence the worry. Panda found something, downloader.jou on the PC, but AVG didnt find anything so I am going to watch it for a few days. GeneralPublic=GCHQ= wrote: Try this for removing spam - it's the best one I've found that runs on the client itself. I'll give that one a shot.
Thanks all.
_________________
Ultima Ratio Regum
|
|
| |
|
|
|
Apocalypse
|
Post subject: Posted: Thu Jul 12, 2007 2:49 pm |
|
|
| Stat Whore |
|
Joined: Sat Oct 22, 2005 2:26 am
Posts: 3152
Location: Ireland
|
|
| |
|
|
|
Tao
|
Post subject: Posted: Thu Jul 12, 2007 3:02 pm |
|
|
| Thai lady boy |
|
Joined: Wed Apr 06, 2005 12:37 am
Posts: 2698
Location: Somewhere up North
|
Not suprised the person who worked there before used to go on all sorts of crappys ringtone sites and stuff like that. 
_________________
Ultima Ratio Regum
|
|
| |
|
|
|
