weird spam in yahoo accounts
 

i just was wondering. i have some spam on my yahoo account that is quite weird. i get spam emails with viruses coming from the same email address i use to send... for instance, if i send an email to [email protected] i might get an email back like this:

[email protected] with the subject: RE: your document, and an attached file which is a virus...

does any yahoo user have the same problem??

Never... it sounds weird.

happens to me alot. I get like 500 of those/day on one of my domains.

i get like 800 a day on one of my domains that say stuff like "change ur current job now talked " and "y stupidly working for low salary?"
Somehow they all seem to get past my ISP's spam filter (which worked perfect until this shit started)

Nah, they're not actually using the mail server on your domain.

They are using an open relay of some sort ... possibly an outdated send mail script, or just a normal non-secured smtp server.

old, unsecured smtp servers (they used to almost all be this way) will relay email TO and FROM just about anyone without confirming the senders identity.


Thank God they are slowly but surely getting updated / shutdown.

-P

The recipient you are sending email is most likely infected with the Netsky virus.

"W32/Netsky is a family of mass-mailing worms that spread by email using addresses obtained from the infected computer. They have their own SMTP delivery engine that sends infected messages directly to the recipient's mail server. It also spreads via local networks by trying to copy itself to shared folders on drives C: to Z:. The worms randomly select an address as the "From:" address: therefore the apparent sender of the infected email is not the real sender and their computer is probably not infected.

The subject header of the message is randomly chosen from a large number of strings. The message text is also randomly chosen. In most cases, the message is meant to look like a system generated message, such as an error report from a mail server.

The worm is contained in an executable file attachment, whose name is also chosen from a large number of possible names. It may or may not have a double extension (like mp3.pif) and it may be contained in a Zip or Rar archive, which in some variants may be password protected.

When activated, the worm may display a message. The worm then copies itself to the hard disk and installs a Registry entry so that it is run automatically at startup. The worm then executes this file in order to propagate using the methods described above.

W32/Netsky variants remove registry values in order to deactivate some earlier viruses, if present. Some variants may initiate a denial-of-service attack on certain websites at certain periods, others can be used as a backdoor into the system if not blocked by a firewall.

W32/Netsky.V installs an FTP server and a web server on the infected computer, which can be used by an attacker to obtain information about the system or install other malicious software, once alerted by an email sent by the virus."
[Source: Tech-Pro.net ]

You can download a removal tool from Symantec

I had the same problem, i was receiveing/sending out those emails, without my knowledge, but after running the removal tool, everything went back to normal and get rid of this ugly virus.

Take care :)

hey thank you very much for all you info and help!!!

:thumbsup

yes i have same problem with spamming and usualy i don't open it because few friends are sending me e-mails os i don't beleive to any of that e-mails...