Yahoo Email

[kcsx]

Greetings,

I signed up my Yahoo Plus account, however haven't used spam cop because I was astonished when I opened up my OutlookExpress to find that there were over 35K to be downloaded. Now thats Thousand. Needless to say I stopped the dwnload. Went to the Yahoo website and found that in the Junk box it was true. 35+Thousand junkmail and over 3thousand emails in my inbox.

Believe me I dont ever get this much email. I contacted Yahoo by Telephone and they told me I could have a worm on my pc. I have Norton on my unit and it runs daily. No virus/worm.

I looked at the headers and sure enough the someone else is using my email. So this is forgery right? What I need to know if my email is on the list. How does one figure out their own ISP numbers? I used to remember how to do this, but old age settles in and well if you are in my shoes you understand.

Thanks for your help.

[Wazoo]

I don't see any reference to a MailHost Configuration issue .... a Reporting issue question doesn't seem to be asked .. so moving this to the Lounge area for starters ...

The story told would suggest that your "new" account was previously used (and probably abandoned) ... why a "worm on your PC" would allegedly generate thousands of e-mails to yourself must be a pretty interesting situation, but ...????

You ask about "ISP numbers" .. but I'm guessing that you aren't sure of what you're asking. There are FAQs available here .... the SpamCop FAQ links on this page would lead you to things like "What's on the Blocking List?" .... and even a Glossary that does include some details on IP Addresses and such ...

[Jeff G.]

You appear to be a secondary victim of misdirected auto-responses, as described at Why are auto-responders bad, in simple terms?. Can you please share Tracking URLs (or full headers from the messages and contained in the messages) for two of those many email messages? Thanks!

[kcsx]

You appear to be a secondary victim of misdirected auto-responses, as described at Why are auto-responders bad, in simple terms?.  Can you please share Tracking URLs (or full headers from the messages and contained in the messages) for two of those many email messages?  Thanks!

38591[/snapback]

I have had my account at yahoo.com over 15 years. So its not a "New Account" for me.

At present time I now have 1819 emails in my inbox and most are saying undeliverable, returned mail with other folks names as stated in the example emails below.

10015 in my bulk folder with some that are actual spam emails and others that are Returned Mail email transcript failure details.

This isn't really funny, because I do use this as a secondary account.

I did read your replies and visited the links you provided. Any help on this matter would be greatly appreciated.

Thanks.

First Message:

Return-Path: <oregonrose[at]yahoo.com>

Received: (qmail 59292 invoked from network); 27 Dec 2005 19:08:41

-0000

Received: from localhost.pair.com (HELO raung.pair.com) (127.0.0.1)

by localhost.pair.com with SMTP; 27 Dec 2005 19:08:41 -0000

Received: from 82-34-41-168.cable.ubr01.chel.blueyonder.co.uk

(82-34-41-168.cable.ubr01.chel.blueyonder.co.uk [82.34.41.168])

by raung.pair.com (Postfix) with SMTP id 5804682814

for <sybil[at]sewsybil.com>; Tue, 27 Dec 2005 14:08:40 -0500 (EST)

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=s1024; d=yahoo.com;

h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

b=P0VtzI9uBSWAGVrM5iWBFMO/XZjmw4mXxCDW3ARvFVBhXmQhjqI4XtbdTX63tEB8GFodeMDZUs61EcgITDyfPeFmKZ8bmHB2Y0TL0ujUwaAj7+4RFrE7SLCbS16fnCTq9jOGDP/PV9vJNVcTl5J8a0j1o/dAZVdo96oSJeX5gH5=

;

Message-ID: <09015385292447.63101.qmail[at]web54701.mail.yahoo.com>

Received: from [82.34.41.168] by web54701.mail.yahoo.com via HTTP; Tue,

27 Dec 2005 11:08:26 -0800

Date: Tue, 27 Dec 2005 11:08:26 -0800

From: Derrick Pate <oregonrose[at]yahoo.com>

Subject: High quality watches replicas

To: sybil[at]sewsybil.com

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="0-0473132005-4589471494=:67528"

Content-Transfer-Encoding: 8bit

--0-0473132005-4589471494=:67528

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

*************************************************'

Second Message:

RCPT TO generated following response:

550 <weedie[at]wholecaboodle.co.uk>... User unknown

Unknown user: weedier[at]wholecaboodle.co.uk

RCPT TO generated following response:

550 <weedier[at]wholecaboodle.co.uk>... User unknown

Original message follows.

Received: from 45.52.174.83.rev.vodafone.pt [83.174.52.45] by

mail.nthost.co.uk

(SMTPD-8.20) id A4AC053C; Tue, 27 Dec 2005 19:23:24 +0000

Message-Id: <200512271924671.SM02168[at]45.52.174.83.rev.vodafone.pt>

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=s1024; d=yahoo.com;

h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

b=6FUtYeS6oYAjUJuBmIULC7x/oXfifDbg1TfLymrCi3UpSYQTlK3Y2TOKyxGWEk4rL5clYCHy31DLN5v325fYf35gM2mXcKW5qvzQtWEtI1uDj+XtnikOqDWxXfGNQpkCjS88oG/k7CCsDfUpqtgC7Rhxl/yfapMQUiy9sY08UYo=

;

Message-ID: <43368837772558.79507.qmail[at]web54701.mail.yahoo.com>

Received: from [83.174.52.45] by web54701.mail.yahoo.com via HTTP; Tue,

27 Dec 2005 11:19:26 -0800

Date: Tue, 27 Dec 2005 11:19:26 -0800

From: Ina Hawk <oregonrose[at]yahoo.com>

[agsteele]

I have had my account at yahoo.com over 15 years. So its not a "New Account" for me.

At present time I now have 1819 emails in my inbox and most are saying undeliverable, returned mail with other folks names as stated in the example emails below.

38606[/snapback]

I'd agree with Jeff G that your Email address has been used by a spammer to forge the from lines in a bunch of spam. The resulting flood of rejected messages, of course, flood back to you as the forged sender.

Whilst it is immensely frustrating, it is not an uncommon problem. The best advice is to sit out the flood. 99% of people who suffer this type of problem find the problem goes away after a day or two.

Jeff pointed you to some background reading but tehre really isn't a great deal you can do other than empty the junk messages. Perhaps you could set up some form of filter in your Yahoo! account to filter off these rejection messages.

Andrew

[Jeff G.]

Thanks for the followup info, although it wasn't exactly what I asked for.

The first email message appears to have been relayed from our common enemy the fake watch spammer gangs (probably Leo Kuvayev / BadCow) by the open proxy at 168.cable.ubr01.chel.blueyonder.co.uk [82.34.41.168], probably promoting www.ewatchezz.com on 218.201.45.61 and 218.201.45.62 in three IP Address Ranges listed by the SBL at SBL26130, SBL35092, and SBL35128, and pair Networks shouldn't have bounced it. The second email message appears to have been relayed by the open proxy at 45.52.174.83.rev.vodafone.pt [83.174.52.45], with no other info available.

I suggest that you download the headers for all the messages with OE, trash everything more than 48.0 hours old, download the bodies for the rest, and use SpamCop to Report the rest, either by copy to your Held Mail mailbox/Folder via IMAP4 (if you have a SpamCop Email System Account) or by email submission (using your submit or quick address). And if you're feeling really ambitious, Manual Report the older messages.

You may also benefit from Why am I getting all these bounces?.

[btech]

I've had a few of those too, from my Comcast account. Because Yahoo is forged FAR more than other domains, you'll receieve more auto-responders.

IMO, Yahoo is the worst for email... get a Hotmail account, if you really don't want to pay for mail service. I very rarely get spam [at] my old hotmail address and have never received auto-responders.

[turetzsr]

<snip> Because Yahoo is forged FAR more than other domains, you'll receieve more auto-responders.

IMO, Yahoo is the worst for email... <snip>

38636[/snapback]

...My experience is much different. Although I do get gobs of spam sent to my Yahoo!Mail account, pretty much all of it goes into my "Bulk" folder. And I get very few, if any (can't remember having any but I may have forgotten), mis-directed NDRs.