Malware Receiving redirected emails from Various Servers

Gwyn1

Premium Member
Premium Member
Joined
Oct 28, 2008
Messages
222
Reaction score
107
Thought I’d already posted this query, but it seems to have gone missing ?
For the passed 24 hrs I have been receiving returned emails from a variety of servers which I have not sent, but have part of my email address as the sender i.e. a random name is added to the start of my email address, and the @ symbol is moved between the two. Where the original @ symbol should be a’ .’ is inserted instead.
I have changed my email password, and run Kaspersky, and Malwarebyte software but they come up clean. What should I do to stop these emails ?

I am running win 10 with Live Mail.

I apologise if this is a repeat of a earlier posting, but I can’t find it in the Forum.
Ah - See where I went wrong the first time - I did not select a prefix - Oops

Thank You
 
Sounds like the bug will be in your email account not on PC?
Try and different PC to send emails etc and see if it still happens then you will know for sure.
PS do your PC scans in Safe Mode
 
Here is a typical email message I am receiving –I did NOT send this message, but because my email address is after the @ I am getting the bounced email.
in this copy I have replaced my email address with ‘my.emailaddress’. my real address would be ‘my@emailaddress’
Re run malware in safe mode but still clear.
-------------------------------------------------------------------
This is an automatically generated Delivery Status Notification From Mail Delivery System

THIS IS A WARNING MESSAGE ONLY.

YOU DO NOT NEED TO RESEND YOUR MESSAGE.

Delivery to the following recipient has been delayed:

[email protected]

Message will be retried for 6 more day(s)

----- Original message -----

X-Received: by 10.112.131.2 with SMTP id oi2mr5723391lbb.67.1461838681590;
Thu, 28 Apr 2016 03:18:01 -0700 (PDT)
X-Gm-Message-State: AOPr4FXz97AdTeq1qDZfiKmcw4n94tc0ZBPr4EQk0Fy39yBmb90hcQxtqnFS7NtOMwfNzP/zDz7NNIyOsbe3MlxOfaR4K8zvqt0Al9sj6fSyjDXPrc6KTVBtIxIlYs/Se1FsaN+YPrFyIXpH0/31Ntun4FFghVmE1dfNehBYOcSi322seISXAKaq/yFj32eY529a
X-Received: by 10.112.131.2 with SMTP id oi2mr5723384lbb.67.1461838681484;
Thu, 28 Apr 2016 03:18:01 -0700 (PDT)
Return-Path: <[email protected]>
Received: from [105.233.100.226] ([105.233.100.226])
by mx.google.com with ESMTP id d69si4476125lfb.221.2016.04.28.03.18.01
for <[email protected]>;
Thu, 28 Apr 2016 03:18:01 -0700 (PDT)
Received-SPF: neutral (google.com: 105.233.100.226 is neither permitted nor denied by best guess record for domain of [email protected])
Authentication-Results: mx.google.com;
 
Update on my email problem’.
Talktalk are now blocking all emails returned to me. I understand that the emails purporting to have come from me were sent before I changed my email password, but most recipient servers try up to 6 times to forward to the email addressee before deleting.
All current returned emails were originally sent pre-password change. Time will tell !
 
IP address 105.233.100.226 is Cybersmart in Cape Town, Western Cape, South Africa

Its directing an ISP called Cybersmart.
 
Back
Top