Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

"Morphing" addresses in outbound emails?

Posted on 2014-01-13
2
Medium Priority
?
272 Views
Last Modified: 2014-02-03
I have a client who insists he's sending some emails to valid email addresses and the emails are bouncing (generating NDRs). I've looked at the NDRs, and sure enough each, bounce has an email address that's misspelled by one or two characters. (Sometimes the misspelling is in the name, sometimes it's in the domain.)

My client insists that he's sending to valid addresses. I've inspected his Outlook Address book, and his Outlook DAT file (formally the NK2 file), and was able to locate about 1/2 the misspelled addresses in these three locations.

Is it possible that malware is bastardizing his outbound email addresses or is bastardizing his stored emails in his Outlook contact list, his Outlook Address book, or his Outlook DAT file? Or, is it simply a lot of user error (which is a real possibility with this user).
0
Comment
Question by:jdana
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 10

Accepted Solution

by:
Korbus earned 1120 total points
ID: 39776977
I have never heard of malware that does that, nor can I see a reason for anyone to develop malware to do that.

Is the N2k file the one that hold the "suggestions" when you start to type in an address in outlook?   The way I remove those entries:  start typing, when the wrong address pops up, use the arrow keys to highlight it, then hit delete.  I would suspect some combo of user-error, and wrong addresses(past user-error) being cashed somewhere.
0
 

Author Closing Comment

by:jdana
ID: 39831152
Thanks!
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You need to know the location of the Office templates folder, so that when you create new templates, they are saved to that location, and thus are available for selection when creating new documents.  The steps to find the Templates folder path are …
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question