Solved

Laptop getting hundreds of delivery status notification (failure) that are spam

Posted on 2014-11-11
8
419 Views
Last Modified: 2014-11-12
My user has a Google account for SMTP and a prodigy.net.mx account for POP. He is getting these hundreds of delivery status notification (failure) that contain a porn link. (Never clicked on the link but the wording is porn).

Any ideas on how I can stop this?

Here's what was in one of the emails, minus the bad language and with an xxx before any email addresses:

From:
"Daniel Mcintyre" <xxx@prodigy.net.mx>

Date:
11/11/2014 3:48 PM
To:
xxx@yahoo.com

X-IronPort-AV:
E=Sophos;i="5.07,362,1413262800"; d="scan'208,217";a="6537892"
Received:
from nlpiport22.prodigy.net.mx ([148.235.52.109]) by nlpiport16.prodigy.net.mx with ESMTP; 11 Nov 2014 16:48:10 -0600
X-IronPort-Anti-Spam-Filtered:
true
X-IronPort-Anti-Spam-Result:
AoNaADuRYlREkXOMPGdsb2JhbAANNRqCSIEaWQGDb4l3FapQAgMGgykBAVYMP4Efi3kJgWWHSwKBNwEBAQEBBgEBAQEUJIVbAQIbNDSIezi3D4JmlRCGOop3hDUFkjFjg3CJEpY2AQEBBwEBAQEBgiZqgksBAQE
Received:
from s0106602ad090a6ee.cg.shawcable.net (HELO [192.168.243.237]) ([68.145.115.140]) by nlpiport22.prodigy.net.mx with ESMTP; 11 Nov 2014 16:48:10 -0600
Content-Type:
multipart/alternative; boundary="===============4923497437629272293=="
MIME-Version:
1.0
Message-ID:
<54629247.999005@prodigy.net.mx>

He uses Thunderbird as his email client.
0
Comment
Question by:mel200
  • 4
  • 3
8 Comments
 
LVL 90

Expert Comment

by:John Hurst
ID: 40436342
As I understand it, Gmail has a decent spam filter. You want to turn the spam filter way up to trap spam. Once done, whitelist any false positives.

The other ISP should have a spam filter as well and that wants to be turned up.
0
 

Author Comment

by:mel200
ID: 40436351
OK, thanks. I'll give those a try!
0
 
LVL 14

Accepted Solution

by:
Michael Dyer earned 250 total points
ID: 40436361
He is getting these notifications because someone is sending out spam and using his email address as the reply to address.  Spammers do this to try to defeat the spam filters.  You should be able to set up a message filter to move these to a junk box - at least that will clean up his mailbox for him.  Go here for more information on filters:  https://support.mozilla.org/en-US/kb/organize-your-messages-using-filters
0
 

Author Comment

by:mel200
ID: 40436390
Thanks, I'll look that over. I was afraid of that.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 90

Assisted Solution

by:John Hurst
John Hurst earned 250 total points
ID: 40436394
I had a client with this, and we had to change his email password. We did that, cleaned up the mess, and then the problem ceased.

I use a separate spam filter and I am very careful not to download any suspicious email into Outlook. I use Pop Peeper to filter it first.
0
 

Author Comment

by:mel200
ID: 40436410
ok, thanks for that advice, too! :)
0
 

Author Closing Comment

by:mel200
ID: 40437737
Thanks, changing passwords has helped immensely, and we'll use the other tips as well.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 40437775
@mel200  - Thanks for the update and I was happy to help.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Problem "Can you help me recover my changes?  I double-clicked the attachment, made changes, and then hit Save before closing it.  But when I try to re-open it, my changes are missing!"    Solution This solution opens the Outlook Secure Temp Fold…
Are you having trouble connecting or getting your iPhone / Samsung device(s) to sync with Microsoft Exchange Server?   What have you tried?   What haven't you tried?
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now