11 Replies Latest reply: Nov 11, 2012 12:47 AM by MadMacs0
PicoMc Level 1 Level 1 (0 points)

Somehow my email program on my Imac is sending out spam. I know because I have been warned and blocked by my ISP and because around 8:30 in the morning I get almost 2,000 returned emails .... here's one:

 

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

 

This is the mail system at host smtpgrave05.b.hostedemail.com.


I'm sorry to have to inform you that your message could not

be delivered to one or more recipients. It's attached below.


For further assistance, please send mail to postmaster.


If you do so, please include this problem report. You can

delete your own text from the attached returned message.


The mail system


<thenooman@hotmai.co.uk>: connect to hotmai.co.uk[64.4.6.100]:25: Connection

timed out




Reporting-MTA: dns; smtpgrave05.b.hostedemail.com

X-Postfix-Queue-ID: 71B2D172CD99

X-Postfix-Sender: rfc822; bfmcmillen@buckeye-express.com

Arrival-Date: Mon, 5 Nov 2012 13:22:04 +0000 (UTC)


Final-Recipient: rfc822; thenooman@hotmai.co.uk

Original-Recipient: rfc822;thenooman@hotmai.co.uk

Action: failed

Status: 4.4.1

Diagnostic-Code: X-Postfix; connect to hotmai.co.uk[64.4.6.100]:25: Connection

timed out




http://www.78hg.com/index.main.php

 

>>>>>>>>>>>>>>>>>>>>>>>>>>>

 

I have changed my password 3 times now and the problem returns.  I ran ClamXav and it reported - Trojan.Downloader-103788, 39824.emix (email.Trojan-300 and 2400.emix (heuristics.phishing.email,spoofeddoman   I'm aware that sometimes this is just 'stuff' from someone's Windows machine. But the fact is my machine does have something attached to my mail.app that is causing it to send out email causing me to be blocked and leaving me with about 2000 returns daily.

 

I don't know how to work with Clam.Xav so i deleted it and downloaded Avast.  It's not finding anything and I am at my wits' end.

 

If you can help me locate and eliminate the source of this problem I'd be most appreciative. Also, where the heck does Mountain Lion's mail.app program store its files?

 

Thanks,

Barb


mail.app, OS X Mountain Lion (10.8.2)
  • 1. Re: My mail.app is spamming
    BDAqua Level 10 Level 10 (116,475 points)

    Hi Barb,

     

    To see if it's your provider, What's my ip...

     

    http://www.whatismyipaddress.com/

     

    Start with these three, check SpamCop or SpamHaus to see if your IP is there...

     

    http://spamcop.net/bl.shtml

     

    http://www.spamhaus.org/lookup.lasso

     

    http://www.spamhaus.org/zen/

     

    Sometimes an ISP will bloc a whole other ISP too, if it's the source of too much SPAM.

     

    Might also see this post by Gallomimia...

     

    http://discussions.apple.com/message.jspa?messageID=9465359#9465359

     

    If none of those are it, then report back please.

  • 2. Re: My mail.app is spamming
    PicoMc Level 1 Level 1 (0 points)

    My IP address is not on any block list and I can send email. The problem is I have evidence that something else is causing my email program to send out emails that are not mine. And some may get through and some may get blocked by receiving servers. My ISP blocks me periodically because they think I am sending out spam.

     

    The problem here is getting to the source of what is causing my program to do this .... I did check your directives tho they ultimately didn't help me. But thanks so much for the referrals.

     

    Barb

  • 3. Re: My mail.app is spamming
    David M Brewer Level 6 Level 6 (9,200 points)

    Change your email password.

  • 4. Re: My mail.app is spamming
    PicoMc Level 1 Level 1 (0 points)

    Thanks you. I did. Several times.

  • 5. Re: My mail.app is spamming
    John Galt Level 8 Level 8 (36,350 points)

    Have you checked Mail.app's Sent Mail folder? If Mail sent it, it's there.

     

    If you are not using Apple's Mail, what are you using?

     

    I don't know how to work with Clam.Xav so i deleted it and downloaded Avast. 

     

    Reverse that decision. ClamXAV will identify Windows viruses but Avast is 100% worthless junk.

  • 6. Re: My mail.app is spamming
    babowa Level 7 Level 7 (23,285 points)

    My guess would be that someone hacked into either your or a friends email account and stole your email address and they are using it now to send out spam. You are getting the messages that the recipient's email is not valid or whatever because they are using your email address as the from address, so any email that can't be delivered will be returned to you. If Mail was sending out emails then you would have copies of the sent mails in your sent folder i would assume. I'd suggest changing your email address and consulting with your ISP about deleting the current account.

  • 7. Re: My mail.app is spamming
    PicoMc Level 1 Level 1 (0 points)

    I am using Apple's mail.app. There is nothing enliughtening  in the sent mail folders. Incoming on the other hand shows all these mails that are bouncing back to me as not receivable.

     

    I called my ISP and defensively said I was not sending out spam. The tech guy looked up my account and said 'most definitely you are' and 'we will continue to block your account.' He said the block would go away when I changed my email address. I have done that several times now but after a few days more the odd bounced emails not really sent by me returns and my account gets blocked again.

     

    I did take your advice and deleted AVAST! and put clamxav back. Tho clamxav is too manual for me. Thanks for the suggestion.

  • 8. Re: My mail.app is spamming
    PicoMc Level 1 Level 1 (0 points)

    My guess would be that someone hacked into either your or a friends email account and stole your email address and they are using it now to send out spam. You are getting the messages that the recipient's email is not valid or whatever because they are using your email address as the from address, so any email that can't be delivered will be returned to you. If Mail was sending out emails then you would have copies of the sent mails in your sent folder i would assume. I'd suggest changing your email address and consulting with your ISP about deleting the current account.

     

    How would I also change all the accounts that required my email address?

    (Thanks, btw)

  • 9. Re: My mail.app is spamming
    babowa Level 7 Level 7 (23,285 points)

    Well, you would have to change them all unfortunately. What accounts are you referring to? You don't need to change the accounts, only the email address you are using with the account. If you have to change your email address, you might want to consider using your real email address only for friends or other private emails. I guard mine very carefully And use several web-based email addresses for everything else, Those are somewhat disposable and easily replaced. I have had my yahoo account hacked into several times and I am now getting spam email from my yahoo account to my yahoo account - that takes the cake!

  • 10. Re: My mail.app is spamming
    seventy one Level 6 Level 6 (8,985 points)

    Spam to spam; talk about a vicious circle.  You have to laugh, don't you. 

  • 11. Re: My mail.app is spamming
    MadMacs0 Level 4 Level 4 (3,725 points)

    PicoMc wrote:

     

    clamxav is too manual for me. Thanks for the suggestion.

    Be sure and read the documentation that can be found by selecting "ClamXav Help" from the Help menu.

     

    If you have other questions, come to the ClamXav Forum.