Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How can I tell if I have a spam going out

  • 2 cavab
  • 1 has this problem
  • 6 views
  • Last reply by Toad-Hall

more options

I just received an undeliverable message from yahoo, that I was not the one who sent. How can I tell if my thunderbird has been hacked to send spam?

The message I received was:

Subject: Warning: could not send message for past 4 hours Date: Thu, 27 Aug 2015 08:54:36 +0800 From: Mail Delivery Subsystem <MAILER-DAEMON@p2850.superclick.com> To: vpb@vindan.com


   **********************************************
   **      THIS IS A WARNING MESSAGE ONLY      **
   **  YOU DO NOT NEED TO RESEND YOUR MESSAGE  **
   **********************************************

The original message was received at Wed, 26 Aug 2015 07:15:51 +0800 from [10.1.220.62]

  ----- Transcript of session follows -----

<allen.wright69@yahoo.com>... Deferred: Connection reset by mta6.am0.yahoodns.net. Warning: message still undelivered after 4 hours Will keep trying until message is 5 days old



Attached Message Part

Reporting-MTA: dns; p2850.superclick.com Arrival-Date: Wed, 26 Aug 2015 07:15:51 +0800

Final-Recipient: RFC822; allen.wright69@yahoo.com Action: delayed Status: 4.2.0 Last-Attempt-Date: Thu, 27 Aug 2015 08:54:36 +0800 Will-Retry-Until: Mon, 31 Aug 2015 07:15:51 +0800


Attached Message Part

Return-Path: <vpb@vindan.com> Received: from inbound.mjs-co.com.netsolmail.net ([10.1.220.62]) by p2850.superclick.com (8.14.3/8.14.3/Debian-9.4) with SMTP id t7PNFlae006230 for <allen.wright69@yahoo.com>; Wed, 26 Aug 2015 07:15:51 +0800 From: Grace Knapp<vpb@vindan.com> To: allen.wright69@yahoo.com Subject: 0 Date: Tue, 25 Aug 2015 19:15:55 -0400 Message-ID: <8e4a5bd7a442b38bc8a0c2646e930a36@inbound.mjs-co.com.netsolmail.net> MIME-Version: 1.0 Content-Type: text/html;charset=UTF-8 Content-Transfer-Encoding: base64 X-Virus-Scanned: clamav-milter 0.97.6 at p2850.superclick.com X-Virus-Status: Clean X-Spam-Status: No, score=4.8 required=5.0 tests=ALL_TRUSTED, BASE64_LENGTH_79_INF,FROM_MISSP_EH_MATCH,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY,TO_NO_BRKTS_FROM_MSSP,URIBL_BLOCKED,URIBL_DBL_ABUSE_REDIR autolearn=no version=3.3.1 X-Spam-Level: **** X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on p2850.superclick.com

I just received an undeliverable message from yahoo, that I was not the one who sent. How can I tell if my thunderbird has been hacked to send spam? The message I received was: Subject: Warning: could not send message for past 4 hours Date: Thu, 27 Aug 2015 08:54:36 +0800 From: Mail Delivery Subsystem <MAILER-DAEMON@p2850.superclick.com> To: vpb@vindan.com ********************************************** ** THIS IS A WARNING MESSAGE ONLY ** ** YOU DO NOT NEED TO RESEND YOUR MESSAGE ** ********************************************** The original message was received at Wed, 26 Aug 2015 07:15:51 +0800 from [10.1.220.62] ----- Transcript of session follows ----- <allen.wright69@yahoo.com>... Deferred: Connection reset by mta6.am0.yahoodns.net. Warning: message still undelivered after 4 hours Will keep trying until message is 5 days old Attached Message Part Reporting-MTA: dns; p2850.superclick.com Arrival-Date: Wed, 26 Aug 2015 07:15:51 +0800 Final-Recipient: RFC822; allen.wright69@yahoo.com Action: delayed Status: 4.2.0 Last-Attempt-Date: Thu, 27 Aug 2015 08:54:36 +0800 Will-Retry-Until: Mon, 31 Aug 2015 07:15:51 +0800 Attached Message Part Return-Path: <vpb@vindan.com> Received: from inbound.mjs-co.com.netsolmail.net ([10.1.220.62]) by p2850.superclick.com (8.14.3/8.14.3/Debian-9.4) with SMTP id t7PNFlae006230 for <allen.wright69@yahoo.com>; Wed, 26 Aug 2015 07:15:51 +0800 From: Grace Knapp<vpb@vindan.com> To: allen.wright69@yahoo.com Subject: 0 Date: Tue, 25 Aug 2015 19:15:55 -0400 Message-ID: <8e4a5bd7a442b38bc8a0c2646e930a36@inbound.mjs-co.com.netsolmail.net> MIME-Version: 1.0 Content-Type: text/html;charset=UTF-8 Content-Transfer-Encoding: base64 X-Virus-Scanned: clamav-milter 0.97.6 at p2850.superclick.com X-Virus-Status: Clean X-Spam-Status: No, score=4.8 required=5.0 tests=ALL_TRUSTED, BASE64_LENGTH_79_INF,FROM_MISSP_EH_MATCH,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY,TO_NO_BRKTS_FROM_MSSP,URIBL_BLOCKED,URIBL_DBL_ABUSE_REDIR autolearn=no version=3.3.1 X-Spam-Level: **** X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on p2850.superclick.com

All Replies (2)

more options

There are some people who amuse themselves by being irritating and offensive. They either do not know right from wrong or they do not care. They abuse other people's email addresses, using them to send out loads of spam to a load of people they do not even know.

The first you get to hear of it is when one of those emails gets bounced back and of course it will get bounced back to you as it was your email address.

Do not bother responding to them. Delete the emails (unless you need to keep one for sending to ISP etc). As you have no idea who received one of those bogus emails, suggest you create a signature that you use for sending emails. Send an email to your friends and family, informing them that someone has been abusing your email address and in future they can tell the email is really from you by the signature. Usually you tell when it is not from the person you know as the email will read differently.

After a while the abuser usually gets bored and stops.

If you are concerned, you should first restart computer in Safe mode and then scan computer for visus etc. When you have the all clear, change passwords to webmail accounts and then update in Thunderbird.

If a load of emails have gone out in your name you could also contact your ISP (or google if a gmail account) to see if they have some record. After all you do not want to get blacklisted. They may ask you to supply information such as a copy of the source code of the bounced email.

more options

Note; email addresses are often gleaned from websites, forums etc. It is advised, you should not post your email address in any public forum.