View Full Version : Question About Weird E-Mail I Got-- Mando Related


Cheryl Harrell
07-27-2002, 04:53 AM
I got an e-mail in my YAHOO MAIL that was really weird & has me wondering if someone is trying to pull a prank on us here in Freddieland? Or was someone trying to e-mail me & Isaac & it bounced? It came in my junk mail folder that they have on YAHOO.

Note: I put comedy at the end of all the e-mail addresses so that spammers (Junk e-mails can't e-mail us with junk e-mails)...

The mail says:

The following mail can't be sent to hillbilly@info-ed.com:

From: cherylharrell@yahoo.comedy
To: hillbilly@info-ed.comedy
Subject: how are you
The file is the original mail

Even stranger still it lists this in the headers:

X-Apparently-To: [email]cherylharrell@yahoo.com[edy/email] via -40.-120.-81.71; 26 Jul 2002 19:11:54 -0700 (PDT)

X-YahooFilteredBulk: 205.188.156.49
Return-Path: <isaacruiz@earthlink.netcomedy>

Received: from 205.188.156.49 (EHLO rly-ip01.mx.aol.com) (205.188.156.49) by mta581.mail.yahoo.com with SMTP; 26 Jul 2002 19:11:53 -0700 (PDT)

Received: from logs-wg.proxy.aol.com (logs-wg.proxy.aol.com [205.188.196.5]) by rly-ip01.mx.aol.com (v83.35) with ESMTP id
RELAYIN10-0726221100; Fri, 26 Jul 2002 22:11:00 -0400

Received: from Dmzkzkdbj (AC8EFA50.ipt.aol.com
[172.142.250.80]) by logs-wg.proxy.aol.com (8.10.0/8.10.0) with SMTP id g6R21Uc249278 for <cherylharrell@yahoo.comedy>; Fri, 26 Jul 2002 22:01:31 -0400 (EDT)

Date: Fri, 26 Jul 2002 22:01:31 -0400 (EDT)
Message-Id: <200207270201.g6R21Uc249278@logs-wg.proxy.aol.com>

From: "postmaster" <postmaster@yahoo.comedy> | Add to Address Book

To: cherylharrell@yahoo.comedy

Subject: Undeliverable mail--"how are you"
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=T039f86OAaoc25I748

X-Apparently-From: Jimsuz94@aol.comedy
Content-Length: 62613


What is so odd about this is if I'm reading this right it's acting as if I sent an email to HillBilly called how are you but I never sent her any e-mail like that & the e-mail address here is not her e-mail address or at least not hte one I have anyway. It looks like Isaac may be on Earthlink internet but he & I have never e-mailed each other before either. I had no idea he was on Earthlink.

I also got another similar e-mail with the subject:

Subject: Returned mail: Cannot send message within 2 hours

& it acted as if I had sent an e-mail called By Flaming Star The Official Elvis Presley Fan to an ATT internet user. & it had this in the headers:

X-Apparently-From: Jimsuz94@aol.comedy

What's odd about that one is I never sent any e-mails to any ATT user about Elvis. & My hubby Mike is a huge Elvis fan. I mainly use my YAHOO mail to get some e-mails from free stuff I've signed up for on the net like free websites etc & use my MOCHAMAIL e-mail address as my main e-mail address now cuz YAHOO has started charging for you to download your e-mails into OUTLOOK EXPRESS.

I looked up InfoEd's website & came up with this:

www.info-ed.com


So it's got me wondering... Was someone trying to e-mail me on something CATM related & it bounced making it look like I was trying to e-mail Hillbilly? Or was it a junk e-mailer or someone pulling a prank trying to make it look as if I had e-mailed Hillbilly & it bounced & they were trying to make it look like it came from Isaac? Or was Isaac trying to send out some e-mails & it goofed? just wondering...

Also I searched for Isaac on the internet & there is more than one Isaac Ruiz out there. There are some others who live in other states like CA. Also Isaac if that's him (our Mando) there, has AOL INSTANT MESSENGER it appears. I have asked about this on a free internet message board I regularly check out as the folks on there are experts at this kind of stuff & could probably tell me if that's someone pranking with us or a legit e-mail that got bounced. I did change in my post the names in their names & e-mail addresses like Hillbilly is Hillbilly 200 & Isaac is Mando, so that strange people won't see ya'lls name or addresses if you didn't want them to...

hillbilly
07-27-2002, 07:00 AM
Hey Cheryl
I`m not sure what`s going on.I have this other email thing set up on my computer.It catches spam and emails with virus.I have been getting emails from you.They are sent from your Yahoo email address.They say they have a virus.So I have been deleting them.I don`t know what the problem is.You might want to check with Yahoo.Maybe they can help you out.

Luckymama58
07-27-2002, 08:17 AM
Ladies,
I wanted to warn you all about something. I am not sure if this is the case with you, but there is a very bad virus going round called KLEZ. I had it a couple of weeks ago and it destroyed my modem and registry files. We are virus free now but what a pain. The computer guy wound up installing a new modem and reformatting my hard drive to the tune of $200 plus I had the headache of restoring everything we lost. (which we are still in the process of doing BTW)
The KLEZ came in through our Outlook Express mail while I was at Mariposa's house. I noticed when I finally got the computer restored, I had a lot of funny mail in the OE that looked like I had sent things out I didn't. And the really strange part about it was it went through my Yahoo addresses too, because some of the addresses aren't in my OE address book. Cheryl, you were one of them. All the mail had been rejected by your virus filters, but the computer guy says this particular virus has a nasty habit of getting past most current virus filters, like McAfee and Norton (we had the latest version of Norton and the virus disabled it) We are OK now, but I hope Cheryl or Hillbilly or anyone else hasn't picked it up. You all are in my Yahoo address book but not my OE. (My OE still isn't working right, but I think it is becasue we haven't restored it properly. I don't use that one usually, my hubby does.)
I sure hope this isn't what is happening here, but I thought I'd give you all a heads up.
Marie

hue_mee
07-27-2002, 10:06 AM
I have had the same problem as cheryls in my hotmail account. However the jimsuz94@aol.com is our other email address. I have sent Isaac email from that address and how it got to you I have no idea. I mostly send email to people on the boards here on my hotmail address unless I'm having trouble sending a file through hotmail. I have no idea how you got my aol address.

Cheryl Harrell
07-27-2002, 04:20 PM
This is odd. I'm wondering if someone is pranking with me or us & trying to send mail to me using e-mail addresses from folks on the CATM boards. I sure hope I don't have a virus but if I do & have sent it to anyone I'm really sorry. I keep my anti virus going all the time & try to check things before downloading. I have gotten those things sent in e-mails but don't open them & immediately delete when I see that I have gotten one. Most of them were from weird strangers so I knew to be aware & not download. I started to open a mail awhile back from one of my cousins friends & my antivirus caught it & said it was a virus so I didn't open it up & immediatley deleted it. They had sent it to my YAHOO mail. What is so odd is I don't use my YAHOO mail anymore to e-mail Freddie folks like Luckymama or Hillbilly & don't use it very much for writing anymore. I have switched my main e-mail to my MOCHAMAIL e-mail cuz YAHOO has started charging for the ability to use OUTLOOK EXPRESS to download your e-mails to be read offline. So since MOCHAMAIL lets you either read the mails off the website or download them into OUTLOOK EXPRESS, I switched my main e-mail to them & only use the YAHOO as a junkmail catcher & for signing up for free stuff on the internet that might cause me to get junk mails like free websites etc. I tend do my MOCHAMAIL e-mail off the website alot as I am usually going back & forth between reading mail & the message boards I hang out on etc. I tend to use OUTLOOK EXPRESS more for downloading stuff I want to keep forever or on out of town tripson the laptop to save connection time. So this is strange. I wonder if someone is cranking/pranking with my YAHOO acct?

If ya'll get any more strange or virused e-mails from my YAHOO acct please let me know. I just hope & pray no one is cranking with my YAHOO acct...

I just read the free internet message boards & a couple of folks had responded to me there. One said that iff I had evidence that I was sending e-mail that I didn't really send, I'd check for a virus. If you find one, warn everyone in your address book.

The other one said I think I remember a "How Are YOU?" as a virus at Symantec site, be sure to update and run a Virus/worm scan, or whatever!

So I gotta run a virus scan. I'm wondering now if this e-mail that was sent to me was a virus & they were using CATM folks names in it to try to get me to open up the html file that was attached to it. I didn't open the html file that came in it so I hope I am okay.

I hope & pray I don't have a virus cuz if I don't I can't afford the money to fix it. :( & I can't afford to lose all my Freddie pics that are on my hard drive... :(

Cheryl Harrell
07-28-2002, 05:47 AM
I downloaded a new update for my anti-virus & did a through virus scan. No viruses were found so I hope I don't have one & am okay. I had sent an e-mail to my Mom for her to print out for me cuz I ran out of printer ink. When Mike & I went to vist my parents on Fri, she had me get into her e-mails on AOL & print it out myself & the mail I sent her didn't seem to have any problem. So I hope & pray I am virus free. I have no idea how to tell if I have the KELZ virus tho. I can't figure out how come e-mails from my YAHOO with viruses are getting to Hillbilly unless some strange person is sending them with a virus in them & trying to make out like it came from me or someone from here had a virus & it sent to her with my name on it. She may want to click on the thing to view the headers of any e-mails from me that claim to be from my YAHOO address to see if they were really sent form me or if theyw ere sent from some stranger. If anyone on her gets any e-mails with a virus on it from my YAHOO mail do let me know so I can hopefully see what the problem.

I want to let folks know that when I send out e-mails from OUTLOOK EXPRESS I usually use my SOFTHOME OR YIFAN e-mail addresses to send the mail instead of the MOCHAMAIL one. The reason is that MOCHAMAIL e-mail uses something called port 25 (whatever that is) to send the e-mails & most free & cheap internets block port 25 to keep spammers (junk e-mailers) from sending junk e-mails thru OUTLOOK EXPRESS. SOFTHOME & YIFAN use alternate ports to send e-mails so I have e-mails with them so I can use their alternate port. So if you get any e-mails from my MOCHAMAIL e-mail address & they are sent thru YIFAN or SOFTHOME, this is no error but me having to send thru the other accts to get OUTLOOK EXPRESS to send the mails...

I have gotten several other e-mails the past coupla days where it talked like I had sent someone an e-mail & it bounced back to me but I have never sent any of those folks e-mails & don't even know who they are. So I am suspecting someone is either pranking with me or trying to send me a virus or junk mail. Thankfully I don't download the attachments that are attached to them.

I am suspecting that with the e-mail I got with CATM boards peoples names & Isaacs name in it maybe be someone either pranking with me or possibly other people from here or someone trying to send me a virus & they hope that with CATM boards peoples names in it, I will assume it is legit & try to download the attachment that was with it & get a virus on my puter. But what they don't realize is I don't download attachments from weird strange folks I never heard of. I have had viruses sent to me by weird strangers & didn't download them cuz I could tell it was a virus.

Sadly with my YAHOO e-mail I get too many spam junk e-mails & that's the only e-mail acct of mine I have ever gotten viruses to that I know of. I'm really glad I switched my main e-mail from YAHOO to MOCHAMAIL. Now I can get my legit e-mails like from ya'll, e-mail lists, Freddie & Arlo stuff & family etc without having to wade thru junk mails etc or worrying about getting viruses in OUTLOOK EXPRESS. I still keep my YAHOO mail to use as a junkmail catcher & for signing up for things that could cause me to get junk mail like free internet or free websites. If you have YAHOO for your e-mail I highly recommend you use the virus checking feature they have whenever you view or open a file attachment in their webmail. It looks like the junk e-mailer/virus senders target YAHOO & AOL & MSN/HOTMAIL e-mail accts cuz my YAHOO & AOL accts & MSN mail acct which I got for trying out MSN for a month get lots of junk e-mail etc. So I had to set up my AOL & MSN e-mails where only certain people can write to them so that the junk mail can't get thru. With my MOCHAMAIL I have only gotten 2 junk mails in it so far.

I took an e-mail from Luckymama that has the pics from the laz trip & sent it to my YAHOO mail to run their virus scan on it & no virus was found. So hopefully all was okay with that...

I just hope my puter is virus free & is okay. Do be aware you can get mails like this one I did. I just hope no one else from here got anything like this in their e-mail. Good luck...

Cheryl Harrell
07-28-2002, 06:40 AM
I found this info on a website talking about the KLEZ WORM virus & wonder if this may be what is happening to me?

"Email spoofing
Some variants of this worm use a technique known as "spoofing." If so, the worm randomly selects an address that it finds on an infected computer. It uses this address as the "From" address that it uses when it performs its mass-mailing routine. Numerous cases have been reported in which users of uninfected computers received complaints that they sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using an antivirus program or does not have current virus definitions. When W32.Klez.gen@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From" portion of an infected message that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her an infected message, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected.

If you are using a current version of Norton AntiVirus and you have the most recent virus definitions, and a full system scan with Norton AntiVirus set to scan all files does not find anything, you can be confident that your computer is not infected with this worm."

Luckymama58
07-28-2002, 08:43 AM
Cheryl,
Thanks for the info on the Klez. I think the reason we caught it is because it had been a few months since we updated our Norton.... Which is only a good reminder.... frequently update your antivirus!

Cheryl Harrell
07-28-2002, 10:37 AM
Glad to help! :) Glad your puter got back to normal. I still can't figure out why Hillbilly was getting mails with Viruses from my YAHOO acct unless someone is using my YAHOO address as the return address for viruses sent or someone had a virus & it got my name put on it. Strange...