Computer help please

[Freedom]

I use Norton Antivirus; it is up to date, and a scan reveals no issues.

I got this mail message; it is quite long, I'll put it at the bottom. I think this means someone has invaded my email address book and uses it to send out spam to everyone? How do I get rid of it?!

If anyone remembers Tim / Majestic Collies, he had a similar issue. I'd get floods of junk mail from him and finally had to block his email. I hated to do it, as he works with skin issues for rough coat collies and often his treatments were helpful for bichons. He couldn't figure out how to stop the darn thing; changed his password several times and it made no difference. Anyone got ideas for me please?!!!

******

Mailer Daemon: Delivery Failure

Message from yahoo.co.jp.
Unable to deliver message to the following address(es).

:
This user doesn't have a yahoo.co.jp account ([email protected]) [-5]

:
Sorry your message to [email protected] cannot be delivered. This account has been disabled or discontinued [#102].

--- Original message follows.

Return-Path:
X-YahooFilteredBulk: 177.17.118.178
X-Originating-IP: [177.17.118.178]
Received-SPF: none (173.193.202.92-static.reverse.softlayer.com: domain of [email protected] does not designate permitted sender hosts)
Authentication-Results: mta530.mail.kks.yahoo.co.jp from=yahoo.com; domainkeys=neutral (no sig); dkim=neutral (no sig) [email protected]
Received: from 177.17.118.178 (HELO 173.193.202.92-static.reverse.softlayer.com) (177.17.118.178)
by mta530.mail.kks.yahoo.co.jp with SMTP; Tue, 03 Jan 2012 15:36:32 +0900
X-Message-Info: %RNDUCCHAR15%RNDLCCHAR13%RNDUCCHAR13%RNDDIGIT13%RN DLCCHAR13%RNDUCCHAR13%RNDLCCHAR13%RNDUCCHAR13%RNDL CCHAR13%RNDDIGIT13%RNDUCCHAR13%RNDLCCHAR13%RNDDIGI T13+%RNDUCCHAR14%RNDLCCHAR14%RNDDIGIT13%RNDLCCHAR1 3%RNDUCCHAR16
Received: from %RNDLCCHAR312%RNDDIGIT13.yahoo.com (73.124.152.80) by %RNDLCCHAR13%RNDDIGIT13-%RNDLCCHAR13%RNDDIGIT13.yahoo.com with Microsoft SMTPSVC(5.0.2195.6824);
Tue, 03 Jan 2012 08:29:17 +0200
Received: from %RNDLCCHAR13%RNDDIGIT13%RNDLCCHAR13%RNDDIGIT13%RND LCCHAR13%RNDDIGIT13%RNDLCCHAR13 (236.184.152.67) by %RNDLCCHAR315%RNDDIGIT13.yahoo.com
(InterMail vM.5.01.06.05 %RNDDIGIT3-%RNDDIGIT3-%RNDDIGIT3-%RNDDIGIT3-%RNDDIGIT3-%RNDDIGIT59) with SMTP
id <%RNDDIGIT916.%RNDUCCHAR25%RNDDIGIT23.%RNDLCCHAR57% RNDDIGIT13%RNDDIGIT13.yahoo.com@%RNDLCCHAR13%RNDDI GIT13%RNDLCCHAR13%RNDDIGIT13%RNDLCCHAR13%RNDDIGIT1 3%RNDLCCHAR13>
for ; Tue, 03 Jan 2012 05:32:17 -0100
Message-ID: <%RNDDIGIT36%RNDLCCHAR13%RNDDIGIT13%RNDLCCHAR13%RND DIGIT25$%RNDDIGIT59$%RNDLCCHAR13%RNDDIGIT13%RNDLCC HAR13%RNDDIGIT13@%RNDLCCHAR13%RNDDIGIT13%RNDLCCHAR 13%RNDDIGIT13%RNDLCCHAR13%RNDDIGIT13%RNDLCCHAR13>
From: "=?ISO-2022-JP?B?GyRCJVslRiVrQmUkYiQrJDEkOiRLJSglQyVBPVBNaCRrG yhCIT8=?="
To:
Subject: =?ISO-2022-JP?B?GyRCIXkiISF5MGw/TUprJGkkNyROPXckTjtSJE4kKkJwJFhLLExkIXkiISF5GyhC?=
Date: Tue, 03 Jan 2012 02:31:17 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--142341434388537"

----142341434388537
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

<<=81=99=88=EA=90l=95=E9=82=E7=82=B5=82=CC=8E=E2=82= B5=82=AA=82=E8=89=AE=82=
=CC=8F=97=82=CC=8Eq=82=AA=8BM=95=FB=82=F0=82=A8=89 =C6=82=C9=82=B2=8F=B5=91=
=D2=81=99>>

=8Aw=90=B6=82=A9=82=E7OL=82=DC=82=C510=91=E3=81`20 =91=E3=82=F0=92=86=90S=82=
=C6=82=B5=82=BD=81A
=94=DE=8E=81=82=CC=82=A2=82=C8=82=A2=8E=E2=82=B5=8 2=A2=8F=97=82=CC=8Eq=92B=
=82=AA=8FW=82=DC=82=E9=83R=83~=83=85=83j=83e=83B

=81=A2=81=A5http://melmo-smile.info/hgo/=81=A2=81=A5

1=94=D3=82=BE=82=AF=93Y=82=A2=90Q=82=E2=82=A8=98b= 82=F0=82=B5=82=C4=82=A0=82=
=B0=82=C4=8E=E2=82=B5=82=B3=82=F0=96=84=82=DF=82=C 4=82=A0=82=B0=82=DC=82=B5=
=82=E5=82=A4=81=F4

=83T=83C=83g=93=E0=82=CC=8DD=82=DD=82=CC=8F=97=82= CC=8Eq=82=F0=91I=82=D7=82=
=E9=82=CC=82=C5=89=C2=88=A4=82=A2=8Eq=82=C6=8Fo=89 =EF=82=A6=82=E9=83`=83=83=
=83=93=83X!!
=8F=97=82=CC=8Eq=82=C9=8A=E7=8Fo=82=B5=97=B9=89=F0 =8D=CF=82=DD=82=C8=82=CC=
=82=C5=91S=88=F5=8E=A9=97R=82=C9=82=B2=97=97=92=B8 =82=AF=82=DC=82=B7=81B

=81=A2=81=A5http://melmo-smile.info/hgo/=81=A2=81=A5

=97=BF=8B=E0=96=B3=97=BF=82=C6=82=C8=82=C1=82=C4=8 2=A8=82=E8=82=DC=82=B7=82=
=CC=82=C5=88=C0=90S=82=B5=82=C4=82=B2=97=98=97p=89 =BA=82=B3=82=A2=81B

=81=A618=8D=CE=96=A2=96=9E=82=CC=95=FB=82=CC=97=98 =97p=81E=93o=98^=82=F0=8C=
=C5=82=AD=8B=D6=8E~=82=B5=82=DC=82=B7=81B

----142341434388537--


*** MESSAGE TRUNCATED ***

[Karen]

It's just spam, delete it and don't worry about it.

[Freedom]

Really?! Great thanks!

[Karen]

No problem, I have gotten these off and on for years.

[smokey the elder]

It may be a good idea to change your password. Sometimes if you stay logged in your account can get corrupted.

[Freedom]

Yup, tried that as I started getting several of these a week. Which is why I asked and wondered if someone was emailing all my pals constantly.

[Karen]

You can tell, as the "send from" is not you, or your server. They are just spoofing your email address, so you get bounces instead of them.

[Freedom]

Oh um, . . . right. Long as it is nothing to worry about, I'm fine!

[lizbud]

May be nothing but I have been having email problems today with one of my email accounts. My pc security refused to access one IP address b/c of
security concerns. It gave me the IP address of the problem message.

Does anyone know if an IP address can be traced by number?

[Puckstop31]

Anyone got ideas for me please?!!!

If you are sure your PC is not infected, the most likely explanation is someone else who has your email address in their address book has a bug on their PC. Email bugs 'spoof' addresses to make them seem like they are coming from a legit sender. This bug sent a message to a invalid address and the message you shared is the 'bounce' telling you the recipient does not exist.

This said, in my professional opinion, there are better Anti-Virus tools out there than Norton. We resell a product called ESET. It is better than Norton and cheaper.

[Puckstop31]

Does anyone know if an IP address can be traced by number?

Yes. But when a bug is the source of the message, the IP you see is usually not the actual sender. IP's can be 'spoofed' as well.

The key to catching the actual sender is being able to see the SMTP traffic with a firewall as it is coming in live. If you would share the IP, I could give you a general location of where it was issued.

[Lady's Human]

Norton is an ineffective resource hog.

There are a few free A/V suites that are far better. I hate it when a company lives off of it's reputation for most of the last decade.......In the tech world that should be grounds for going out of business, but much like budweiser, marketing trumps performance and reason.

[krazyaboutkatz]

I also have Norton and it's free with my comcast but it just doesn't do the job in my opinion. I had some problems a while back and Brian,Puckstop31, helped me out again. He recommended that I try Malewarebytes. I tried the free version and it found all kinds of bad things on my computer that Norton had missed. I later bought it and they also have coupon codes that you can find and use too. If you'd like to try it here's a link to the website: http://www.malwarebytes.org/. Good luck.

[Puckstop31]

I also have Norton and it's free with my comcast but it just doesn't do the job in my opinion. I had some problems a while back and Brian,Puckstop31, helped me out again. He recommended that I try Malewarebytes. I tried the free version and it found all kinds of bad things on my computer that Norton had missed. I later bought it and they also have coupon codes that you can find and use too. If you'd like to try it here's a link to the website: http://www.malwarebytes.org/. Good luck.

I use Malwarebytes if the machine already has a bug. Because, IIRC, the free version is not an active scanner, it only scans when you ask it. Part of my job is to try and break the products we use and, so far, I have yet to break through ESET.

Plus, I am just not a big fan of freeware as the front line of defence.

[Catty1]

Freedom, even though the IP is likely spoofed I did a check on ARIN Whois, which sent me to LACNIC.

Apparently the spam originates in Brazil, if this is to be believed.

e-mail: abuse at gvt dot com dot br

You can always send the spam message with all the headers to that address.

I start any searches with ARIN using the last IP address listed "from" (though I didn't do that with yours), and copy and paste the IP address in the upper RH corner here: https://www.arin.net/

It's fun!