Email Question: System Administrator are getting undeliverable email notices, whose sending out email?

[LiLxJohnny]

I have a friend who expressed concerned about email notices that he is recieving. He would periodically check the system administrator's account and would notice that in the mailbox, he would get undeliverable email notices to email addresses he knows nothing about. He's wondering where is it all coming from and whose sending emails to these addresses.

He registered a domain for his family to use so tracking down the culprit is not difficult. Its only a question of how? How does someone track down whose the user sending out to these email addresses? Could it be a virus? Spyware? and from whom? The email headers of these messages doesn't tell us anything.

From: System Administrator
Sent: Saturday, September 20, 2003 9:32 PM
To: 139608820.SMILYB@bounce.iexpect.com
Subject: Undeliverable: Returned mail: see transcript for details

Any advice or input? Where would I start looking? He is not running an Exchange or any other email servers. The domain is hosted by a friend of his.

 

[Fuzznuts]

we would need to see the full headers of the email message to do any proper tourble shooting.

however its not uncommon for spammers to forge address's so that bounces dont come back to them but instead goto some poor sod elsewhere. it also makes tracing them harder. common ones used are info@ postmaster@ sales@ sysadmin@ maybe he is simply been unlucky.

post the full meesage source and well see what to say from there.

 

[bluegreenturtle]

That looks like the swen worm.

I got 137 of those last night while I was sleeping.