I seem to have what on Windows I'd describe as a virus - my email has sent two messages, with different subjects and contents, to some (but not all) my contacts. All are in my Personal address book, I have one other address book which hasn't been used.
The headers from one: Return-path: <pramc...@yahoo.co.uk> Received: from aamtain07-winn.ispmail.ntl.com ([81.103.221.35]) by mtain05-winn.ispmail.ntl.com (InterMail vM.7.08.04.00 201-2186-134-20080326) with ESMTP id <20091128045321.zahi17745.mtain05-winn.ispmail.ntl....@aamtain07-winn.ispmail.ntl.com> for <d.re...@ntlworld.com>; Sat, 28 Nov 2009 04:53:21 +0000 Received: from web26305.mail.ukl.yahoo.com ([217.146.176.16]) by aamtain07-winn.ispmail.ntl.com (InterMail vG.2.02.00.01 201-2161-120-102-20060912) with SMTP id <20091128045321.lapa4230.aamtain07-winn.ispmail.ntl....@web26305.mail.ukl.yahoo.com> for <d.re...@ntlworld.com>; Sat, 28 Nov 2009 04:53:21 +0000 Received: (qmail 49300 invoked by uid 60001); 28 Nov 2009 04:53:16 -0000 Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1259383996; bh=nH3f4zhh67X6UZhSfNaC1Gx1waVhXper6F8TnnI13M4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=sWJMFw0GCiVsN/rOYzjZg4xaOJYnAFdbCXxqQOzfI/pH7N5wr6Wn6Z7VVgM0gdo/Qh3fNfiJjPxSRelhjkIRqvGb754JkM6UlOW7ejTzgEX96SaW286bGHO8xUsgOF7XDqpFXcjDFLJaKZujTlUgp4ge948GOIqZU9Q62ToiJTI= Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=uCfYTLm7gr0GcspLMgSyn1XfULvAxOGuo09TeArwJ4epzsZ0jUbHYpDN1/tq7D12kcCv2IpJdziMrPCfrgL5vtdLB+lA/SdSfYEZFkkEWu18FV900X3gGtGJMYpiAiOFmHtU3omJpFWATMdQtEd+fZYwxDJXj5l+EEZictnjmaY=; Message-id: <385337.46359...@web26305.mail.ukl.yahoo.com> X-ymail-osg: BkpB0UkVM1kOE5wJj1hnZG3RfChrfOjEeXRo9NJSOB5cLAD7XjueZgkQyOe74lA93deM4Qb0El4wuiy4dV9sB6waLtzDhqVIDa.2Mrfv1Sfx7rOpQiRXRqANEA1GVmnrHvKsE8iLqgx7ZRCOVljDAsqhohO8DsqFfZe7UQd72P8nIZHXDjm9AQbsMiLWIahDr1Yj1ZKx67zaCDUN5ZPTFUrR31OBtafVB2dzX7GRqM7.MlXCGtnOve7KyM1Oqmx7HrNZw20F9nqIDlMnwc9vSflBHM7VU9IIjCTW0xaDXzFcgziDqLKPqBa4cIV0 Received: from [24.159.36.27] by web26305.mail.ukl.yahoo.com via HTTP; Sat, 28 Nov 2009 04:53:16 GMT X-mailer: YahooMailClassic/8.1.6 YahooMailWebService/0.8.100.260964 Date: Sat, 28 Nov 2009 04:53:16 +0000 (GMT) From: dianne reuby <pramc...@yahoo.co.uk> Subject: lottery on internet To:: [I've deleted names] Mime-version: 1.0 Content-type: multipart/alternative; boundary="0-2110923468-1259383996=:46359" X-cloudmark-analysis: v=1.1 cv=NHKL4ccLqAdeRwd6VnUln5paixeSqEFFOj5TlDU6QdU= c=1 sm=0 a=3oc9M9_CAAAA:8 a=RjDEaTloZeWpOggAXQsA:9 a=g6GZMhDh8FljKsqNBz7qo7CRalUA:4 a=gBTasWj_ReIA:10 a=7wsV7UMLlQStOZl3:21 a=b--WeT3J5jTsigMk:21 a=waVkbz9WAAAA:8 a=rVeqqxyTQQDciPjxv5YA:9 a=nFFUCTSOad0sZnh35owA:7 a=KC-g-or5JKwLS390pJpAvvPCACwA:4 a=qwJReuqhESYA:10 a=qRtFyYm8t2UA:10 a=HpAAvcLHHh0Zw7uRqdWCyQ==:117 X-evolution-source: pop://d.re...@pop.ntlworld.com/ I'm running 9.04, all updates done, Evolution mail, and the built-in virus checker running however it does when Ubuntu is installed. My ISP is ntl (Virgin), the other email address is my yahoo.co.uk account. My first question is how have I done this? My second is how do I make sure I don't do it again? TIA Dianne -- ubuntu-uk@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk https://wiki.ubuntu.com/UKTeam/
