Heres the deal, I have been getting failure notices from spam emails going out without my knowledge. It looks like its coming from one of my android devices (phone or tablet). i have factory reset the phone already but not the tablet. I have only downloaded apps from the market on tablet and trying to find out how its happening so I can stop it. The weird thing is I do not have any yahoo mail, messenger, etc set up on either of my droids but it seems to be jumping to a yahoo server. Any ideas? I have been working from the bottom up on the failure notice.
The header information on failure notice:
--- Below this line is a copy of the message.
Received: from [18.104.22.168] by nm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Nov 2011 10:27:48 -0000
Received: from [22.214.171.124] by tm6.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Nov 2011 10:27:48 -0000
Received: from [127.0.0.1] by omp1025.access.mail.sp2.yahoo.com with NNFMP; 19 Nov 2011 10:27:48 -0000
Received: (qmail 51092 invoked by uid 60001); 19 Nov 2011 10:27:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321698467; bh=risYimU+YEYs74rStytoYYEgrrr9+oUt7ADzCJ63xiA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=dCH5OIm9GDKLLJgfH5fGoPz7wljWfDBrKDCvqrQ97zd9OjbVZcOITb26S+b2Flz/4f51LucxF3ozP1oxrW8b8Q+Blvh/SddRVEq4oCcTUBeX5r6qMmJDa2Y3pR32egqZbIVGBaPJr0YzWC5nb9JLqGBpPMqaZqbcgxHnx8Lu1wg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
Received: from [126.96.36.199] by web180508.mail.gq1.yahoo.com via HTTP; Sat, 19 Nov 2011 02:27:47 PST
Message-ID: <[email protected]> Date: Sat, 19 Nov 2011 02:27:47 -0800 (PST)
From: **Name Deleted**<*****@att.net>
Thanks for your question matt9468.
Who, specifically, are the failure notices from?
All I see in the header you posted are two Yahoo IP's and the last one, near the bottom, is from Romania. Your IP is not in the header. The matching date and time would indicate to me that the reference to Android near the bottom may be the device the person in Romania is using.
"Received: from [188.8.131.52] by web 180508.mail.gq1.yahoo.com via HTTP; Sat, 19 Nov 2011 02:27:47 PST
Message-ID: Date: Sat, 19 Nov 2011 02:27:47 -0800 (PST)"