Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So I'm completely out of my element here. I don't even know where to begin solving this. Two times in the past couple of days I have gotten long lists of mail delivery subsystem messages on my primary gmail account with delivery status notification (failure) tags on them.

It seems I have encountered some sort of bug/virus/spoof/who knows what, that is taking large samples of my gmail address book and sending mass emails with links such as this:

(I haven't clicked on this and wouldn't recommend clicking on it but if this helps with solving the problem then great.)

this is the original message as reported by google (with personal info blocked out)

Return-Path: <**MYEMAILADDRESS**>
Received-SPF: pass ( domain of **MYEMAILADDRESS** designates as permitted sender) client-ip=;
Authentication-Results:; spf=pass ( domain of **MYEMAILADDRESS** designates as permitted sender) smtp.mail=**MYEMAILADDRESS**; dkim=pass header.i=**MYEMAILADDRESS**
Received: from ([])
       by with SMTP id j50mr6599797wem.36.1285022292847 (num_hops = 1);
       Mon, 20 Sep 2010 15:38:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=gamma;
DomainKey-Signature: a=rsa-sha1; c=nofws;; s=gamma;
MIME-Version: 1.0
Received: by with SMTP id j50mr4928335wem.36.1285022292817;
 Mon, 20 Sep 2010 15:38:12 -0700 (PDT)
Received: by with HTTP; Mon, 20 Sep 2010 15:38:12 -0700 (PDT)
Date: Mon, 20 Sep 2010 17:38:12 -0500
Message-ID: <>

any known way to end this spoofing? what are my options here?

share|improve this question
up vote 0 down vote accepted

Just like anyone can put your home address on a letter and send it out to someone else, they can do the same with an email. In the grand scheme of things, there really isn't a lot you can do to prevent this. You only need to worry when it actually does come from your email address because that means your account has been compromised. You should run scans on your computer just to make sure that nothing has set itself up to spam from your computer using your credentials. Change your email password as well.

share|improve this answer
so this is one of my many confusions regarding this. Since the delivery failure messages are being sent to me, I would have assumed that the messages were being sent from my account. Incorrect? – DanLeaningphp Sep 21 '10 at 0:16
Incorrect. It's just like if someone sent out prank letters with your return address on the envelope. Email headers aren't secure, they'll be whatever the sender wants them to be. – zildjohn01 Sep 21 '10 at 0:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .