email problem

[MrSkippyJ]

so some of my friends are receiving emails from what appears to be my gmail account. I changed my password just to be safe, but my inbox shows no emails sent other than what I have actually sent. Some of the email address that the email was sent too are email addresses I don't even know. Is there a way to see who actually sent the email? How do I track down what is going on?

One of my professors last semester had what seems to be a similar problem, where people were getting emails from him that weren't actually from him. Someone "hacked" his wife's email and gained access to her contacts. Then the "hacker" sent email to her contacts and made it look like they were from him. I think this is what is going on in my case, but I just don't know enough yet to be able to figure out what is going on.

So all you smart computer people, ready go

[beaker]

You can change the MIME headers of an email pretty easy to make it look like it came from whoever you want. Usually its pretty easy to tell though if you get the full email forwarded you can look at the email header information.

[MrSkippyJ]

If I throw the email up with the headers can you interpret it?

I am going to anyway!

[MrSkippyJ]

Here it is, I THINK I have taken out any personal info. I hope anyway.

Return-Path: THIS IS MY EMAIL [email protected]

Received: from imta32.emeryville.ca.mail.comcast.net (LHLO

imta32.emeryville.ca.mail.comcast.net) (76.96.30.49) by

sz0025.ev.mail.comcast.net with LMTP; Thu, 24 Jan 2013 03:47:03 +0000 (UTC)

Received: from mail-vb0-f53.google.com ([209.85.212.53])

by imta32.emeryville.ca.mail.comcast.net with comcast

id rfn21k01819h3Lp0Yfn2n0; Thu, 24 Jan 2013 03:47:03 +0000

X-CAA-SPAM: 00000

X-Authority-Analysis: v=2.1 cv=Y45ABXuN c=1 sm=1 tr=0

a=awUwC8TURR4ReOFATj3bjA==:117 a=1XWaLZrsAAAA:8 a=C_IRinGWAAAA:8

a=nDghuxUhq_wA:10 a=8nJEP1OIZ-IA:10 a=pGLkceISAAAA:8 a=cKlZAsviAAAA:8

a=tITiwrZ8NEEG9hEMU9cA:9 a=wPNLvfGTeEIA:10 a=VbaALEEhRhQA:10 a=X7JSpqcM65IA:10

Authentication-Results: imta32.emeryville.ca.mail.comcast.net;

dkim=pass header.d=gmail.com header.b=HhSQrbov

Received: by mail-vb0-f53.google.com with SMTP id b23so3473660vbz.12

for <[email protected]>; Wed, 23 Jan 2013 19:47:02 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20120113;

h=mime-version:x-received:date:message-id:subject:from:to

:content-type;

bh=A+BZp/3L/PTZjZcnkc0SHRVm8Ug5o3NnbeOSYUhgaVo=;

b=HhSQrbovnKUmY1fGXqIa3w1I6wU+M5+1Mhtk7t7t1aX9WE+FXWSmQnQHukLa9YiSM3

DZ9bycXkcsF4iCDrGzWh2CDOyCUPae+/OJRwenxYQM+Nw9Vgpq8gZKh6P9jGbmv+B6TJ

iXBNZHBeaa8olBj8ppjxhvqPfbi3eSb6ZYk7TTfYfEoTqh6wU4tNGYFIPbq8hFrnl3+2

XPSU+Dpwk4r4hBIFuEvyYdRIKacFhyA7s2lxBxpfgyylhVtEfrH9uplgVh75MYVDlW0I

KRjmvEk5omsW1nHNyzwnY0nJd+OUvn3cdwrA/ISW6pH+ujEtNdv6gVu8IQ6aGnceTC1K

xQMw==

MIME-Version: 1.0

X-Received: by 10.220.226.70 with SMTP id iv6mr598236vcb.9.1358999222440; Wed,

23 Jan 2013 19:47:02 -0800 (PST)

Received: by 10.58.46.116 with HTTP; Wed, 23 Jan 2013 19:47:02 -0800 (PST)

Date: Wed, 23 Jan 2013 21:47:02 -0600

Message-ID: <CAMd2-gAVy6QqOFkLVcmDX34j7W-+OTREBg3ubzE_GuwyKhn9YQ@mail.gmail.com>

Subject:

From: THIS IS MY EMAIL [email protected]

To: lots of emails, most of which are not in my contacts any where, and some I have no idea what they are or who they are.

Content-Type: text/plain; charset=ISO-8859-1

OOOH BAD LINKY IN THE EMAIL!!!!

[beaker]

looks like someone with a comcast address has a virus that is spoofing your email.

[MrSkippyJ]

Cool, I was hoping my email wasn't compromised. I couldn't find any sent email messages in my sent box.

[beaker]

No, you should be fine. I had the same issue with my hotmail, usually SMTP servers dont require permission to send, only recieve, so someone was sending spam out using my hotmail address.

[MrSkippyJ]

alright, thanks man, I appreciate it!