[8.161][BUG][CLOSED] some spams in norton's spam inbox

Hello Friends !

i was not getting spams in 8.160 but after upgrade to 8.161 i am getting daily 2/3 spam ,i was waiting to get this confirmed that why i wait for 7 days 

now how do i report the evidence to you !

thanks
Parents
  • Just send the parts that are relevant.

    Relevant: each mail has an identifier in the log file. Find the ones (by the from or to address) that have been falsely classified, look at the identifiert (Message ID) and just post the lines related to this false classification.

    2-5 Examples are enough, each bunch of log lines shouldn't be more than 20-30 lines total. 150 lines, this is not too big.

    Christian
  • hi !

    pop log

     
     2011:03:17-22:48:34 acenn pop3proxy[30113]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="Matte@tigersmess.com" to="virusbuster@mycom.com" subject="Giant Pre-seeded sunflower mats that grow in days" size="1471" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300381756.12505.ns80.webmasters.com" ident="0/30113-1-1300382313"


    2011:03:18-22:23:07 acenn-1 pop3proxy[14163]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="pile@tigercrunch.com" to="virusbuster@mycom.com" subject="Check Out Fastest Growing Empress Royal Paulownia Tree" size="1524" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300467121.9413.ns80.webmasters.com" ident="1/14163-1-1300467186"

    2011:03:23-22:29:55 acenn pop3proxy[2985]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="nutintips@tameingtiger.com" to="virusbuster@mycom.com" subject="The Biggest Losers nutritionist insider tips" size="2924" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300899422.15669.ns80.webmasters.com" ident="0/2985-1-1300899594"

    2011:03:23-22:29:56 acenn pop3proxy[2985]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="MAILER-DAEMON@ns80.webmasters.com" to="virusbuster@mycom.com" subject="failure notice" size="1957" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300899423.15716.ns80.webmasters.com" ident="0/2985-2-1300899595"

    2011:03:23-22:44:56 acenn pop3proxy[4605]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="soft0embuyinstantly@disappointmentdefense.com" to="virusbuster@mycomax.com" subject="Soft0em Essentials invites virusbuster to Download the Top-Rated Titles at 86 percent discount" size="61851" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300900304.24668.ns80.webmasters.com" ident="0/4605-1-1300900494"



    thx

    edit:

    this mail bypass all


    Return-Path: 
    Delivered-To: virtual-mycompany_com-myname.poxxdi@mycompany.com
    Received: (qmail 6800 invoked by uid 10003); 24 Mar 2011 07:34:23 -0000
    Delivered-To: virtual-mycompany_com-virusbuster@mycompany.com
    Received: (qmail 6788 invoked from network); 24 Mar 2011 07:34:22 -0000
    Received: from unknown (HELO web57412.mail.re1.yahoo.com) (66.196.100.64)
    by ns80.webmasters.com with SMTP; Thu, 24 Mar 2011 03:34:22 -0400
    Received: (qmail 40267 invoked by uid 60001); 24 Mar 2011 07:34:49 -0000
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1300952089; bh=Y4Uqa8dbxGRG9/jxCHZ+EIfwVh+wXjX1yIu0kuHV/kI=; h=Message-ID:X-YMail-OSG:Received:X-Mailer[[:D]]ate:From:Reply-To:To:MIME-Version:Content-Type; b=hw2ZBN5fKK5ay3Xg382cT3AurQj3VCaG6DIdkZCWpLwylMgOdwd3iW8I4OmBWfFgA4uuBe1I9V6aVWtzCwHBvTW5kRDVlQ8TxCywhzim+m+NmPfSMoeNTINXuyi+EdY0NF7+tdDoFBjDK4ec1E+dZzImWrMfN2Kb2jft3kNDp2k=
    DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
      s=s1024; d=yahoo.com;
      h=Message-ID:X-YMail-OSG:Received:X-Mailer[[:D]]ate:From:Reply-To:To:MIME-Version:Content-Type;
      b=zojFMWkxlgKZTcvz2YdUX57EoznIGxw1bAVd2qWKNWRY8pq1BoXSZz7mPocd8G5+X3+iDsZVoeh84kkWjjZ7yw0Ar2gp9EZIM76m4FFMEokjZ9zPnDi6W7sXFcTce/JWJocDsFY+fQhUmWBJXZBBlG7+W4dVKUjgk0gHKzDZcvE=;
    Message-ID: 
    X-YMail-OSG: jNY.xF8VM1moGyGMyz6fYYWie2Dw.HXg1zMb.ffaC1IwNkN
     vYJhcBqTOqLaRzCptanIzVOydVzViT4YtxSCx7r7ELjhXSuqilaLFy.mVr3U
     pX9tkAwV8Zk0UDlsBdrwMV7MB8JVa3A_Vu7R9GK1wpvgpjZeIenO7q90klFO
     p1YHvYcoImupGQEpU9ZQAxOtcK53LJNsMKZW1widO9QrbGP2WTav97wZPzum
     L5D8SIOPNaT3KAhz0wDv4J6Z5TKhM5J7KqQeLNNDnOFqpCJuXNq2orGL_8OZ
     Z4QFADd2_xX4KHZwG6OmK3l4k6l65ZmuoZ5wAcWpnu_xnkocygOY7NDBuTPl
     HFQu_e2qgUQa2KaT4BP9Z9RkDbpu.tQ--
    Received: from [71.84.69.186] by web57412.mail.re1.yahoo.com via HTTP; Thu, 24 Mar 2011 00:34:49 PDT
    X-Mailer: YahooMailRC/559 YahooMailWebService/0.8.109.295617
    Date: Thu, 24 Mar 2011 00:34:49 -0700 (PDT)
    From: Josh Dyckes 
    Reply-To: jdyckes@yahoo.com
    To: ra8srknhhhf@aol.com, ortrudga@aol.com, jadams8046@aol.com,
      huanglibo@iname.com, vanessa_gc@hotmail.com, silverring234@aol.com,
      virusbuster@mycompany.com, farid@elwailly.com, joola@gtindustries.com,
      steve.servakh@fmr.com, mial2468@comcast.net,
      ifcighadpiealcaaa.wooku@lge.com, thank_you@polite.com,
      mason7@optushome.com.au
    X-Proxy-Ident: 0/11460-1-1300952376
    X-CTCH-RefID: str=0001.0A090203.4D8AF539.00FF,ss=1,re=0.000,fgs=0
    MIME-Version: 1.0
    Content-Type: multipart/alternative; boundary="0-880446725-1300952089=:74234"
    X-Brightmail-Tracker: AAAAAResyiU=

    --0-880446725-1300952089=:74234
    Content-Type: text/plain; charset=us-ascii

    hmeprftsys.t35.com/xbzop001.htm 
    Get ur new eJob 


          
    --0-880446725-1300952089=:74234
    Content-Type: text/html; charset=us-ascii

    hmeprftsys.t35.com/xbzop001.htm


    Get ur new eJob











          
    --0-880446725-1300952089=:74234--
Reply
  • hi !

    pop log

     
     2011:03:17-22:48:34 acenn pop3proxy[30113]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="Matte@tigersmess.com" to="virusbuster@mycom.com" subject="Giant Pre-seeded sunflower mats that grow in days" size="1471" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300381756.12505.ns80.webmasters.com" ident="0/30113-1-1300382313"


    2011:03:18-22:23:07 acenn-1 pop3proxy[14163]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="pile@tigercrunch.com" to="virusbuster@mycom.com" subject="Check Out Fastest Growing Empress Royal Paulownia Tree" size="1524" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300467121.9413.ns80.webmasters.com" ident="1/14163-1-1300467186"

    2011:03:23-22:29:55 acenn pop3proxy[2985]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="nutintips@tameingtiger.com" to="virusbuster@mycom.com" subject="The Biggest Losers nutritionist insider tips" size="2924" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300899422.15669.ns80.webmasters.com" ident="0/2985-1-1300899594"

    2011:03:23-22:29:56 acenn pop3proxy[2985]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="MAILER-DAEMON@ns80.webmasters.com" to="virusbuster@mycom.com" subject="failure notice" size="1957" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300899423.15716.ns80.webmasters.com" ident="0/2985-2-1300899595"

    2011:03:23-22:44:56 acenn pop3proxy[4605]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="soft0embuyinstantly@disappointmentdefense.com" to="virusbuster@mycomax.com" subject="Soft0em Essentials invites virusbuster to Download the Top-Rated Titles at 86 percent discount" size="61851" srcip="0.0.0.0" dstip="66.118.157.156" uid="1300900304.24668.ns80.webmasters.com" ident="0/4605-1-1300900494"



    thx

    edit:

    this mail bypass all


    Return-Path: 
    Delivered-To: virtual-mycompany_com-myname.poxxdi@mycompany.com
    Received: (qmail 6800 invoked by uid 10003); 24 Mar 2011 07:34:23 -0000
    Delivered-To: virtual-mycompany_com-virusbuster@mycompany.com
    Received: (qmail 6788 invoked from network); 24 Mar 2011 07:34:22 -0000
    Received: from unknown (HELO web57412.mail.re1.yahoo.com) (66.196.100.64)
    by ns80.webmasters.com with SMTP; Thu, 24 Mar 2011 03:34:22 -0400
    Received: (qmail 40267 invoked by uid 60001); 24 Mar 2011 07:34:49 -0000
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1300952089; bh=Y4Uqa8dbxGRG9/jxCHZ+EIfwVh+wXjX1yIu0kuHV/kI=; h=Message-ID:X-YMail-OSG:Received:X-Mailer[[:D]]ate:From:Reply-To:To:MIME-Version:Content-Type; b=hw2ZBN5fKK5ay3Xg382cT3AurQj3VCaG6DIdkZCWpLwylMgOdwd3iW8I4OmBWfFgA4uuBe1I9V6aVWtzCwHBvTW5kRDVlQ8TxCywhzim+m+NmPfSMoeNTINXuyi+EdY0NF7+tdDoFBjDK4ec1E+dZzImWrMfN2Kb2jft3kNDp2k=
    DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
      s=s1024; d=yahoo.com;
      h=Message-ID:X-YMail-OSG:Received:X-Mailer[[:D]]ate:From:Reply-To:To:MIME-Version:Content-Type;
      b=zojFMWkxlgKZTcvz2YdUX57EoznIGxw1bAVd2qWKNWRY8pq1BoXSZz7mPocd8G5+X3+iDsZVoeh84kkWjjZ7yw0Ar2gp9EZIM76m4FFMEokjZ9zPnDi6W7sXFcTce/JWJocDsFY+fQhUmWBJXZBBlG7+W4dVKUjgk0gHKzDZcvE=;
    Message-ID: 
    X-YMail-OSG: jNY.xF8VM1moGyGMyz6fYYWie2Dw.HXg1zMb.ffaC1IwNkN
     vYJhcBqTOqLaRzCptanIzVOydVzViT4YtxSCx7r7ELjhXSuqilaLFy.mVr3U
     pX9tkAwV8Zk0UDlsBdrwMV7MB8JVa3A_Vu7R9GK1wpvgpjZeIenO7q90klFO
     p1YHvYcoImupGQEpU9ZQAxOtcK53LJNsMKZW1widO9QrbGP2WTav97wZPzum
     L5D8SIOPNaT3KAhz0wDv4J6Z5TKhM5J7KqQeLNNDnOFqpCJuXNq2orGL_8OZ
     Z4QFADd2_xX4KHZwG6OmK3l4k6l65ZmuoZ5wAcWpnu_xnkocygOY7NDBuTPl
     HFQu_e2qgUQa2KaT4BP9Z9RkDbpu.tQ--
    Received: from [71.84.69.186] by web57412.mail.re1.yahoo.com via HTTP; Thu, 24 Mar 2011 00:34:49 PDT
    X-Mailer: YahooMailRC/559 YahooMailWebService/0.8.109.295617
    Date: Thu, 24 Mar 2011 00:34:49 -0700 (PDT)
    From: Josh Dyckes 
    Reply-To: jdyckes@yahoo.com
    To: ra8srknhhhf@aol.com, ortrudga@aol.com, jadams8046@aol.com,
      huanglibo@iname.com, vanessa_gc@hotmail.com, silverring234@aol.com,
      virusbuster@mycompany.com, farid@elwailly.com, joola@gtindustries.com,
      steve.servakh@fmr.com, mial2468@comcast.net,
      ifcighadpiealcaaa.wooku@lge.com, thank_you@polite.com,
      mason7@optushome.com.au
    X-Proxy-Ident: 0/11460-1-1300952376
    X-CTCH-RefID: str=0001.0A090203.4D8AF539.00FF,ss=1,re=0.000,fgs=0
    MIME-Version: 1.0
    Content-Type: multipart/alternative; boundary="0-880446725-1300952089=:74234"
    X-Brightmail-Tracker: AAAAAResyiU=

    --0-880446725-1300952089=:74234
    Content-Type: text/plain; charset=us-ascii

    hmeprftsys.t35.com/xbzop001.htm 
    Get ur new eJob 


          
    --0-880446725-1300952089=:74234
    Content-Type: text/html; charset=us-ascii

    hmeprftsys.t35.com/xbzop001.htm


    Get ur new eJob











          
    --0-880446725-1300952089=:74234--
Children
No Data