Hi all, is there anyone who can help?

I started up OL 2007 a couple of days ago and suddenly noticed it had
over 500 OUTGOING emails it was trying to post!! This is from a secure
IMAP service. It is only on one account too (I have 3 defined).

I managed to stop the sending but only after around 200 spam emails
had been sent. I then ran a full anti-malware scan of my PC (which is
running Windows 7 Beta from MSDN by the way). There was no sign of any
malware on the PC.

I've also done checks for those stuck send receipts I'm told you can
get - nothing. And there is nothing in the local outbox.

Basically, OL is now useless to me. This is a professional account and
I cannot afford to risk OL doing this again.

Can anyone shed any light as to what has happened and any way of
deleting the remaining outgoing emails?

Please!!

--
Regards,
Julian Knight
http://it.knightnet.org.uk, http://linux.knightnet.org.uk,
http://www.knightnet.org.uk

Are you using an Anti Virus to scan emails ??

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Knightnet" <(E-Mail Removed)> wrote in message
news:605778e9-be1d-4ac6-b139-(E-Mail Removed)...
> Hi all, is there anyone who can help?
>
> I started up OL 2007 a couple of days ago and suddenly noticed it had
> over 500 OUTGOING emails it was trying to post!! This is from a secure
> IMAP service. It is only on one account too (I have 3 defined).
>
> I managed to stop the sending but only after around 200 spam emails
> had been sent. I then ran a full anti-malware scan of my PC (which is
> running Windows 7 Beta from MSDN by the way). There was no sign of any
> malware on the PC.
>
> I've also done checks for those stuck send receipts I'm told you can
> get - nothing. And there is nothing in the local outbox.
>
> Basically, OL is now useless to me. This is a professional account and
> I cannot afford to risk OL doing this again.
>
> Can anyone shed any light as to what has happened and any way of
> deleting the remaining outgoing emails?
>
> Please!!
>
> --
> Regards,
> Julian Knight
> http://it.knightnet.org.uk, http://linux.knightnet.org.uk,
> http://www.knightnet.org.uk

"Knightnet" <(E-Mail Removed)> wrote in message
news:605778e9-be1d-4ac6-b139-(E-Mail Removed)...

> I started up OL 2007 a couple of days ago and suddenly noticed it had
> over 500 OUTGOING emails it was trying to post!! This is from a secure
> IMAP service. It is only on one account too (I have 3 defined).
>
> I managed to stop the sending but only after around 200 spam emails
> had been sent. I then ran a full anti-malware scan of my PC (which is
> running Windows 7 Beta from MSDN by the way). There was no sign of any
> malware on the PC.

Can you post an example of one of these messages?
--
Brian Tillman [MVP-Outlook]

Know issue with IMAP accounts. See
http://www.slipstick.com/problems/rr_ndr.asp

AFAIK, the recent cumulative update did not address this issue but I also
didn't test it.

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:
dailytips-subscribe-(E-Mail Removed)

Exchange Messaging Outlook newsletter:
EMO-NEWSLETTER-SUBSCRIBE-(E-Mail Removed)

Outlook Tips: http://www.outlook-tips.net/
Outlook & Exchange Solutions Center: http://www.slipstick.com

You can access this newsgroup by visiting
http://www.microsoft.com/office/comm...s/default.mspx or point your
newsreader to msnews.microsoft.com.


"Knightnet" <(E-Mail Removed)> wrote in message
news:605778e9-be1d-4ac6-b139-(E-Mail Removed)...
> Hi all, is there anyone who can help?
>
> I started up OL 2007 a couple of days ago and suddenly noticed it had
> over 500 OUTGOING emails it was trying to post!! This is from a secure
> IMAP service. It is only on one account too (I have 3 defined).
>
> I managed to stop the sending but only after around 200 spam emails
> had been sent. I then ran a full anti-malware scan of my PC (which is
> running Windows 7 Beta from MSDN by the way). There was no sign of any
> malware on the PC.
>
> I've also done checks for those stuck send receipts I'm told you can
> get - nothing. And there is nothing in the local outbox.
>
> Basically, OL is now useless to me. This is a professional account and
> I cannot afford to risk OL doing this again.
>
> Can anyone shed any light as to what has happened and any way of
> deleting the remaining outgoing emails?
>
> Please!!
>
> --
> Regards,
> Julian Knight
> http://it.knightnet.org.uk, http://linux.knightnet.org.uk,
> http://www.knightnet.org.uk

Thanks Peter and Brian for replying.

Peter, I don't scan my emails - that's because I normally use
Thunderbird for email not Outlook (I have to use OL to handle meeting
requests though).

Brian, I cannot SEE the outgoing emails, they are not visible
ANYWHERE. The only things I can see is the number of emails due to be
sent (in the status bar) and the bounce messages from the seemingly
random selection of email addresess sent to so far

Here is the content of one of the bounce messages that shows the raw
content of the original (The XXXXX's are me, the YYYYYYYY's are the
recipient. I've left as much as I can in place):

=======================================================================
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es)
failed:

(E-Mail Removed)
SMTP error from remote mail server after RCPT
TO:<(E-Mail Removed)>:
host smtp.consulnetworks.com.co [200.29.236.22]:
554 5.7.1 <(E-Mail Removed)>: Relay access denied

------ This is a copy of the message, including all the headers.
------

Return-path: <XXXXXXXXXXX@XXXXXXXXXXXX>
Received: from [192.168.32.161] (helo=md02.prod.pr.contact.secure-
ops.net)
by mail.nhs.net with esmtp (Exim 4.52)
id 1LhdWu-0003Fl-dt
for (E-Mail Removed); Thu, 12 Mar 2009 05:32:28 +0000
Received: from mta01.prod.pr.contact.secure-ops.net (EHLO
mail.nhs.net) ([192.168.35.129])
by md02.pr.contact.secure-ops.net (MOS 3.8.3-GA FastPath queued)
with ESMTP id APO31208;
Tue, 10 Mar 2009 13:00:11 +0000 (GMT)
Received: from [84.92.201.33] (helo=XXXXXXXXXXX)
by mail.nhs.net with esmtpa (Exim 4.52)
id 1Lh1Jy-0003s5-YH
for (E-Mail Removed); Tue, 10 Mar 2009 12:44:34 +0000
From: "Julian Knight" <XXXXXXXXXXXXXXX>
Sender: "Julian Knight" <XXXXXXXXXXXXXXX>
To: <(E-Mail Removed)>
Subject: Not read: Not satisfied with your xliving?
Date: Tue, 10 Mar 2009 12:44:01 -0000
Organization: XXXXXXXXXXXXXXXXXXXXXXXXX
Message-ID: <003801c9a17d$f96ec560$ec4c5020$@org.uk>
MIME-Version: 1.0
Content-Type: application/ms-tnef;
name="winmail.dat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="winmail.dat"
X-Mailer: Microsoft Office Outlook 12.0
X-MS-TNEF-Correlator: 00000000AAF45B792554B64BB89BD0D37A3D98B2C40D5A00
Thread-Index: Ackf5BFM9jlbVONUS02xaqmWZ32fXCBmavef
CWInbound_ID: 1Lh1Jy-0003s5-YH
X-Junkmail-IP-Whitelist: YES (by domain ip whitelist at
md02.pr.contact.secure-ops.net)
X-Mirapoint-RAPID-Raw: score=unknown(0),
refid=str=0001.0A0B0209.49B6647E.00CE,ss=1,fgs=0,
ip=84.92.201.33,
so=2006-12-20 11:47:04,
dmn=5.7.1/2008-09-02
X-Mirapoint-Loop-Id: dc42598852e32b1cc801b963502584aa

eJ8+IiYMAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAEIgAcAFwAAAFJFUE9SVC5J
UE0uTm90ZS5JUE5OUk4AtwYBCoABACEAAABFQzlDQ0Y4Qjk2QzlGRjQxQkRFQUMwOTQ5OTY5QUY1
NACgBwEDkAYAfAIAABgAAAALACkAAAAAAEAAMgDQJiq9faHJAR4ASQABAAAAIQAAAE5vdCBzYXRp
c2ZpZWQgd2l0aCB5b3VyIHhsaXZpbmc/AAAAAAIBTAABAAAAaAAAAAAAAACBKx
+kvqMQGZ1uAN0B
D1QCAAABgGMAaQBjAGUAbAB5AAAAUwBNAFQAUAAAAGMAaQBjAGUAbAB5AC0AcwBlAHMAcwBpAHIA
YgBtAEAAWAAtAEYATwBPAEQAUwAuAEMATwBNAAAAHgBNAAEAAAAHAAAAY2ljZWx5AABAAE4AAKt9
EuQfyQFAAFUAAH5MEeQfyQEeAHAAAQAAACEAAABOb3Qgc2F0aXNmaWVkIHdpdGggeW91ciB4bGl2
aW5nPwAAAAACAXEAAQAAABsAAAAByR/
kEUz2OVtU41RLTbFqqZZnfZ9cIGZq958AHgByAAEAAAAB
AAAAAAAAAB4AcwABAAAAAQAAAAAAAAAeAHQAAQAAABkAAABqdWxpYW4xQGtuaWdodG5ldC5vcmcu
dWsAAAAACwAIDAAAAAALAAEOAQAAAAMAFA4BAAAAHgABEAEAAAAZAAAATWVzc2FnZSB3YXMgbm90
IHJlYWQgYnk6AAAAAAsAHw4BAAAAAgH4DwEAAAAQAAAAqvRbeSVUtku4m9DTej2YsgIB
+g8BAAAA
EAAAAKr0W3klVLZLuJvQ03o9mLIDAP4PBQAAAAMADTT9P6UGAwAPNP0/
pQYCARQ0AQAAABAAAABO
SVRB+b+4AQCqADfZbgAAAgF/
AAEAAAAxAAAAMDAwMDAwMDBBQUY0NUI3OTI1NTRCNjRCQjg5QkQw
RDM3QTNEOThCMkM0MEQ1QTAwAAAAAAeI

=======================================================================



On Mar 12, 3:06*pm, "Brian Tillman [MVP - Outlook]"
<tillman1...@yahoo.com> wrote:
>
> Can you post an example of one of these messages?
> --
> Brian Tillman [MVP-Outlook]

> Subject: Not read: Not satisfied with your xliving?
It's the read receipt bug. (http://www.slipstick.com/problems/rr_ndr.asp)

RR are hidden in the top of your message store until you connect - you can
delete them only using a tool such as outlook spy. Most, if not all, of
yours will bounce (since spammers use fake return addresses), so no harm,
other than the annoyance of deleting all of the NDRs they cause. See
http://www.outlook-tips.net/howto/delete_rr.htm if you want to delete them.

I would also suggest installing the cumulative update. I don't know if it
fixes this bug but it does improve how outlook handles IMAP.

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:
dailytips-subscribe-(E-Mail Removed)

Exchange Messaging Outlook newsletter:
EMO-NEWSLETTER-SUBSCRIBE-(E-Mail Removed)

Outlook Tips: http://www.outlook-tips.net/
Outlook & Exchange Solutions Center: http://www.slipstick.com

You can access this newsgroup by visiting
http://www.microsoft.com/office/comm...s/default.mspx or point your
newsreader to msnews.microsoft.com.


"Knightnet" <(E-Mail Removed)> wrote in message
news:43fe3baa-7d34-40d8-aeab-(E-Mail Removed)...
> Thanks Peter and Brian for replying.
>
> Peter, I don't scan my emails - that's because I normally use
> Thunderbird for email not Outlook (I have to use OL to handle meeting
> requests though).
>
> Brian, I cannot SEE the outgoing emails, they are not visible
> ANYWHERE. The only things I can see is the number of emails due to be
> sent (in the status bar) and the bounce messages from the seemingly
> random selection of email addresess sent to so far
>
> Here is the content of one of the bounce messages that shows the raw
> content of the original (The XXXXX's are me, the YYYYYYYY's are the
> recipient. I've left as much as I can in place):
>
> =======================================================================
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es)
> failed:
>
> (E-Mail Removed)
> SMTP error from remote mail server after RCPT
> TO:<(E-Mail Removed)>:
> host smtp.consulnetworks.com.co [200.29.236.22]:
> 554 5.7.1 <(E-Mail Removed)>: Relay access denied
>
> ------ This is a copy of the message, including all the headers.
> ------
>
> Return-path: <XXXXXXXXXXX@XXXXXXXXXXXX>
> Received: from [192.168.32.161] (helo=md02.prod.pr.contact.secure-
> ops.net)
> by mail.nhs.net with esmtp (Exim 4.52)
> id 1LhdWu-0003Fl-dt
> for (E-Mail Removed); Thu, 12 Mar 2009 05:32:28 +0000
> Received: from mta01.prod.pr.contact.secure-ops.net (EHLO
> mail.nhs.net) ([192.168.35.129])
> by md02.pr.contact.secure-ops.net (MOS 3.8.3-GA FastPath queued)
> with ESMTP id APO31208;
> Tue, 10 Mar 2009 13:00:11 +0000 (GMT)
> Received: from [84.92.201.33] (helo=XXXXXXXXXXX)
> by mail.nhs.net with esmtpa (Exim 4.52)
> id 1Lh1Jy-0003s5-YH
> for (E-Mail Removed); Tue, 10 Mar 2009 12:44:34 +0000
> From: "Julian Knight" <XXXXXXXXXXXXXXX>
> Sender: "Julian Knight" <XXXXXXXXXXXXXXX>
> To: <(E-Mail Removed)>
> Subject: Not read: Not satisfied with your xliving?
> Date: Tue, 10 Mar 2009 12:44:01 -0000
> Organization: XXXXXXXXXXXXXXXXXXXXXXXXX
> Message-ID: <003801c9a17d$f96ec560$ec4c5020$@org.uk>
> MIME-Version: 1.0
> Content-Type: application/ms-tnef;
> name="winmail.dat"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment;
> filename="winmail.dat"
> X-Mailer: Microsoft Office Outlook 12.0
> X-MS-TNEF-Correlator: 00000000AAF45B792554B64BB89BD0D37A3D98B2C40D5A00
> Thread-Index: Ackf5BFM9jlbVONUS02xaqmWZ32fXCBmavef
> CWInbound_ID: 1Lh1Jy-0003s5-YH
> X-Junkmail-IP-Whitelist: YES (by domain ip whitelist at
> md02.pr.contact.secure-ops.net)
> X-Mirapoint-RAPID-Raw: score=unknown(0),
> refid=str=0001.0A0B0209.49B6647E.00CE,ss=1,fgs=0,
> ip=84.92.201.33,
> so=2006-12-20 11:47:04,
> dmn=5.7.1/2008-09-02
> X-Mirapoint-Loop-Id: dc42598852e32b1cc801b963502584aa
>
> eJ8+IiYMAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAEIgAcAFwAAAFJFUE9SVC5J
> UE0uTm90ZS5JUE5OUk4AtwYBCoABACEAAABFQzlDQ0Y4Qjk2QzlGRjQxQkRFQUMwOTQ5OTY5QUY1
> NACgBwEDkAYAfAIAABgAAAALACkAAAAAAEAAMgDQJiq9faHJAR4ASQABAAAAIQAAAE5vdCBzYXRp
> c2ZpZWQgd2l0aCB5b3VyIHhsaXZpbmc/AAAAAAIBTAABAAAAaAAAAAAAAACBKx
> +kvqMQGZ1uAN0B
> D1QCAAABgGMAaQBjAGUAbAB5AAAAUwBNAFQAUAAAAGMAaQBjAGUAbAB5AC0AcwBlAHMAcwBpAHIA
> YgBtAEAAWAAtAEYATwBPAEQAUwAuAEMATwBNAAAAHgBNAAEAAAAHAAAAY2ljZWx5AABAAE4AAKt9
> EuQfyQFAAFUAAH5MEeQfyQEeAHAAAQAAACEAAABOb3Qgc2F0aXNmaWVkIHdpdGggeW91ciB4bGl2
> aW5nPwAAAAACAXEAAQAAABsAAAAByR/
> kEUz2OVtU41RLTbFqqZZnfZ9cIGZq958AHgByAAEAAAAB
> AAAAAAAAAB4AcwABAAAAAQAAAAAAAAAeAHQAAQAAABkAAABqdWxpYW4xQGtuaWdodG5ldC5vcmcu
> dWsAAAAACwAIDAAAAAALAAEOAQAAAAMAFA4BAAAAHgABEAEAAAAZAAAATWVzc2FnZSB3YXMgbm90
> IHJlYWQgYnk6AAAAAAsAHw4BAAAAAgH4DwEAAAAQAAAAqvRbeSVUtku4m9DTej2YsgIB
> +g8BAAAA
> EAAAAKr0W3klVLZLuJvQ03o9mLIDAP4PBQAAAAMADTT9P6UGAwAPNP0/
> pQYCARQ0AQAAABAAAABO
> SVRB+b+4AQCqADfZbgAAAgF/
> AAEAAAAxAAAAMDAwMDAwMDBBQUY0NUI3OTI1NTRCNjRCQjg5QkQw
> RDM3QTNEOThCMkM0MEQ1QTAwAAAAAAeI
>
> =======================================================================
>
>
>
> On Mar 12, 3:06 pm, "Brian Tillman [MVP - Outlook]"
> <tillman1...@yahoo.com> wrote:
>>
>> Can you post an example of one of these messages?
>> --
>> Brian Tillman [MVP-Outlook]
>

Diane, thanks for the response.

I've checked for this problem and as far as I can see, my problem is
different. For starters, this account does not get junk mail (well
maybe one or two a YEAR), certainly not 500. Secondly, I haven't moved
anything to the Junk folder and I've checked the IMAP server directly
and there is nothing hidden away there that I can see in any folder.

Doh!! I just decoded that email and found the text "Message was not
read by" hidden in it so I guess you are right!

I've tried the methods outlined elsewhere to try and fix this problem
and didn't find anything to fix.

How do I get rid of these messages & where did they come from since I
can't see the "junk" messages that must have caused them?

I've now turned off the OL junk handling but reciept handling was
already set to "ask me" - so OL simply should not have been able to
send these responses without my input.

Regards,
Julian.


On Mar 12, 3:32*pm, "Diane Poremsky [MVP]" <outlook...@msn.com> wrote:
> Know issue with IMAP accounts. Seehttp://www.slipstick.com/problems/rr_ndr.asp
>
> AFAIK, the recent cumulative update did not address this issue but I also
> didn't test it.
>

Yeah, got it now thanks!

As I said in my previous mail, I'd tried OL spy, etc without luck
which is why I thought it was a different issue. I will try again.

I think I've got all the updates & I can't seem to check at the moment
as I can't connect to WU - not sure if the problem is on the MS end or
the ISA proxy here on the customer site I'm on. I'll try again from
home later.

Thanks again Diane for spotting this.

Regards, Julian.

On Mar 12, 3:54*pm, "Diane Poremsky [MVP]" <outlook...@msn.com> wrote:
> > Subject: Not read: Not satisfied with your xliving?
>
> It's the read receipt bug. *(http://www.slipstick.com/problems/rr_ndr.asp)
>
> RR are hidden in the top of your message store until you connect - you can
> delete them only using a tool such as outlook spy. *Most, if not all, of
> yours will bounce (since spammers use fake return addresses), so no harm,
> other than the annoyance of deleting all of the NDRs they cause. Seehttp://www.outlook-tips.net/howto/delete_rr.htmif you want to delete them.
>
> I would also suggest installing the cumulative update. I don't know if it
> fixes this bug but it does improve how outlook handles IMAP.
>
> --
> Diane Poremsky [MVP - Outlook]
> Need Help with Common Tasks?http://www.outlook-tips.net/beginner/
> Outlook 2007:http://www.slipstick.com/outlook/ol2007/

> I've now turned off the OL junk handling but reciept handling was
> already set to "ask me" - so OL simply should not have been able to
> send these responses without my input.

the bug is it doesn't honor this settings when it refreshes messages in an
IMAP folder that were deleted by another means. There may be other bugs
along the route that may or may not be outlook's fault - like so many RR
requests on junk mail. It seems like you are getting a lot more than
average RR - I get very few per hundred pieces of junk that hit my mailbox.
(Maybe my server side filters filter out spam with RR requests better than
it gets rid of other spam. )

--
Diane Poremsky [MVP - Outlook]
Need Help with Common Tasks? http://www.outlook-tips.net/beginner/
Outlook 2007: http://www.slipstick.com/outlook/ol2007/

Outlook Tips by email:
dailytips-subscribe-(E-Mail Removed)

Exchange Messaging Outlook newsletter:
EMO-NEWSLETTER-SUBSCRIBE-(E-Mail Removed)

Outlook Tips: http://www.outlook-tips.net/
Outlook & Exchange Solutions Center: http://www.slipstick.com

You can access this newsgroup by visiting
http://www.microsoft.com/office/comm...s/default.mspx or point your
newsreader to msnews.microsoft.com.


"Knightnet" <(E-Mail Removed)> wrote in message
news:5dc814a7-7987-49e6-9f7f-(E-Mail Removed)...
> Diane, thanks for the response.
>
> I've checked for this problem and as far as I can see, my problem is
> different. For starters, this account does not get junk mail (well
> maybe one or two a YEAR), certainly not 500. Secondly, I haven't moved
> anything to the Junk folder and I've checked the IMAP server directly
> and there is nothing hidden away there that I can see in any folder.
>
> Doh!! I just decoded that email and found the text "Message was not
> read by" hidden in it so I guess you are right!
>
> I've tried the methods outlined elsewhere to try and fix this problem
> and didn't find anything to fix.
>
> How do I get rid of these messages & where did they come from since I
> can't see the "junk" messages that must have caused them?
>
> I've now turned off the OL junk handling but reciept handling was
> already set to "ask me" - so OL simply should not have been able to
> send these responses without my input.
>
> Regards,
> Julian.
>
>
> On Mar 12, 3:32 pm, "Diane Poremsky [MVP]" <outlook...@msn.com> wrote:
>> Know issue with IMAP accounts.
>> Seehttp://www.slipstick.com/problems/rr_ndr.asp
>>
>> AFAIK, the recent cumulative update did not address this issue but I also
>> didn't test it.
>>

"Knightnet" <(E-Mail Removed)> wrote in message
news:e1afd9aa-8182-4295-9553-(E-Mail Removed)...

> I think I've got all the updates & I can't seem to check at the moment
> as I can't connect to WU

The cumulative update doesn't get loaded by WU. It's a hotfix. You must go
get it.
--
Brian Tillman [MVP-Outlook]