# Why am I getting "mailer-daemon" emails all of the time? **URL:** \ **Category:** Factual Questions\ **Created:** [August 27, 2003, 3:49am UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902 "2003-08-27T03:49:06Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![BrentLumkin](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@BrentLumkin](https://boards.straightdope.com/u/BrentLumkin)\ **Post date:** [August 27, 2003, 3:49am UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902/1 "2003-08-27T03:49:06Z")
It’s as if a ton of emails that I have sent out are being returned to me, but the thing is, I haven’t sent anything to any of the addresses that the emails have listed. How can I get this to stop ASAP? I get them every few minutes, and it’s really becoming quite bothersome. ---
**Author:** ![World\_Eater](https://avatars.discourse-cdn.com/v4/letter/w/f04885/32.png) [@World\_Eater](https://boards.straightdope.com/u/World_Eater)\ **Post date:** [August 27, 2003, 3:53am UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902/2 "2003-08-27T03:53:39Z")
Sounds like bouncebacks. ---
**Author:** ![BrentLumkin](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@BrentLumkin](https://boards.straightdope.com/u/BrentLumkin)\ **Post date:** [August 27, 2003, 3:57am UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902/3 "2003-08-27T03:57:41Z")
Thanks, but what does this mean? ---
**Author:** ![jweb](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@jweb](https://boards.straightdope.com/u/jweb)\ **Post date:** [August 27, 2003, 4:31am UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902/4 "2003-08-27T04:31:09Z")
**Brent** , It sounds like someone you know is infected with the Sobig.F virus that started making the rounds last week. And it’s a rather nasty one at that. [http://antivirus.about.com/library/weekly/aa081903b.htm](http://antivirus.about.com/library/weekly/aa081903b.htm) Paraphrasing from the link, when the virus infects a machine, it searches that person’s address book for addresses. It then starts sending out copies of itself, but it forges the ‘from’ part of the email to appear that it’s from you. IOW, if my machine is infected, and you and **World Eater** are in my address book, the virus will send copies of itself to you from my machine but pretend to be from **World Eater**. The returned emails you’re referring to are a side effect of this. Competent mailserver admins will, of course, have their servers set up to detect this virus before the message reaches the destination address. They generally also send out a “Warning, you message contained a virus” type message to both the sender and receiver in order to alert both parties to the invection. However, they neglect to realize that these emails are wasted time, bandwidth, and space because Sobig.F forges the from address. And the beauty of it, from the virus’s perspective, is that the infected machine never knows that they’re infected, since none of the returned emails are returned to the infected machine. Unfortunately, there’s not much you can do to stop it. Sometimes the returned messages will include the intended recipient’s address, if you’re lucky you can make an educated guess about who’s machine is infected by examining the addresses the virus attempts to send itself to. I figured out that my football coach’s machine was infected this way; several of the returned emails were intended for my teammates and people that work at the same company as my coach. Hope this helps. ---
**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\ **Post date:** [August 27, 2003, 4:33am UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902/5 "2003-08-27T04:33:54Z")
Some of them also return the body - 100+k. That can overflow a crappy Hotmail account pretty quickly. ---
**Author:** ![handy](https://avatars.discourse-cdn.com/v4/letter/h/b5a626/32.png) [@handy](https://boards.straightdope.com/u/handy)\ **Post date:** [August 27, 2003, 3:23pm UTC](https://boards.straightdope.com/t/why-am-i-getting-mailer-daemon-emails-all-of-the-time/197902/6 "2003-08-27T15:23:18Z")
Just filter them out if you don’t want to get them.