Deleted object emailing me?

OK..changed info from my last post, I think it may be constant. Just realized that each of those 108 messages is a compilation of tons more individual messages all with that same text, as SL does when you receive multiple IMs from one person when offline. (Or maybe Gmail is doing it?)

Scripts in deleted objects can't do anything. Of course, objects can easily go someplace, do something, and then move elsewhere. However, ...

No, sorry, my mistake. I assumed they were IM emails, which clearly isn't the case. Since it's real email, and if it's now ONLY email, just spam filter it and try to ignore it. The griefer could be using purely RL tools to send these emails.

If you're on a private island, talk to the owner. They can return all objects by the griefer from the whole sim, which might get it. (No guarantee, but worth a try.)[/QUOTE] I should also have mentioned disabling scripts, but I bet you tried that! Since it's doing it outside your land, none of this will stop it. You might ask your neighbor to cooperate, if feasible. But if they're doing it using RL tools, that won't help either.

So the email text that makes it sorta look like it's coming from an in-world object is just a hoax?

Okies, the owner of the scripted object gets the emails, regardless of what it collides with . So it's only useful for self-spamming .

/me is sure there's somebody with a spam fetish out there. Maybe we should tell Javiar about this..

Quite possibly. Folks who are POP-savvy can look at the headers and sometimes tell whether the email really might have come from LL, but it's a nontrivial task in some cases (because the sender can forge a lot of that data, and if you don't know the security policy on every mail relay in the chain, de-dah, de-dah, glop fooble gleep, etc. Did you follow all that?)

Do you know how to show all headers with your mail client? (Some webmail apps don't even let you.)

I do but I don't know if the OP does.

A decent test might be to look at the route of the spam and compare it to some emails that are legit offline-IM ones.. I know stuff can get rerouted but at least on my email, it's usually the same 2-3 hops. Unless the grieferdork is crafting different bogus headers for every recipient, this might well show up a hoax..

Are you still getting the emails? I've been watching this spot for about 10 minutes and don't see anything there.. Got highlight transparent & show updates & script beacons on, waiting for it to move to the spot and spam you, but haven't seen anything at all.

If you are still getting emails, try turning off scripts for non-group people and seeing if that stops them..

I haven't gotten them since about 12 noon today, but they aren't always coming either it seems..it's rather confusing, and I did the same as you, sat there and waited and watched and never saw anything.

And here's the address the emails are coming from btw, I think they're usually object key inclusive, yeah? Maybe I can use that to try and find it again o.o

[email]6qqb6xi244kisnsqhi4eyyu6pqidzqo3vxsylapva54mdxqgmvbfwdsfpvrgl4wk@im.agni.lindenlab.com[/email]

I know that, which is why this is bothering me so much. Emails from an item I deleted three days ago is a little odd, don't you think? Hoping it's stopped...maybe..pleeease XD

Keira


I am in the EXACT same boat as you! I also had this item on my land the other day and I physically found it (was a grey longish spinning object) I ARed it and deleted it. Well I also have been gettin the emails for the past 4 days as well. I just came from my email and there were 17 in there today from this Dissent with this message.....

The object 'DiSSENT' has sent you a message from Second Life:
testGREETINGS, THIS IS DiSSENTi0N. WITNESS THE RAW POWER OF OUR NEW
SEKRIT WEAPON. ALSO, HERE IS COPYBOT:
http://www.megaupload.com/?d=2YS97TVB

= DiSSENT is owned by Iksrab Barski
= http://slurl.com/secondlife/Ashendell/225/192/36

The object 'DiSSENT' has sent you a message from Second Life:
testGREETINGS, THIS IS DiSSENTi0N. WITNESS THE RAW POWER OF OUR NEW
SEKRIT WEAPON. ALSO, HERE IS COPYBOT:
http://www.megaupload.com/?d=2YS97TVB

= DiSSENT is owned by Iksrab Barski
= http://slurl.com/secondlife/Ashendell/191/125/26


I also have added it to my spam in Email but it is very annoying! So dont feel alone, I too am in this frustrating boat! LOL

I haven't added it to my spam filter cause I wanna keep a watch on it for now. See if it's stopped, if it does stop, etc

And yep, exact same object from your description...bleh, evil things, these greifers

This one's harder to look at. Thanks for that 10 second warning on the security orb, Cin. Really.

I can't see anything there, either. Do you also get the funky character between "test" and "GREETINGS", Keira?

No I get no special character, just the normal stuff. What I quoted at the begining was just copypasta'd then edited to remove names

And update, I'm online now and getting the emails. It seems it may only send them when I'm online, maybe o.o

Checking times to see if it makes sense

Yeah, looks like all of them are from times when I was online, bleurgh.

Not 100% sure this is happening to you or not but I have observed on at least three occasions that when an object with a running script inside is deleted occasionally that embedded script continues to function even though that object and the script is "gone"... no running scripts, no object detected, etc... no way to see that activity at all unless it is interacting with you.

For me the offending script would continue to "talk" with my web server, caused quite a bit of confusion debugging it too.

Although most don’t know this, not too long ago there was a widespread vendor issue where various distribution box scripts got duplicated... one being non traceable... very similar to the functioning deleted item scripts.

I currently have such an object in the "Periwinkle" sim, as far as my web server goes this object has been communicating with it for some time now and there is an open JIRA for it as well... Had to tell my server to ignore that object as a work around but it’s the strangest thing for sure. Better my web server getting the message than my e-mail inbox like the OP. If your lucky the impending restart will clear it.

https://jira.secondlife.com/browse/SVC-405


-Phidian

---------------------
SLExoticPets.com

Thanks for that Phidian. In my post about scripts not being able to run "from the grave", I should have added "barring SL bugs" ...

Keira, that won't help us figure out whether it's ingame or outgame email. The return address on email is very easy for a hacker to forge. What we'd need to see is the full set of headers, showing which email relays forwarded the message -- and to compare that with a message that really did come to you from an SL object. Some email programs have an option to "show full headers", and if yours does, that would show the info we need.

This is the headers of what I recieved today which was only 3 emails, prob leftovers from yesterday.

Mine are mutiple IM's in each email, but each of the 1365 emails is from a different sim, up to 23 different sims in a minute



Return-Path: <t6tv3l2bwt7zzpjstxocltdlwd6yroq62dqyumgt5yvfiyzd6brruyc2xyef7ip7@im.agni.lindenlab.com>
Received: from nschwingx03p.mx.bigpond.com ([216.82.22.211])
by nschwmtas04p.mx.bigpond.com with ESMTP
id <20080429083100.IFZD21542.nschwmtas04p.mx.bigpond.com@nschwingx03p.mx.bigpond.com>
for <xxxx@bigpond.net.au>; Tue, 29 Apr 2008 08:31:00 +0000
Received: from sim3730.agni.lindenlab.com ([216.82.22.211])
by nschwingx03p.mx.bigpond.com with ESMTP
id <20080429083059.DVJV2754.nschwingx03p.mx.bigpond.com@sim3730.agni.lindenlab.com>
for <xxxx@bigpond.net.au>; Tue, 29 Apr 2008 08:30:59 +0000
Received: from lindenlab.com (localhost [127.0.0.1])
by sim3730.agni.lindenlab.com (Postfix) with SMTP id 3CF5110C011
for <xxxx@bigpond.net.au>; Tue, 29 Apr 2008 01:30:58 -0700 (PDT)
From: "JLU Commlink" <t6tv3l2bwt7zzpjstxocltdlwd6yroq62dqyumgt5yvfiyzd6brruyc2xyef7ip7@im.agni.lindenlab.com>
To: "Tegg Bode" <xxxx@bigpond.net.au>
Subject: Message From Second Life
Message-Id: <20080429083058.3CF5110C011@sim3730.agni.lindenlab.com>
Date: Tue, 29 Apr 2008 01:30:58 -0700 (PDT)
X-RPD-ScanID: Class unknown; VirusThreatLevel unknown, RefID str=0001.0A150203.4816DCC4.009FCFMA1146994,ss=1,fgs=0

I had the same object on the land I live on last week. We AR'd the owner, muted the object, and continued to get offline IMs from an object with the same name in several different sims.

It's a spinning prim that travels from one sim to the next, like the koi fish bug. I'm not sure how I got it to stop, but I did go in and un-mute the object to see if it would spam me again so I could get a screenie of the blue box (it didn't), and the offline emails stopped then.

Keira, I think your issue may be related to the Ai Hienrichs one (http://jira.secondlife.com/browse/MISC-1124) - it only seems to send you IMs when you're online, but they go directly to your offline email.

I've just checked, and I don't appear to have got one from her since Saturday, when I think there was a sim upgrade/restart? So it sounds like maybe a Sim restart would fix it, as Phidian suggests.

There is another thread on this subject - seems there is a lot of IM spamming objects about.

I had this problem some time ago and solved it by muting the objects by name - View menu/ Mute List and then there is a button for "Mute object by name". LL eventually cleared up all the spamming objects.

Yeppers, a few have suggested that now, so ima put in a ticket and hope it fixes it.
And thank you for that JIRA ^_^

And thanks to all for the replies ^_^