bangkok108

keith
1.
i went to Challenge and deny options on top spammers and there is this:
“By default the plugin will support OpenCaptcha which is OK. For better results I have included the ability to use Google’s ReCaptcha, or you can try SolveMedia’s captcha using ads which can provide a revenue stream”.

so it means that i could install Google’s Recaptcha.
what do you think? will it be more efficient than Very simple Captcha?
how to install Google’s Recaptcha?

2.in the stop spammers/challenge sub menu in wordpress, you can uncheck the email box so you are not notified. question: Does it means that i have to put the rogue mail email address somewhere in a box in challenge sub menu? if yes where? sorry to ask, but i am new on WP
thanks
daniel

hi
i keep receiving many rogue mails on my mails box(yahoo.fr) despite the fact that i installed the plugin STOP SPAMMER.is it due to the Captcha? how to delete the malware?
thanks
daniel
http://www.apsaraventure.com

See example of rogue mail below:

This is an automatically generated Delivery Status Notification

THIS IS A WARNING MESSAGE ONLY.

YOU DO NOT NEED TO RESEND YOUR MESSAGE.

Delivery to the following recipient has been delayed:

jaqqscigs@gmail.com

Message will be retried for 2 more day(s)

—– Original message —–

X-Received: by 10.194.120.230 with SMTP id lf6mr44190034wjb.78.1428452521189;
Tue, 07 Apr 2015 17:22:01 -0700 (PDT)
Return-Path: <gerbaultd@yahoo.fr>
Received: from nm6-vm8.bullet.mail.ir2.yahoo.com (nm6-vm8.bullet.mail.ir2.yahoo.com. [212.82.96.124])
by mx.google.com with ESMTPS id y14si6508695wju.139.2015.04.07.17.22.01
for <jaqqscigs@gmail.com>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 07 Apr 2015 17:22:01 -0700 (PDT)
Received-SPF: none (google.com: gerbaultd@yahoo.fr does not designate permitted sender hosts) client-ip=212.82.96.124;
Authentication-Results: mx.google.com;
spf=none (google.com: gerbaultd@yahoo.fr does not designate permitted sender hosts) smtp.mail=gerbaultd@yahoo.fr;

hi
I keep getting this kind of mails a Trojan malware probably:
“Sorry, we were unable to deliver your message to the following address.<jaqqscigs@gmail.com>:
Message expired for domain gmail.com. Remote host said:
450-4.2.1 The user you are trying to contact is receiving mail at a rate that
450-4.2.1 visit
450 4.2.1 http://support.google.com/mail/bin/answer.py?answer=6592 a82si7963592ioe.42 – gsmtp
[RCPT_TO]

— Below this line is a copy of the message.
Received: from [98.138.100.103] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2015 00:33:43 -0000
Received: from [46.228.39.90] by tm102.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2015 00:33:43 -0000
Received: from [127.0.0.1] by smtp127.mail.ir2.yahoo.com with NNFMP; 07 Apr 2015 00:33:43 -0000
X-Yahoo-Newman-Id: 106218.18154.bm@smtp127.mail.ir2.yahoo.com
Message-ID: <106218.18154.bm@smtp127.mail.ir2.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: TkNNIp0VM1l02S0_zrHn_FOjgwDTujug1QybaynDYGbj_g9
aSJsVEEQu9GSXMVsyuFerP3g_mwbISIWNGMPc2Gh0abiCKqIrD4KuSFGMO6Y
cLwdqiBR2O7isnG1sl3LAvZ4KBUt2KEL85PxCv1r9JffKdsf.oO5UOmJDlaV
YqrbQaQxQnY5ugoRiMh0guje5hOQDnkwtxayXuTGmDvBs.httZCd1kEYk_SC
j0dx029MUrR3yMQ8RK6.XHMOMB36KOdt3tcNTghfbE7SER7kyPqgD4YpltaK
w.s1pNIpT5yzQzwpBvorgPDX0DazGonfrgQ3rMlRq7USbBsTlQekr8Wg4xKu
rjXdHRlgjjDVhZorbCbKsHQZHgtQay5MFnxPkYzR2axPuDr2QsWBN72hND1f
jVSoSUo17dxIGAFyUcLHIe9lzhG0cECb4j2_dX8D6ZydYp2Ittap7ZJtA4Ib
4Oyu2QhpIdNqeEdUKPeOszS9I06zlsDIXTn8rDQVpyqueo4FFFNtrol_FYo1
HRKh8vD9U_3IdidTRoUn..IshJOMGBpGPYbseEw–
X-Yahoo-SMTP: lDCYAayswBCtK7ypCJnataInH3lTBQ–
X-Mailer: Postman SMTP 1.5.11 for WordPress (https://wordpress.org/plugins/postman-smtp/)
Content-Type: text/plain; charset=UTF-8
From: Apsara <gerbaultd@yahoo.fr>
To: jaqqscigs@gmail.com
Subject: WordPress Plugin
Date: Tue, 07 Apr 2015 00:33:39 +0000
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
MIME-Version: 1.0

Postam moderator wrote me this:
You’ve installed a trojan on your system… a trojan is a piece of software that says it does something good to trick you into installing it, but it really does something bad. look at this screenshot. I found a plugin that creates a backdoor administrator user and sends the rogue email to jaqqscigs@gmail.com. I disabled the plugin.

jason from postman wrote this:
“Tel me Daniel, where did you download “ubermenu-skins-flat” from? Obviously not the official site.”

i answered him that i deleted Ubermenu skins-falt from WordPress, but i still get the same spams : “Sorry, we were unable to deliver your message to the following address.<jaqqscigs@gmail.com>:

i don’t know what to do now.
can someone help?
thanks
daniel
http://www.apsaraventure.com