message sending to other destination, possible hijack?

[trec]

I have recieved a mailer-deamon failure notice of a message that didn't arrive to their destination.

the problem is the e-mail has the text of one of my messages that was sent to an specific user, and the error returns with several addresses from Brasil wich I don't know, it seems as if the message were sent with copy to this Brasil users without my knowledge.

Is there anyway this could happen directly form the server?
Using RHES3 qmail and Plesk 7.5.4

I also looked at my maillogs for the full last week and can't find when this message was sent to the .br accounts

here is some of the failure notice (I don't know anyone from Brasil)

----
Hi. This is the qmail-send program at xxxxx.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[email protected]>:
200.234.203.6 does not like recipient.
Remote host said: 550 desculpe, este destinatario nao existe. sorry, that
mailbox isn't in my list of allowed mailboxes (#5.7.1)
Giving up on 200.234.203.6.

<[email protected]>:
200.234.203.6 does not like recipient.
Remote host said: 550 desculpe, este destinatario nao existe. sorry, that
mailbox isn't in my list of allowed mailboxes (#5.7.1)
Giving up on 200.234.203.6.

<[email protected]>:
200.160.167.17 does not like recipient.
Remote host said: 550 <[email protected]>: Recipient address rejected:
[email protected]... No such user
Giving up on 200.160.167.17.

--- Below this line is a copy of the message.

Return-Path: <pepe@x***********>
Received: (qmail 3911 invoked from network); 22 Aug 2006 12:26:03 -0500
Received: from dsl-189-165-42-xxx.prod-xxx.com.mx (HELO gerencia)
(189.165.42.xx)
by xxxx.com with SMTP; 22 Aug 2006 12:25:59 -0500
From: xxxxxx
To: "Alvaro xxxx" <[email protected]>,
"'Bernardo xxxxxx'" <[email protected]>
Subject: memxxxx
Date: Tue, 22 Aug 2006 13:27:39 -0500
Message-ID: <00c301c6c618$b8797480$690fa8c0@gerencia>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00C4_01C6C5EE.CFA36C80"
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcbGGKXZwFI62nnjTxq06Ix0ZOBpYQ==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962

This is a multi-part message in MIME format.

------=_NextPart_000_00C4_01C6C5EE.CFA36C80
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_00C5_01C6C5EE.CFA36C80"


------=_NextPart_001_00C5_01C6C5EE.CFA36C80
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

 

[dasmo]

From what I've found this error occurs when you use qmHandle to delete messages from the queue. Doesn't seem to actually fail, just sends failure notices. It's probably best to only use qmHandle when really needed. A large queue doesn't really matter unless it's causing you problems.