PDA

View Full Version : Re: OT - Mail Virus


COOLLURES
September 19th, 2003, 03:50 PM
"Hey Bob, I am going to give that a shot too. I am getting about 50 evrey
time I open my email.What a pain, Glad I have Nortons running.

Jeff

--
COOL LURES
The Lures that put FISH on ICE!
www.coollures.com

Chuck Coger
September 19th, 2003, 09:29 PM
Only it makes it twice as bad because the message with an attachment is
undeliverable so it hangs your forwarding server up until they eventually
time out. Usually 5 days later.

I just have my virus scaneer deleting the attachments, sure I do a little
pruning but they all go to the same box so a
click ---> shift+click on the last message and the delete key makes quick
work of it.
---
Chuck Coger
http://www.fishin-pro.com

"RichZ" > wrote in message
...
> Bob wrote:
> > I just set that
> > address to forward all incoming e-mail to a nonexistant e-mail and send
an
> > autoreply explaining that e-mails to that address will never be
deliverd.
> >
>
> The autoreply just further adds to the traffic clog of useless email being
> generated by these latest rounds of email worms.
>
> RichZ©
> www.richz.com/fishing
>
>

Shawn
September 19th, 2003, 11:58 PM
Why in the world go through all those gyrations? Why not SPAM proof your
"reply to" and be done with it? But that would be too easy, and not near as
much fun.

--
Early to Bed, Early to Rise,
Fish all Day, Make up Lies.

Shawn

"Bob La Londe" > wrote in message
...
> I have a different address ) I use as my reply to
> e-mail address for my usenet posts. In the last day or two I have
received
> close to a thousnad copies of that darn e-mail virus that has been going
> around. No big deal, except it clogged up my mail server. I just set
that
> address to forward all incoming e-mail to a nonexistant e-mail and send an
> autoreply explaining that e-mails to that address will never be deliverd.
>
> Wow! all of a sudden its very quiet in my mail box.
>
>
> --
> Bob La Londe
> Yuma, Az
> http://www.YumaBassMan.com
>
>

Bob La Londe
September 20th, 2003, 04:22 AM
Because if you decide to go fishing in Yuma sometime, and decide to drop me
an e-mail asking if I am available that weekend from a usenet post you will
get the reply with the spam resistant real e-mail address I actually use.


--
Bob La Londe
Yuma, Az
http://www.YumaBassMan.com

"Shawn" > wrote in message
...
> Why in the world go through all those gyrations? Why not SPAM proof your
> "reply to" and be done with it? But that would be too easy, and not near
as
> much fun.
>
> --
> Early to Bed, Early to Rise,
> Fish all Day, Make up Lies.
>
> Shawn
>
> "Bob La Londe" > wrote in message
> ...
> > I have a different address ) I use as my reply
to
> > e-mail address for my usenet posts. In the last day or two I have
> received
> > close to a thousnad copies of that darn e-mail virus that has been going
> > around. No big deal, except it clogged up my mail server. I just set
> that
> > address to forward all incoming e-mail to a nonexistant e-mail and send
an
> > autoreply explaining that e-mails to that address will never be
deliverd.
> >
> > Wow! all of a sudden its very quiet in my mail box.
> >
> >
> > --
> > Bob La Londe
> > Yuma, Az
> > http://www.YumaBassMan.com
> >
> >
>
>

alwaysfishking
September 20th, 2003, 04:39 AM
How Do I stop it from getting so many e-mails? 110 today, 200 more this
afternoon
"Shawn" > wrote in message
...
> Why in the world go through all those gyrations? Why not SPAM proof your
> "reply to" and be done with it? But that would be too easy, and not near
as
> much fun.
>
> --
> Early to Bed, Early to Rise,
> Fish all Day, Make up Lies.
>
> Shawn
>
> "Bob La Londe" > wrote in message
> ...
> > I have a different address ) I use as my reply
to
> > e-mail address for my usenet posts. In the last day or two I have
> received
> > close to a thousnad copies of that darn e-mail virus that has been going
> > around. No big deal, except it clogged up my mail server. I just set
> that
> > address to forward all incoming e-mail to a nonexistant e-mail and send
an
> > autoreply explaining that e-mails to that address will never be
deliverd.
> >
> > Wow! all of a sudden its very quiet in my mail box.
> >
> >
> > --
> > Bob La Londe
> > Yuma, Az
> > http://www.YumaBassMan.com
> >
> >
>
>

bubba in italy
September 20th, 2003, 07:30 AM
I don't know how to get them to stop but I know that it is on my ISP side
because I don't have the virus on my machine and it appears that my address
has been sending out emails. I know a few other people on this POS ISP that
is having this problem, It is the only choice in the area for ADSL. shoot
probly the only one in the country.
I know that allot of state side servers will not accept email from this ISP
just like AOL suck lock out my webhost company the last round for no reason,
except that they said is wasn't secure enough, cough.
--
Carl Walters
Montichiari,Italy
www.countrymods.com


"alwaysfishking" <alwaysfishking@ nospam.epix.net> wrote in message
...
> How Do I stop it from getting so many e-mails? 110 today, 200 more this
> afternoon
> "Shawn" > wrote in message
> ...
> > Why in the world go through all those gyrations? Why not SPAM proof your
> > "reply to" and be done with it? But that would be too easy, and not near
> as
> > much fun.
> >
> > --
> > Early to Bed, Early to Rise,
> > Fish all Day, Make up Lies.
> >
> > Shawn
> >
> > "Bob La Londe" > wrote in message
> > ...
> > > I have a different address ) I use as my
reply
> to
> > > e-mail address for my usenet posts. In the last day or two I have
> > received
> > > close to a thousnad copies of that darn e-mail virus that has been
going
> > > around. No big deal, except it clogged up my mail server. I just set
> > that
> > > address to forward all incoming e-mail to a nonexistant e-mail and
send
> an
> > > autoreply explaining that e-mails to that address will never be
> deliverd.
> > >
> > > Wow! all of a sudden its very quiet in my mail box.
> > >
> > >
> > > --
> > > Bob La Londe
> > > Yuma, Az
> > > http://www.YumaBassMan.com
> > >
> > >
> >
> >
>
>

RGarri7470
September 20th, 2003, 02:04 PM
>How Do I stop it from getting so many e-mails? 110 today, 200 more this
>afternoon

As much as I hate AOL, I got only 12 emails through the address I use here
yesterday. I think they are blocking it some way. On the other email that I use
on my site I received 1361 yesterday between 9 AM and 10 PM. 1355 were markes
SPAM by About but I still have to delete them - they give us the option just in
case there is a mistake. For example, for a time Rob's great stories were
marked as spam.
Ronnie

http://fishing.about.com

RGarri7470
September 20th, 2003, 02:06 PM
> I don't have the virus on my machine and it appears that my address
>has been sending out emails.

I was getting spam from my fishing.guide email and checked it out. As Fritz
showed me, anyone can use your email address to send out spam. Someone was
doing that for a time, had nothing to do with me, my computer, my ISP or
anything else I was doing.
Ronnie

http://fishing.about.com

RichZ
September 21st, 2003, 12:53 AM
Bubba wrote:
> and it appears that my address
> has been sending out emails
>
Nothing to do with your ISP. The most recent worms search an infected
machine for email addresses. Let's say they find 100 text strings that they
interpret as email addresses. Most just look in the outlook address book,
but many now search the outlook message base and all txt and html files ont
he infected machine. Yours is one they find. Perhaps this infected machine
is someone who surfs this group. Perhaps it's someone who you have sent an
email to, or who has sent an email to you. Whatever, your email address is
among the 'lucky' hundred.

The worm starts sending itself to 99 of those email address, posing as the
other one. Left to its own devices with an open connection to the net, it
will do this 100 times, sending itself too everyone it finds in the
infected machine, FROM everyone it finds in the infected machine (the
'from' part is called 'spoofing' the email addresses).

RichZ©
www.richz.com/fishing

BassMr.
September 21st, 2003, 02:54 AM
Randy,I have had 600 since Thursday morning.I finally called
Mindspring/Earthlink,and they installed spam blocker for me and deleted them
all too.Working well (for now) but we will see.

Doc \(The Tin Boat King\)
September 21st, 2003, 04:41 AM
I' ve expanded my kill file big time but they have finally stopped. Bill P.=====================================

"BassMr." > wrote in message link.net...
Randy,I have had 600 since Thursday morning.I finally called
Mindspring/Earthlink,and they installed spam blocker for me and deleted them
all too.Working well (for now) but we will see.

Josh
September 21st, 2003, 04:15 PM
Bob,
I'v e been suffern with this too. But I don't know how to get mail
forwared and auto reply. I've been tinkering with Outlooks Mail rules which
seems to be of no effect whatsoever. Could you post here how to do what you
recommend? thanks and forgive my ignorance. Have a great week. . . off to
the river.

--
God Bless America

Josh The Bad Bear

Bob La Londe
September 21st, 2003, 11:20 PM
I actually use a differe e-mail than everybody see, then i use the mail
alias forwardign from my web host.

There is no actual pop server providing service fro
all alias' from that domain name are
forwarded to my actual address, and I just cludge my reply address to show
the appropriate address for return e-mail.

I started using for my reply address when posting
to usenet. I told my mail forwarding setup to send replies to it to
oblivion.




"Josh" > wrote in message
...
> Bob,
> I'v e been suffern with this too. But I don't know how to get mail
> forwared and auto reply. I've been tinkering with Outlooks Mail rules
which
> seems to be of no effect whatsoever. Could you post here how to do what
you
> recommend? thanks and forgive my ignorance. Have a great week. . . off to
> the river.
>
> --
> God Bless America
>
> Josh The Bad Bear
>
>

Carlos
September 22nd, 2003, 12:17 AM
It seems that of all the places I frequent, it's only those of us here, or
those that use the usenet that are getting clobbered.

Carlos

Andrew Kidd
September 22nd, 2003, 01:33 AM
"Carlos" > wrote in message
...
> It seems that of all the places I frequent, it's only those of us here, or
> those that use the usenet that are getting clobbered.
>
> Carlos

I think you're right Carlos. It's really funny. The *only* thing I use
the webmaster address is for this group and APBF. I have not received
another of these MS themed viruses in any of my other email accounts. I've
only been receiving about 30-40 a day. I have them filtered by "subject"
and "from" combinations, so I'm knocking out almost all of them now at the
server level. Ahhhh, the benefits of having access to the server! :-).

Bob LaLonde has a really good idea of the dummy address to forward email
from. If it gets to bad, just lose the account and start another. May have
to give that one some thought...

--
Andrew Kidd
http://www.amiasoft.com/ - Software for the rest of us!
http://www.rofb.net/ - ROFB Newsgroup Home

BassMr.
September 22nd, 2003, 01:37 AM
This virus is called the W32.Swen.A or W32.Swen.MM and from all the tech
advisors I have spoken to it's very hard to get rid of.It attacks through
your email,or through newsgroups and when you take the steps to delete
it,the sneaky thing will install itself all over again.
For more info go to www.symantec.com
I have been told that it may mean deleting all files,reconfiguring your
internet setup,and generally being ****ed off in the process.Good Luck!