Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

400 fake Microsoft virus emails

2 views
Skip to first unread message

Jonah Falcon

unread,
Sep 18, 2003, 9:09:22 PM9/18/03
to
This is fucking relentless -- why am I getting 400 virus emails from
schmucks who think I'll confuse them for real Microsoft emails (note to the
morons: Microsoft doesn't use freemail.com as an email server.)

Jonah Falcon


James A. Wolf

unread,
Sep 18, 2003, 9:20:03 PM9/18/03
to
"Jonah Falcon" <jonah...@mindspring.com> wrote:

I've already recieved two dozen today. At least they put some
effort into it with the graphics and hyperlinks to real MS sites.
Almost as annoying is the spam with the fake headers- that all
seems to be generated by the same engine.
--

<*> James A. Wolf - james...@comcast.net <*>

"The jawbone of an ass is | "We have learned that terrorist attacks are not
just as dangerous a weapon| caused by the use of strength; they are invited
today as in Samson's time | by the perception of weakness."
Richard M. Nixon | George W. Bush

Derek Janssen

unread,
Sep 18, 2003, 9:31:25 PM9/18/03
to
Jonah Falcon wrote:

Most *real* Microsoft employees also have a reasonable grasp of English,
and tend not to use Bill-bashing gags ("Another pack from Micro$oft") in
the header...

(And why am I responding to a Jonah post, you ask?--
Just to say: Phew. At least I'm not the only one getting these.)

Derek Janssen (who will use Netscape until the day science or Apple
finds a cure for Outlook)
dja...@rcn.com

George Johnson

unread,
Sep 18, 2003, 11:23:12 PM9/18/03
to
"Jonah Falcon" <jonah...@mindspring.com> wrote in message
news:6Hsab.40689$Aq2....@newsread1.news.atl.earthlink.net...

I'm averaging about one virus emailed to me a minute.

Thankfully I am using MAILWASHER to filter out the headers and delete
them at the server.
www.mailwasher.net

I would recommend downloading AVG Antivirus Free Edition to check your
computer.
www.grisoft.com/us/us_dwnl_free.php


Shearerj12345

unread,
Sep 19, 2003, 12:07:28 AM9/19/03
to
Jonah Falcon said:

I hear you there, buddy. What really gets me is that there are people out
there who are actually fooled into thinking those are *real*. I'm not suprised
or anything, mind you. Just upset and annoyed because the morons sending those
things will actually have some success in getting people to download the files.
--Jesse Shearer

Jeffrey Johnson

unread,
Sep 19, 2003, 2:14:10 AM9/19/03
to
Embark, dear reader, on a tour of the wisdom of Shearerj12345:

Well, to be perfectly honest, when I got the first one yesterday, I
thought it was real. Mind you, I use a Mac, so I saw this e-mail that
said "Microsoft Security Update", figured I must have input my e-mail at
some point during a Windows install at work, and deleted it as spam
without reading through it. It wasn't until I got about 10 of them in a
row tonight that I put two and two together, boy howdy.

Oops! Pine has beeped to tell me I just got another one!

Now, the real question is - which moron friend/colleague of mine
installed this biatch?

JSJ1TG, somebody's gonna get a noogie.

--
"And the ghosts of the sailors who died on the rocks feel not a twinge of
regret/Though the wind may tangle the hair on your head, you sing like a
siren to me." -Cracker

George Johnson

unread,
Sep 19, 2003, 8:42:36 AM9/19/03
to
"George Johnson" <matr...@voyager.net> wrote in message
news:vmku259...@corp.supernews.com...

Well, this is SPECIAL ("special" as in e-specially retarded)... I got
239 virus emails to my INBOX last night (while I was at work).

My ISP emailed me also to state that my mailbox is FULL (25 MB limit).
At around 145 KB to 154 KB per virus email and emails claiming I was sending
viruses (I am certain I am not though I am running my antivirus scanner
right now because I received "returned to sender emails" while I was offline
for about an hour so it was the GIBE virus being sent in my name).

Cripes, this means I'm going to have a shitload of bounced emails
because someone with my email address in their database or address book.
I'm going to have to email my friends (and a certain friend that does
occassional mass-emailings usually of old jokes or tired already debunked by
everyone, rumors & dumb stuff that SNOPES tackled long ago).


Tammy Stephanie Davis

unread,
Sep 19, 2003, 9:27:27 AM9/19/03
to
James A. Wolf <james...@comcast.net> wrote:
: "Jonah Falcon" <jonah...@mindspring.com> wrote:

:>This is fucking relentless -- why am I getting 400 virus emails from
:>schmucks who think I'll confuse them for real Microsoft emails (note to the
:>morons: Microsoft doesn't use freemail.com as an email server.)

: I've already recieved two dozen today. At least they put some
: effort into it with the graphics and hyperlinks to real MS sites.
: Almost as annoying is the spam with the fake headers- that all
: seems to be generated by the same engine.
: --

<SIGH> I found about forty of them in my InBox this morning. Assholes.

---TSD(I mean, how can you not have *anything* better to do?!!....)

Kate Halleron

unread,
Sep 19, 2003, 9:57:53 AM9/19/03
to
Jeffrey Johnson <ez04...@mailbox.ucdavis.edu> wrote in message news:<Pine.GSO.4.44.03091...@vici.ucdavis.edu>...

> Embark, dear reader, on a tour of the wisdom of Shearerj12345:
> >Jonah Falcon said:
> >
> >>This is fucking relentless -- why am I getting 400 virus emails from
> >>schmucks who think I'll confuse them for real Microsoft emails (note to
> >>the morons: Microsoft doesn't use freemail.com as an email server.)
> >>
> >>Jonah Falcon
> >
> >I hear you there, buddy. What really gets me is that there are people
> >out there who are actually fooled into thinking those are *real*. I'm
> >not suprised or anything, mind you. Just upset and annoyed because the
> >morons sending those things will actually have some success in getting
> >people to download the files.
>
> Well, to be perfectly honest, when I got the first one yesterday, I
> thought it was real. Mind you, I use a Mac, so I saw this e-mail that
> said "Microsoft Security Update", figured I must have input my e-mail at
> some point during a Windows install at work, and deleted it as spam
> without reading through it. It wasn't until I got about 10 of them in a
> row tonight that I put two and two together, boy howdy.
>
> Oops! Pine has beeped to tell me I just got another one!
>
> Now, the real question is - which moron friend/colleague of mine
> installed this biatch?
>
> JSJ1TG, somebody's gonna get a noogie.


I just logged on and had 65 of the damn things.

Somebody's prety stupid, I'll have to agree to that.

But it's probably not someone I know, it's probably a spambot.

Kate

Rick Thorne

unread,
Sep 19, 2003, 10:09:04 AM9/19/03
to
Jonah Falcon wrote:

> why am I getting 400 virus emails ....

You can sing along!

400 virus e-mails in your inbox
400 virus e-mails
Take one down and pass it around
399 virus e-mails in your inbox

Rick
www.ricksongs.com
"Get the Silicon Valley Blues"

George Johnson

unread,
Sep 19, 2003, 10:33:54 AM9/19/03
to
"Jeffrey Johnson" <ez04...@mailbox.ucdavis.edu> wrote in message
news:Pine.GSO.4.44.03091...@vici.ucdavis.edu...

Curious... AVG doesn't identify this file as a virus. Norton Antivirus
lists it as...
http://securityresponse.symantec.com/avcenter/venc/dyn/42036.html
Worm.Automat.AHB
Detected as:
Worm.Automat.AHB

Aliases:
None

No additional information.

This threat is detected by the latest Virus Definitions.

All computer users should employ safe computing practices, including:

Keeping your Virus Definitions updated.
Installing Norton AntiVirus program updates, when available.
Deleting suspicious looking emails.
You may also scan your PC for threats now, by using the free online Symantec
Security Check.
http://security.symantec.com/default.asp?productid=ssr&langid=ie&venid=sym

To ensure complete protection against viruses and similar threats, please
review Symantec's product offerings for Home and Corporate users.


Shearerj12345

unread,
Sep 19, 2003, 10:55:31 AM9/19/03
to
Jeffrey Johnson said:

>Embark, dear reader, on a tour of the wisdom of Shearerj12345:
>>Jonah Falcon said:
>>
>>>This is fucking relentless -- why am I getting 400 virus emails from
>>>schmucks who think I'll confuse them for real Microsoft emails (note to
>>>the morons: Microsoft doesn't use freemail.com as an email server.)
>>>
>>>Jonah Falcon
>>
>>I hear you there, buddy. What really gets me is that there are people
>>out there who are actually fooled into thinking those are *real*. I'm
>>not suprised or anything, mind you. Just upset and annoyed because the
>>morons sending those things will actually have some success in getting
>>people to download the files.
>
>Well, to be perfectly honest, when I got the first one yesterday, I
>thought it was real. Mind you, I use a Mac, so I saw this e-mail that
>said "Microsoft Security Update", figured I must have input my e-mail at
>some point during a Windows install at work, and deleted it as spam
>without reading through it. It wasn't until I got about 10 of them in a
>row tonight that I put two and two together, boy howdy.
>

I guess I can sorta see how that could be an easy enough mistake to make. It
kinda did look like an official Microsoft email.

This morning, though, I was checking my Hotmail address (which I have because I
like having email that's more reliable than AOL's) and I found this little
item:

http://www.msnbc.com/news/968691.asp

It's about our new little "friend" that's been showing up to choke our email
boxes. Sounds like the previously stated advice about virus scanners and
filters is the way to go.
--Jesse Shearer

Jonah Falcon

unread,
Sep 19, 2003, 11:03:13 AM9/19/03
to
It's NOT stupid. I've gotten 2 emails from Earthlink telling me my email
space was all used up -- enough of them can prevent you from getting regular
email.

It isn't a virus attack - it's a mail server attack.

Jonah Falcon


Jonah Falcon

unread,
Sep 19, 2003, 11:04:32 AM9/19/03
to

"Shearerj12345" <sheare...@aol.com> wrote in message
news:20030919105531...@mb-m23.aol.com...

It ain't the VIRUS that's the problem. It's the sheer volume of mail that's
choking my email server. Twice it got filled up with these idiotic emails so
no real email could get through.

Jonah Falcon


Stephen Cooke

unread,
Sep 19, 2003, 11:16:48 AM9/19/03
to

On Fri, 19 Sep 2003, Tammy Stephanie Davis wrote:

> <SIGH> I found about forty of them in my InBox this morning. Assholes.
>
> ---TSD(I mean, how can you not have *anything* better to do?!!....)

Last night around dinner time they really started piling up. Then this
morning I open my PINE e-mail account....

846 frickin e-mails.

So I delete them all and quit out to dump them for good, and when I log in
about 10 seconds later....over 40 new e-mails. I'm getting four per
second. Heyzeus H. Christo.

swac

Jonah Falcon

unread,
Sep 19, 2003, 12:06:59 PM9/19/03
to
This great - Earthlink is reporting a massive internal problem due to the
volume of the Microsoft virus email.

Morons. Spaminator is worthless because it doesn't allow people to
automatically delete email from the server from their Suspect list, or allow
them to automatically delete anything with an .exe or .bat attached (since I
never ever ever get WANTED .exe mail.)

Jonah Falcon


Derek Janssen

unread,
Sep 19, 2003, 12:37:42 PM9/19/03
to
Jonah Falcon wrote:

> This great - Earthlink is reporting a massive internal problem due to the
> volume of the Microsoft virus email.

(And the irony?--Jonah has now turned "My mailbox is filling up" posts
into a Jonah Thread...)

Derek Janssen (if ya ain't part of the solution...)
dja...@rcn.com

Jonah Falcon

unread,
Sep 19, 2003, 12:47:44 PM9/19/03
to
Ignoring the jackass who has nothing better to do than make snide, useless,
unhelpful comments (typical internet geek), I have a temporary solution: I
have Outlook deleting from the server ANY emails with 100kb files attached
for now.

Jonah Falcon


Derek Janssen

unread,
Sep 19, 2003, 12:55:56 PM9/19/03
to
Jonah Falcon wrote:

I have a more permanent solution--Don't use Outlook.
That's what the virus intentionally uses to CAUSE it.

(Helpful enough for ya?) :)

Derek Janssen (who set his Netscape filter, and watches that lil' Trash
folder fill up by the hour)
dja...@rcn.com

Raymond Luxury Yacht

unread,
Sep 19, 2003, 2:31:42 PM9/19/03
to
I'm wondering why Microsoft hasn't done something for its Hotmail
users. I'm getting at least ten of these every few hours in my
Hotmail account, which is blocking me from getting real emails. You
would think they could perform an upgrade on their filtering systems
and get rid of the messages.

Raymond

James A. Wolf

unread,
Sep 19, 2003, 2:44:17 PM9/19/03
to
Derek Janssen <dja...@rcn.com> wrote:

>Jonah Falcon wrote:
>
>> Ignoring the jackass who has nothing better to do than make snide, useless,
>> unhelpful comments (typical internet geek), I have a temporary solution: I
>> have Outlook deleting from the server ANY emails with 100kb files attached
>> for now.
>
>I have a more permanent solution--Don't use Outlook.
>That's what the virus intentionally uses to CAUSE it.

Word.

I use Eudora. Outlook is the screen door on the submarine. It's what
all the virus makers are targeting. I keep on telling people not to
use Outlook as it's a permanent security breach. They never listen.

Jonah Falcon

unread,
Sep 19, 2003, 3:26:08 PM9/19/03
to

"Raymond Luxury Yacht" <throatwobbl...@hotmail.com> wrote in message
news:62a03cf2.03091...@posting.google.com...

And these idiotic mailbots from a ton of sites.

Jonah Falcon


George Johnson

unread,
Sep 19, 2003, 3:19:54 PM9/19/03
to
"Raymond Luxury Yacht" <throatwobbl...@hotmail.com> wrote in message
news:62a03cf2.03091...@posting.google.com...

I suggest downloading MAILWASHER.

And Raymond. Unless you have useful things to post here, I suggest you
wander back to the political newsgroups. This is a friendly warning.


Jonah Falcon

unread,
Sep 19, 2003, 3:37:24 PM9/19/03
to

"Stephen Cooke" <am...@chebucto.ns.ca> wrote in message
news:Pine.GSO.3.95.iB1.0.103...@halifax.chebucto.ns.ca...

I have Outlook deleting the emails larger than 130kb every minute from the
server. That'll do for now.

Jonah Falcon


Rick Thorne

unread,
Sep 19, 2003, 4:12:40 PM9/19/03
to
Raymond Luxury Yacht wrote:

> I'm wondering why Microsoft hasn't done something for its Hotmail
> users.

Maybe it's 'cuz of this: *all* commercial companies, be they great or
small, will cater to whomever is paying them. You pay no money for your
Hotmail account, so MicroSquish owes you nothing in return. The
companies who pay to advertise on the hotmail sites *do* pay, and all
they ask in return is to collect address data from you.

Hmmmm - you bring no money to the table, but commercial advertisers do.

MicroSquish will pay its allegence to *which* of you now?!?

Rick
www.ricksongs.com
"Take Back the Music!"

Stephen Cooke

unread,
Sep 19, 2003, 4:30:55 PM9/19/03
to

On Fri, 19 Sep 2003, George Johnson wrote:

> "Raymond Luxury Yacht" <throatwobbl...@hotmail.com> wrote in message
> news:62a03cf2.03091...@posting.google.com...
> | I'm wondering why Microsoft hasn't done something for its Hotmail
> | users. I'm getting at least ten of these every few hours in my
> | Hotmail account, which is blocking me from getting real emails. You
> | would think they could perform an upgrade on their filtering systems
> | and get rid of the messages.
>

> I suggest downloading MAILWASHER.
>
> And Raymond. Unless you have useful things to post here, I suggest you
> wander back to the political newsgroups. This is a friendly warning.

Hey, I want to know his feelings about Tammy Wynette.

swac
Cole Porter only *wishes* he could have written Your Good Girl Is Gonna Go
Bad.

Stephen Cooke

unread,
Sep 19, 2003, 4:35:37 PM9/19/03
to

On Fri, 19 Sep 2003, James A. Wolf wrote:

> Derek Janssen <dja...@rcn.com> wrote:
>
> >Jonah Falcon wrote:
> >
> >> Ignoring the jackass who has nothing better to do than make snide, useless,
> >> unhelpful comments (typical internet geek), I have a temporary solution: I
> >> have Outlook deleting from the server ANY emails with 100kb files attached
> >> for now.
> >
> >I have a more permanent solution--Don't use Outlook.
> >That's what the virus intentionally uses to CAUSE it.
>
> Word.
>
> I use Eudora. Outlook is the screen door on the submarine. It's what
> all the virus makers are targeting. I keep on telling people not to
> use Outlook as it's a permanent security breach. They never listen.

I called my provider (it's a local community Net service) and they told me
their filters were stripping the actual virus out of the e-mails, so I
wasn't getting the attachments, just the messages. When I told them I had
over 1000 messages in my inbox, they went the extra step of adding e-mails
with the prefix "VIRUS:..." to the automatic junk file (which you can have
deleted automatically or put in a file to delete manually).

Ah, customer service....

swac

George Johnson

unread,
Sep 19, 2003, 4:38:24 PM9/19/03
to

This is politics business not MST3K or Country Music business.
I am trying to be VERY polite about it.

If you don't like me, you'll not warm to Ray-Ray.


Derek Janssen

unread,
Sep 19, 2003, 5:45:24 PM9/19/03
to
Stephen Cooke wrote:

>
>>>Jonah Falcon wrote:
>>>
>>> I have a temporary solution: I
>>>>have Outlook deleting from the server ANY emails with 100kb files attached
>>>>for now.
>>>
>>>I have a more permanent solution--Don't use Outlook.
>>
> I called my provider (it's a local community Net service) and they told me
> their filters were stripping the actual virus out of the e-mails, so I
> wasn't getting the attachments, just the messages. When I told them I had
> over 1000 messages in my inbox, they went the extra step of adding e-mails
> with the prefix "VIRUS:..." to the automatic junk file (which you can have
> deleted automatically or put in a file to delete manually).
>
> Ah, customer service....

As for me, now that I set my Netscape to filter-delete the seven or
eight most frequent words the generator keeps auto-rotating ("Newest
Last Latest Critical Internet Microsoft Security Patch Upgrade Update"),
things've been quiet around here--
Now, the only ones that make it my mailbox are...the ones with blank
headers.

Derek Janssen (just gotta figure out a way to filter out those)
dja...@rcn.com

Gary Ehrlich

unread,
Sep 19, 2003, 6:25:39 PM9/19/03
to

And to even make this on topic...

If I ever get my hands on the shmuck who developed this worm, I am going
to tie them to a chair AND MAKE THEM WATCH "MANOS" UN-MISTED,
REPEATEDLY, until their brain liquefies and pours out of their nose and
ears...

-- Gary

(who has gotten nearly 400 pieces of this shit...)

--
"Gorgeous" Gary Ehrlich, P.E.
http://www.erols.com/hyperion/electro.html
Conterpoint Four, June 11-13, Rockville, MD
http://www.filker.org/conterpoint/


Emi Melissa Briet

unread,
Sep 19, 2003, 7:51:41 PM9/19/03
to
In article
<Pine.GSO.3.95.iB1.0.103...@halifax.chebucto.ns.ca>,
Stephen Cooke <am...@chebucto.ns.ca> wrote:

> Last night around dinner time they really started piling up. Then this
> morning I open my PINE e-mail account....
>
> 846 frickin e-mails.
>
> So I delete them all and quit out to dump them for good, and when I log in
> about 10 seconds later....over 40 new e-mails. I'm getting four per
> second. Heyzeus H. Christo.

Makes me feel lucky that I only get one every few minutes....and that I
have a 2GB POP box.

Still though....I run my own mail server here at my place using MS
Exchange v5.5 on a WinNTsp6a machine (yes, I know....old software and old
machine, but it's the only server I have). I tried to find blocking tools
but could only find a tool to block by sender. Is there any way I can
block on keywords?

--
Emi Melissa Briet -- Kawaii techie-chan and DDR Maniac! ^.^v
Keep your ear to the radio, and keep hot water with you at all times!

Tammy Stephanie Davis

unread,
Sep 19, 2003, 11:32:09 PM9/19/03
to
Gary Ehrlich <ele...@speakeasy.net> wrote:

: And to even make this on topic...

: If I ever get my hands on the shmuck who developed this worm, I am going
: to tie them to a chair AND MAKE THEM WATCH "MANOS" UN-MISTED,
: REPEATEDLY, until their brain liquefies and pours out of their nose and
: ears...

That should take one, maybe two viewings tops.

: -- Gary

: (who has gotten nearly 400 pieces of this shit...)

---TSD(About seventy and counting....)

Robert Hutchinson

unread,
Sep 20, 2003, 4:22:19 AM9/20/03
to
Rick Thorne <"backwards: moc.ocml"@enroht.kcir> says...

> Jonah Falcon wrote:
>
> > why am I getting 400 virus emails ....
>
> You can sing along!
>
> 400 virus e-mails in your inbox
> 400 virus e-mails
> Take one down and pass it around
> 399 virus e-mails in your inbox

399 virus e-mails in your inbox

399 virus e-ma-- *chime*

...

572 virus e-mails in your inbox
572 virus e-mails

--
Robert Hutchinson | "[Destiny's Child] got booed at the NBA
| playoffs. Even men in plush animal costumes
| don't get booed at the NBA playoffs."
| -- Fametracker.com

Fish Eye no Miko

unread,
Sep 20, 2003, 3:37:10 PM9/20/03
to
"Robert Hutchinson" <ser...@hotmail.com> wrote in message
news:MPG.19d5d85af...@news.east.earthlink.net...

> Rick Thorne <"backwards: moc.ocml"@enroht.kcir> says...
> > Jonah Falcon wrote:
> >
> > > why am I getting 400 virus emails ....
> >
> > You can sing along!
> >
> > 400 virus e-mails in your inbox
> > 400 virus e-mails
> > Take one down and pass it around
> > 399 virus e-mails in your inbox
>
> 399 virus e-mails in your inbox
> 399 virus e-ma-- *chime*
>
> ...
>
> 572 virus e-mails in your inbox
> 572 virus e-mails

LOL!
Ouch...
Am I the only one not getting these?

Catherine Johnson. Not that I'm *complaining*...
--
fenm at cox dot net
"When Catherine thinks you're too gay, you're too gay."
-Rob Fontenot, aka The Midnight Rambler, RATMM.


George Johnson

unread,
Sep 20, 2003, 3:37:54 PM9/20/03
to
"Fish Eye no Miko" <fis...@deadmoon.circus> wrote in message
news:EZ1bb.2360$gv5.120@fed1read05...

This must mean that your very close friends are computer literate I
guess.

No morons clicking EXE files blindly because it pretends to come from
Microsoft (which generally is a bad idea all around anyway).


George Johnson

unread,
Sep 20, 2003, 4:05:55 PM9/20/03
to
"Tammy Stephanie Davis" <tsdn...@robotron.gpcc.itd.umich.edu> wrote in
message news:3vDab.2772$H91....@news.itd.umich.edu...
| James A. Wolf <james...@comcast.net> wrote:
| : "Jonah Falcon" <jonah...@mindspring.com> wrote:
|
| :>This is fucking relentless -- why am I getting 400 virus emails from

| :>schmucks who think I'll confuse them for real Microsoft emails (note to
the
| :>morons: Microsoft doesn't use freemail.com as an email server.)
|
| : I've already recieved two dozen today. At least they put some
| : effort into it with the graphics and hyperlinks to real MS sites.
| : Almost as annoying is the spam with the fake headers- that all
| : seems to be generated by the same engine.
| : --

|
| <SIGH> I found about forty of them in my InBox this morning. Assholes.
|
| ---TSD(I mean, how can you not have *anything* better to do?!!....)

If you want a free way to find out if you have the virus and to remove
the virus then there is a stand-alone W32.Swen removal tool available.

http://www.norman.com/virus_info/w32_swen_a_mm.shtml
[ clipped ]
Spreading mechanism
The emails constructed by the worm are very realistic and may fool users
into believing they are getting a real update.

However, Microsoft never sends updates by email.

Detection and removal
The worm is detected by name and removed using definition files from 18
September 2003 or later. Users that have sandbox detection enabled will
already be protected and detect this as W32/P2PWorm.

We recommend that you download and run Norman's special fix to completely
remove this worm.
http://www.norman.com/public/swenfix.com (436 KB)


George Johnson

unread,
Sep 20, 2003, 5:01:42 PM9/20/03
to
"Emi Melissa Briet" <e...@emiofbrie.com> wrote in message
news:emi-190903...@rrcs-central-24-123-116-102.biz.rr.com...

Granted I may lose legit emails, this covers the most common patterns of
the W32.Swen (AKA GIBE - AKA AOL--GENEARATION-MORON-EXPLOITER) Virus.

Using the inadequate SPAM CATCHER (the damn thing doesn't autodelete the
spam) on my ISP I've settled on the major keywords below:

Existing Filters
Filter Name Definition

Microsoft crapvirus If the "subject" header contains "urgent update"
discard the message
Microsoft Virus If the "from" header contains "Microsoft" discard
the message
More Microsoft Virus Crap If the "from" header contains "MS Corporation"
discard the message
Microsoft CrapVirus FakePatch If the "from" header contains "New Network
Security Patch" discard the message
MS VIRUS FILTER - BECAUSE MY ISP HASN'T WOKEN UP YET If the "to" header
contains "Consumer " discard the message
MS VIRUS FILTER2 If the "to" header contains "User" discard the
message
MS VIRUS FILTER3 If the "to" header contains "Client" discard the
message
MS VIRUS FILTER4 If the "to" header contains "Mail" discard the
message
MS VIRUS FILTER5 If the "to" header contains "Customer" discard the
message
MS VIRUS FILTER6 If the "to" header contains "Net" discard the
message
MS VIRUS FILTER7 If the "from" header contains "Recipient" discard
the message
MS VIRUS FILTER8 If the "from" header contains "Receiver" discard
the message
MS VIRUS FILTER9 If the "from" header contains "Security" discard
the message
MS VIRUS FILTER10 If the "to" header contains "Microsoft" discard
the message

Derek Janssen

unread,
Sep 20, 2003, 5:26:06 PM9/20/03
to

...So, you have to do one filter for EACH word?

I just have two mass filters--
One to auto-delet the uppercase uses of "Microsoft", "Internet",
"Security", etc., and...one for the *lowercase* "microsoft", "internet",
"security", etc., that they've just now switched to.

Derek Janssen (might they perhaps have caught on, by now?)
dja...@rcn.com

George Johnson

unread,
Sep 20, 2003, 5:24:31 PM9/20/03
to
"Derek Janssen" <dja...@rcn.com> wrote in message
news:bkigcn$5or$1...@bob.news.rcn.net...

Had to. Many of the viral emails get sent under those keywords and skip
the words "Microsoft" "Internet" "Security" now.

I was getting quite a few to "MS Customer" "Net User" "Net Receiver" "MS
Client" "MS User", etc...
I'd go with the wide list of the permutations of individual keywords
until the filters go for filtering the actual attached files.

The big annoyance is now I am doing the humanitarian thing and training
SPAM CATCHER for my ISP (yawn! to go after each message so the other users
won't suffer). You'd think an attachment virus filter would be a better
investment than doing a tedious viral email keyword filter.


Robert Hutchinson

unread,
Sep 20, 2003, 8:58:17 PM9/20/03
to
Fish Eye no Miko says...

> Ouch...
> Am I the only one not getting these?
>
> Catherine Johnson. Not that I'm *complaining*...

I have yet to be hit by any of the recent ones--probably because I'm not
in anyone's address book. I have managed to get up to 100 regular spams a
day, though.

sali

unread,
Sep 20, 2003, 9:32:03 PM9/20/03
to
On Sat, 20 Sep 2003 12:37:10 +0000, Fish Eye no Miko wrote:


>> 399 virus e-mails in your inbox
>> 399 virus e-ma-- *chime*
>>
>> ...
>>
>> 572 virus e-mails in your inbox
>> 572 virus e-mails
>
> LOL!
> Ouch...
> Am I the only one not getting these?
>
> Catherine Johnson. Not that I'm *complaining*...

I'm not getting them on any mail account I actually read. I haven't
checked yet, but mebbe I'm getting deluged on my "Kenny" (a la South Park,
"Ohmigod, they killed Kenny!" "You bastards!) webmail account at Yahooey.

-Sali, "...and *whatever* you do, DO NOT open an attachment called
TomServo.exe. It will start a riffbot that will MSTify all your friends'
emails."

Shelby

unread,
Sep 21, 2003, 5:50:43 PM9/21/03
to
It's good to know I'm not the only one this is happening to. It was kind of
freaking me out.

Shelby
Easily freaked out.

Noah Singman

unread,
Sep 21, 2003, 9:06:32 PM9/21/03
to
"Shelby " <hot...@aol.com> wrote:
> It's good to know I'm not the only one this is happening to. It was kind
of
> freaking me out.

It's annoying, but a good reason to keep your antivirus software updated.
And just as Mike and the bots missed the Phantom of Krankor, I find myself
missing porn spam. :-)

> Shelby
> Easily freaked out.

We'll calm you down in New Orleans - have no fear! :-)

Noah
MST#59539
Reuniting evil twins in two millennia!

Chris Mehring

unread,
Sep 21, 2003, 10:45:26 PM9/21/03
to
Somehow, Noah got this message out of Ward E:

>"Shelby " <hot...@aol.com> wrote:
>> It's good to know I'm not the only one this is happening to. It was kind
>of
>> freaking me out.
>
>It's annoying, but a good reason to keep your antivirus software updated.
>And just as Mike and the bots missed the Phantom of Krankor, I find myself
>missing porn spam. :-)

PORN SPAM: Click HERE to get the best free porn on the net.

NOAH: God, Porn Spam, good to see you! What have you been up to?

PORN SPAM: Barely legal, hot chicks!! Right HERE!!

NOAH: Man, it is great to hear from you, Porn Spam.

PORN SPAM: Well, um, ... thank you. I don't know why I lash out like I do,
but just knowing that I have one friend...<sniff>....

NOAH: No problem, buddy. Just keep in touch. Okay?

PORN SPAM: (wipes eyes) I will, Noah. Oh, and by the way...See my WEBCAM
anytime!!!!

NOAH and PORN SPAM laugh like characters at the end of a _Perry Mason_ episode.

Chris "Now on the Hallmark Channel" Mehring
--
Enjoy every sandwich -- Warren Zevon
To reply e-mail address must be "pepsi" free.

sharky

unread,
Sep 22, 2003, 5:35:14 AM9/22/03
to
On Fri, 19 Sep 2003 18:44:17 GMT, James A. Wolf
<james...@comcast.net> wrote:

>Derek Janssen <dja...@rcn.com> wrote:
>
>>Jonah Falcon wrote:
>>
>>> Ignoring the jackass who has nothing better to do than make snide, useless,
>>> unhelpful comments (typical internet geek), I have a temporary solution: I
>>> have Outlook deleting from the server ANY emails with 100kb files attached
>>> for now.
>>
>>I have a more permanent solution--Don't use Outlook.
>>That's what the virus intentionally uses to CAUSE it.
>
>Word.
>
>I use Eudora. Outlook is the screen door on the submarine. It's what
>all the virus makers are targeting. I keep on telling people not to
>use Outlook as it's a permanent security breach. They never listen.

I use Pegasus and to say my Earthstink account was bombarded over the
weekend would be an understatment. I updated my IE and added the
latest patch to it (Im a Netscape user but my daughter and her Dad are
diehard IE users) and at first I was cutting/pasting the return emails
of the darned things into the Spam Blocker program then I started
using Mail Washer so I can delete the darn things BEFORE I have to
download them. They've decreased considerably but might have anyway..
but it makes me feel like Ive at least done something rather than take
it :)

Jeanetta
*pull out the splinter to reply*

Throwing Toasters

unread,
Sep 22, 2003, 9:40:31 AM9/22/03
to
In <qggtmv0j5r634532j...@4ax.com> sharky wrote:
> On Fri, 19 Sep 2003 18:44:17 GMT, James A. Wolf
> <james...@comcast.net> wrote:
>
>>Derek Janssen <dja...@rcn.com> wrote:
>>
>>>Jonah Falcon wrote:
>>>
>>>> Ignoring the jackass who has nothing better to do than make snide,
>>>> useless, unhelpful comments (typical internet geek), I have a
>>>> temporary solution: I have Outlook deleting from the server ANY
>>>> emails with 100kb files attached for now.
>>>
>>>I have a more permanent solution--Don't use Outlook.
>>>That's what the virus intentionally uses to CAUSE it.
>>
>>Word.
>>
>>I use Eudora. Outlook is the screen door on the submarine. It's what
>>all the virus makers are targeting. I keep on telling people not to
>>use Outlook as it's a permanent security breach. They never listen.
>
> I use Pegasus and to say my Earthstink account was bombarded over the
> weekend would be an understatment. I updated my IE and added the
> latest patch to it

I just use a Mac. That seems to solve all the virus troubles.


Grant
www.throwingtoasters.com

Carl Burke

unread,
Sep 22, 2003, 12:42:59 PM9/22/03
to
Stephen Cooke wrote:
> On Fri, 19 Sep 2003, Tammy Stephanie Davis wrote:
>
> > <SIGH> I found about forty of them in my InBox this morning. Assholes.
> >
> > ---TSD(I mean, how can you not have *anything* better to do?!!....)
>
> Last night around dinner time they really started piling up. Then this
> morning I open my PINE e-mail account....
>
> 846 frickin e-mails.
>
> So I delete them all and quit out to dump them for good, and when I log in
> about 10 seconds later....over 40 new e-mails. I'm getting four per
> second. Heyzeus H. Christo.

OK; that's bad. I thought my problems a few months ago where I was getting
one per minute for a month were bad. OK, that _was_ bad; just not _as_ bad.

--
Barcode

{88Keys}

unread,
Sep 22, 2003, 1:39:39 PM9/22/03
to
On Sat, 20 Sep 2003 12:37:10 -0700, "Fish Eye no Miko"
<fis...@deadmoon.circus> wrote:

>"Robert Hutchinson" <ser...@hotmail.com> wrote in message
>news:MPG.19d5d85af...@news.east.earthlink.net...
>
>> Rick Thorne <"backwards: moc.ocml"@enroht.kcir> says...

>> 572 virus e-mails in your inbox


>> 572 virus e-mails
>
>LOL!
>Ouch...
>Am I the only one not getting these?

Well, I only got two. Mail.com may be horribly slow and unreliable,
but they are fairly good at weeding out spam.

{88Keys}
(Of course, I haven't checked my hotmail account yet)
{88Keys}

Jeffrey Johnson

unread,
Sep 22, 2003, 4:09:22 PM9/22/03
to
Embark, dear reader, on a tour of the wisdom of {88Keys}:

>On Sat, 20 Sep 2003 12:37:10 -0700, "Fish Eye no Miko"
><fis...@deadmoon.circus> wrote:
>>"Robert Hutchinson" <ser...@hotmail.com> wrote:
>>
>>> 572 virus e-mails in your inbox
>>> 572 virus e-mails
>>
>>LOL!
>>Ouch...
>>Am I the only one not getting these?
>
>Well, I only got two.

...I got a rock.

JSJ1AGM,CB

--
"And the ghosts of the sailors who died on the rocks feel not a twinge of
regret/Though the wind may tangle the hair on your head, you sing like a
siren to me." -Cracker

Shelby

unread,
Sep 22, 2003, 4:48:39 PM9/22/03
to
Noah writes:
>"Shelby " <hot...@aol.com> wrote:
>> It's good to know I'm not the only one this is happening to. It was kind
>of
>> freaking me out.
>
>It's annoying, but a good reason to keep your antivirus software updated.
>And just as Mike and the bots missed the Phantom of Krankor, I find myself
>missing porn spam. :-)
>
>> Shelby
>> Easily freaked out.
>
>We'll calm you down in New Orleans - have no fear! :-)
>
I don't know, some how "calm down" and "New Orleans" just don't seem to fit
together. :)

Shelby
Now "Nude" and "New Orleans" that works.

Gary Ehrlich

unread,
Sep 22, 2003, 7:45:46 PM9/22/03
to
Jeffrey Johnson wrote:

> Embark, dear reader, on a tour of the wisdom of {88Keys}:
>
>>On Sat, 20 Sep 2003 12:37:10 -0700, "Fish Eye no Miko"
>><fis...@deadmoon.circus> wrote:
>>
>>>"Robert Hutchinson" <ser...@hotmail.com> wrote:
>>>
>>>
>>>>572 virus e-mails in your inbox
>>>>572 virus e-mails
>>>
>>>LOL!
>>>Ouch...
>>>Am I the only one not getting these?
>>
>>Well, I only got two.
>
>
> ...I got a rock.

I'll trade you rock for sheep...

-- Gary

Jeffrey Johnson

unread,
Sep 22, 2003, 11:31:39 PM9/22/03
to
Embark, dear reader, on a tour of the wisdom of Gary Ehrlich:

>Jeffrey Johnson wrote:
>> Embark, dear reader, on a tour of the wisdom of {88Keys}:
>>>On Sat, 20 Sep 2003 12:37:10 -0700, "Fish Eye no Miko"
>>><fis...@deadmoon.circus> wrote:
>>>>"Robert Hutchinson" <ser...@hotmail.com> wrote:
>>>>
>>>>
>>>>>572 virus e-mails in your inbox
>>>>>572 virus e-mails
>>>>
>>>>LOL!
>>>>Ouch...
>>>>Am I the only one not getting these?
>>>
>>>Well, I only got two.
>>
>>
>> ...I got a rock.
>
>I'll trade you rock for sheep...

Would that be a Bighorn Sheep?

JSJ1TG, Have Butter, Will Travel

Bill Livingston

unread,
Sep 22, 2003, 11:45:18 PM9/22/03
to
Previously on "One Day at a Time", Shelby wrote:
>It's good to know I'm not the only one this is happening to. It was kind of
>freaking me out.

I've been getting about 100 a day since last Thursday. Fortunately, HiWaay
allows me to log directly into the server and mass delete them in 20-message
chunks without having to download them.

>Shelby
>Easily freaked out.

Thanks to new SUPER FREAK-OUT from Ohio Arts!

Bill L.
And now, a painting of Toldeo (ya see, it's Ohio and it's art and - and -)
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
bil...@hiwaay.net http://home.hiwaay.net/~billfl

"If you're dumb, surround yourself with smart people. And if you're smart,
surround yourself with smart people who disagree with you."
Isaac Jaffee (Robert Guillaume), "Sports Night"

Jim Ellwanger

unread,
Sep 23, 2003, 12:46:56 AM9/23/03
to
In article <20030922064...@news.west.earthlink.net>, Throwing
Toasters <ju...@throwingtoasters.com> wrote:

> I just use a Mac. That seems to solve all the virus troubles.

Well, I'm using a Mac, too, but the problem is with the hundreds and
thousands of e-mails that this worm is sending out, which will come in
no matter what operating system you use.

--
Jim Ellwanger <trai...@mindspring.com>
<http://trainman1.home.mindspring.com> welcomes you daily.
"The days turn into nights; at night, you hear the trains."

Throwing Toasters

unread,
Sep 23, 2003, 2:03:24 AM9/23/03
to
In <220920032146565352%trai...@mindspring.com> Jim Ellwanger wrote:
> In article <20030922064...@news.west.earthlink.net>, Throwing
> Toasters <ju...@throwingtoasters.com> wrote:
>
>> I just use a Mac. That seems to solve all the virus troubles.
>
> Well, I'm using a Mac, too, but the problem is with the hundreds and
> thousands of e-mails that this worm is sending out, which will come in
> no matter what operating system you use.
>

Apple's MAIL app is actually pretty good at filtering out these messages.
I got about 150 of these today and only about 10 made it through to my
in box. That's not too bad.

Grant
www.throwingtoasters.com

Nicole Carbonara

unread,
Sep 23, 2003, 5:48:54 AM9/23/03
to
> I'm averaging about one virus emailed to me a minute.
>
> Thankfully I am using MAILWASHER to filter out the headers and delete
> them at the server.
> www.mailwasher.net

George

Thank you for the tip. I just downloaded and installed mailwasher.

I get those virus emails at the same rate. These days I delete them
as soon as they show on my screen but when I'll travel they will clog
my MB.

Nicole

Robert Hutchinson

unread,
Sep 23, 2003, 6:11:55 AM9/23/03
to
Jeffrey Johnson says...

> Embark, dear reader, on a tour of the wisdom of {88Keys}:
> >Fish Eye no Miko wrote:
> >>Robert Hutchinson wrote:
> >>
> >>> 572 virus e-mails in your inbox
> >>> 572 virus e-mails
> >>
> >>LOL!
> >>Ouch...
> >>Am I the only one not getting these?
> >
> >Well, I only got two.
>
> ...I got a rock.

"This time, it'll be different!"

*click*

*computer locks up*

"AAAAAAAUGH!!!!!"

George Johnson

unread,
Sep 23, 2003, 8:53:55 AM9/23/03
to
"Nicole Carbonara" <ncarb...@compuserve.com> wrote in message
news:4a23827.03092...@posting.google.com...

It helps, but a better deal is having an ISP that uses SPAM ASSASSIN (a
free proggy).

Mine has SPAM CATCHER, but it doesn't autodelete at a certain bloat
value. The TRASH folder will empty itself in 15 days, but that is way too
long given that my email box on my ISP gets choked full of 25 MB of junk
viruses by the time I get home from work each day. SPAM CATCHER definitely
needs an autodump churn option to dump all spam emails or FIFO delete it
when the SPAM folder gets to a certain MB limit.

Of course, these types of automailing viruses would have tipped off
their infected host computers when the old phone modems suddenly bogged down
to the sub-1K-per-second transfer rate. Now that cable modems and better
bandwidth are becoming standards, these automailer viruses are getting to be
a big pain in the ass as the host computers don't even lag in the slightest
now.


George Johnson

unread,
Sep 23, 2003, 9:13:31 AM9/23/03
to
"Throwing Toasters" <ju...@throwingtoasters.com> wrote in message
news:20030922230...@news.west.earthlink.net...

Ah, but your ISP will choke up your email box (as mine does) regardless
of your personal operating system.

I cannot be online all the time just to empty out sheddings from an
obsessive-compulsive automailer virus that exploits the computer illiterate.

It makes me desire writing an idiot exploiting EXE that emails headers
like, "You're so cute!" which when executed scans the user's address book
and then sends itself out to those folks with the EXE being a stern warning
about running EXE files from EVERYONE without a virus scan and then saving a
file in the "Start / Startup Folder" which repeats the warning as a text
message each time the user boots until they wake up and easily delete the
thing.

It wouldn't be a REAL virus as it wouldn't actively send itself to
others except when the user clicks and runs it. It wouldn't install
anything else on the system except for the startup nag message. It wouldn't
"infect" anyone else unless they choose to run it. And it wouldn't cause
any real havok or file damage (as its sole purpose is to let the people in
the click-happy-AOL-generation inform others that it is a REAL BAD IDEA to
accept all EXE files from that idiot). To be honest, it can only spread by
a chain of click-happy idiots who then will provide a public service in
educating themselves (for once) and educating their friends The only
"cure" for it is to have the click-happy-idiot become aware that running
strange files is a bad idea and discovering what their "Start / Startup"
folder exists for.

The problem with this "Idiot Chain Mailer" file would be some moron
might would think I am doing something destructive rather than giving them a
very cheap, safe, and quick education.


Nicole Carbonara

unread,
Sep 23, 2003, 9:56:03 AM9/23/03
to
I have ADSL with PlusNet. I'll check on their website if they use some
type of spam blocker. I doubt it though.

Nicole

"George Johnson" <matr...@voyager.net> wrote in message
news:vn0h038...@corp.supernews.com...

The Midnight Rambler

unread,
Sep 26, 2003, 7:28:53 PM9/26/03
to

"{88Keys}" <nos...@fakeaddress.com> wrote in message
news:jrcumv074lddrks7v...@4ax.com...

> On Sat, 20 Sep 2003 12:37:10 -0700, "Fish Eye no Miko"
> <fis...@deadmoon.circus> wrote:
>
> >"Robert Hutchinson" <ser...@hotmail.com> wrote in message
> >news:MPG.19d5d85af...@news.east.earthlink.net...
> >
> >> Rick Thorne <"backwards: moc.ocml"@enroht.kcir> says...
>
> >> 572 virus e-mails in your inbox
> >> 572 virus e-mails
> >
> >LOL!
> >Ouch...
> >Am I the only one not getting these?
>
> Well, I only got two. Mail.com may be horribly slow and unreliable,
> but they are fairly good at weeding out spam.

Oddly enough, I haven't gotten all that many, compared to all the horror
stories I've been hearing.

Not to mention that I use Outlook Express, which is not - I repeat, not -
automatically opening these attachments. Again, odd. But I'm not
complaining.

--
Another ironic stab at the pop market courtesy of
Robert Fontenot, Jr., The Midnight Rambler
http://bigrob.livejournal.com/
http://www.bigrobonline.com
Remove the w, why don't you
...........................
"Slaves sing most when they are most unhappy." - Frederick Douglass

The Midnight Rambler

unread,
Sep 26, 2003, 7:29:47 PM9/26/03
to

"Jeffrey Johnson" <ez04...@mailbox.ucdavis.edu> wrote in message
news:Pine.GSO.4.44.03092...@vidi.ucdavis.edu...

> Embark, dear reader, on a tour of the wisdom of {88Keys}:
> >On Sat, 20 Sep 2003 12:37:10 -0700, "Fish Eye no Miko"
> ><fis...@deadmoon.circus> wrote:
> >>"Robert Hutchinson" <ser...@hotmail.com> wrote:
> >>
> >>> 572 virus e-mails in your inbox
> >>> 572 virus e-mails
> >>
> >>LOL!
> >>Ouch...
> >>Am I the only one not getting these?
> >
> >Well, I only got two.
>
> ...I got a rock.

...to wind a piece of string around?

(I got a prosthetic forehead.)

0 new messages