Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Virus onslaught

0 views
Skip to first unread message

Steven Bornfeld

unread,
Sep 18, 2003, 9:59:26 PM9/18/03
to
I'm posting this in all the newsgroups I've posted to in the past
couple of days.
I have been assaulted by a hugh number of presumably infected e-mails
at both my office and at home. I say presumably infected because they
are mainly "failure notices" or "microsoft security patches". The
unnerving thing is that they are not picked up by my Norton Antivirus,
which is up to date.
I just deleted about 80 of these e-mails with attachments, each
averaging about 150kb. My mailbox was completely jammed in one day.
I strongly suspect it is due to the fact that I use my real e-mail
address on my posts. Prior mass infected mailings have been sent to
names I recognise.
Please be vigilant!

Steve

The Webby

unread,
Sep 18, 2003, 10:07:46 PM9/18/03
to
Steve,

I've been getting constant arrivals of "microsoft security patches" and one
odd "failure notice". I doubt I've had more than two dozen. I really
wasn't counting. I guess I should have been. This started yesterday, I
think ...
Thanks for the post. I was wondering if it was only me. I don't operate a
Windows system. (I left all the newsgroups intact in case my post interests
Mac users)

TW


in article 3F6A62FE...@earthlink.net, Steven Bornfeld at
mars...@earthlink.net wrote on 9/18/03 6:59 PM:

The Webby

unread,
Sep 18, 2003, 10:11:27 PM9/18/03
to
And now from "Admin", "Bug Announcement" with attachment --- ugh.

in article BB8FB301.437F%inth...@cox.net, The Webby at inth...@cox.net
wrote on 9/18/03 7:07 PM:

Max Leggett

unread,
Sep 18, 2003, 10:13:23 PM9/18/03
to
New E-Mail Worm Targets Hole in Internet Explorer

SAN FRANCISCO (Reuters) - Anti-virus companies warned on Thursday of a
new computer worm circulating through e-mail that purports to be
security software from Microsoft Corp. but actually tries to disable
security programs that are already running

http://story.news.yahoo.com/news?tmpl=story&ncid=578&e=7&u=/nm/20030918/tc_nm/tech_worm_swen_dc

On Thu, 18 Sep 2003 19:11:27 -0700, The Webby <inth...@cox.net>
wrote:

Rolland

unread,
Sep 18, 2003, 10:16:12 PM9/18/03
to

"Steven Bornfeld" <mars...@earthlink.net> wrote in message
news:3F6A62FE...@earthlink.net...

I'm getting one every 15 minutes. Don't have any idea how to stop them. I
just keep deleting them.

Rolland


Joe Thibodeau

unread,
Sep 18, 2003, 10:30:39 PM9/18/03
to
I'm getting these emails too. Delete, delete, delete. Microsoft never sends
out security notices.

Joe


"Rolland" <roll...@cableone.net> wrote in message
news:vmkpoeg...@corp.supernews.com...

Steve Cornelius

unread,
Sep 18, 2003, 10:42:28 PM9/18/03
to
I'm having the same problem. You need to go to the Norton site and download
the virus definitions for September 18th. If you use LiveUpdate to
automatically download your definitions (like I do), they will NOT be
current enough! You will need the September 18th definitions.

Here is the link:
http://securityresponse.symantec.com/avcenter/defs.download.html. When you
install the definitions, it will alert you to the virus within the
attachment. (As I was writing this, it found another one!)

Microsoft does NOT send out security patches by e-mail. Good luck.
--
Steve Cornelius
sscor...@comcast.net


"Steven Bornfeld" <mars...@earthlink.net> wrote in message
news:3F6A62FE...@earthlink.net...

Steven Bornfeld

unread,
Sep 18, 2003, 10:44:59 PM9/18/03
to

Steve Cornelius wrote:
> I'm having the same problem. You need to go to the Norton site and download
> the virus definitions for September 18th. If you use LiveUpdate to
> automatically download your definitions (like I do), they will NOT be
> current enough! You will need the September 18th definitions.
>
> Here is the link:
> http://securityresponse.symantec.com/avcenter/defs.download.html. When you
> install the definitions, it will alert you to the virus within the
> attachment. (As I was writing this, it found another one!)
>
> Microsoft does NOT send out security patches by e-mail. Good luck.

Thanks. I've been getting these phony patches for months, but today is
a quantum leap. I just got new virus definitions this morning, but I'll
go back and check Symantec again.

Steve


Tony Done

unread,
Sep 18, 2003, 10:47:08 PM9/18/03
to
You're not kidding. I've just deleted about 20 of them.

Tony D

"Steven Bornfeld" <mars...@earthlink.net> wrote in message
news:3F6A62FE...@earthlink.net...

Allen & Linda Tyler

unread,
Sep 18, 2003, 10:24:21 PM9/18/03
to

Steven Bornfeld wrote:

My ISP blocks virus-infested messages and sends me notices. Sometimes, I might
go a week without any; other times, maybe one or two a day. Today, so far, they
have sent me more than *forty five* notices.

Incidentally, I use Norton AV, but since the ISP started their system it has
detected only two suspected items (that's in more than two years.)
Allen Tyler


A Nengineer

unread,
Sep 18, 2003, 10:51:42 PM9/18/03
to
My SpamAssassin setup catches (nearly) every one of 'em.

I typically get about six to ten SPAM-type emails per day.

Today I got thirty (of which SA disposed of twenty-nine). The one that got
away was a solicitation from a young woman inviting me to "split her open."

I have NO IDEA what she meant by that.

"Rolland" <roll...@cableone.net> wrote in message
news:vmkpoeg...@corp.supernews.com...
>

Steven Bornfeld

unread,
Sep 18, 2003, 10:53:18 PM9/18/03
to

Earthlink has a so-called spam blocker, but it doesn't seem to allow
message blocking for, say, a particular subject line, word or sender.
I've sent them a suggestion that they provide this.

Steve

>
>

Steven Bornfeld

unread,
Sep 18, 2003, 10:55:06 PM9/18/03
to

A Nengineer wrote:
> My SpamAssassin setup catches (nearly) every one of 'em.
>
> I typically get about six to ten SPAM-type emails per day.
>
> Today I got thirty (of which SA disposed of twenty-nine). The one that got
> away was a solicitation from a young woman inviting me to "split her open."
>
> I have NO IDEA what she meant by that.

Thanks--I'll have a look at SpamAssassin.
Steve

Sacrameto Dave

unread,
Sep 18, 2003, 10:55:35 PM9/18/03
to
I got 42 just today. I just did a update on my Norton hope that works.

"Steven Bornfeld" <mars...@earthlink.net> wrote in message
news:3F6A62FE...@earthlink.net...

Jerry Kohl

unread,
Sep 18, 2003, 11:29:58 PM9/18/03
to
Steven Bornfeld wrote:

> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home.

I normally get one or two per day. So far today the count stands at 120.

--
Jerry Kohl <jerom...@comcast.net>
"Légpárnás hajóm tele van angolnákkal."


Puff Griffis

unread,
Sep 19, 2003, 2:46:16 AM9/19/03
to
Steven,
I don't believe it has anything to do with the newsgroup postings. I keep my work email for business only and have never used it for anything other than business and I deleted 22 of these buggers today on my work computer.
Puff

"Steven Bornfeld" <mars...@earthlink.net> wrote in message news:3F6A62FE...@earthlink.net...

Jerry Kohl

unread,
Sep 18, 2003, 11:55:42 PM9/18/03
to
Jerry Kohl wrote:

> Steven Bornfeld wrote:
>
> > I'm posting this in all the newsgroups I've posted to in the past
> > couple of days.
> > I have been assaulted by a hugh number of presumably infected e-mails
> > at both my office and at home.
>
> I normally get one or two per day. So far today the count stands at 120.

Correction: 125. Five more arrived while I was posting the last message.

Dr.Matt

unread,
Sep 18, 2003, 11:35:54 PM9/18/03
to
I get about 100 of those per hour. I've asked my local postmaster to
take action, as I cannot afford to keep my network connection open all
the time just to run filter rules in the client application.


--
Matthew H. Fields http://personal.www.umich.edu/~fields
Music: Splendor in Sound
Brights have a naturalistic world-view. http://www.the-brights.net/

Steve Hawkins

unread,
Sep 19, 2003, 12:04:37 AM9/19/03
to
"Sacrameto Dave" <dia...@sbcglobal.net> wrote in
news:Heuab.695$_72...@newssvr25.news.prodigy.com:

> I got 42 just today. I just did a update on my Norton hope that works.

You probably don't have the virus unles you opened one of the attachemnts
that are coming with the emails. Someone who does have the virus has us in
their email address book. The virus spreads by using the addresses in the
infected PC's address book. I just ran a virus scan on my computer with
the updated info for this virus and my PC is clean. I'm still getting
infected email though from somebody else. We'll just have to keep deleting
it until the infected PC's are cleaned up.

Steve Hawkins


mcdonald

unread,
Sep 19, 2003, 1:05:32 AM9/19/03
to
On Thu, 18 Sep 2003 23:46:16 -0700, Puff Griffis wrote:

> I don't believe it has anything to do with the newsgroup postings. I
> keep my work email for business only and have never used it for anything
> other than business and I deleted 22 of these buggers today on my work
> computer.
> Puff

I think it's a factor. I have a personal email address that I use for my
family and friends, and a professional email address that I use only with
colleagues. Neither of those accounts has had a single spam or virus message.

The account that I use exclusively for newsgroup posting has had over 100 of
these messages in the last 2 days.

It also has a lot to do with the level of filtering done by your ISP, as well
as how private your friends and colleages keep your email address.


mcd


--
A wheel or disk mounted to spin rapidly about an axis and also free to rotate
about one or both of two axes perpendicular to each other and the axis of
spin so that a rotation of one of the two mutually perpendicular axes results
from application of torque to the other when the wheel is spinning and so
that the entire apparatus offers considerable opposition depending on the
angular momentum to any torque that would change the direction of the axis of
spin.

Definition of "gyroscope" in Webster零 Seventh New Collegiate Dictionary


Peter Meiers

unread,
Sep 19, 2003, 1:13:09 AM9/19/03
to
Hello,

this morning, I received 51 emails of that type. Fortunately, my email
program allows me a "selective mail download" so that I am able to
download just the headers first, mark them for deletion or donwload, and
then proceed. Works pretty good and saves much time otherwise spent for
download of useless stuff.

Best,
Peter

--------------------

--
-History of fluorine, fluoride and fluoridation-:
--- http://PMeiers.bei.t-online.de/index.htm ---
-------------------------------------------------

Lecter

unread,
Sep 19, 2003, 1:31:07 AM9/19/03
to
I'm using Outlook Express to create message rules...had to come up with at
least 6 new ones to cover the "From" line (Admin, Microsoft, Microsoft
Corporation, Internet Storage Space, and a few others). Then I told it to
delete messages containing those phrases from the server...seems to be
working well. Using the "block sender" method didn't work...this asshole
must have dozens of e-mail addies!

This person needs to be disembowled...


EvelynVogtGamble(Divamanque)

unread,
Sep 19, 2003, 1:14:50 AM9/19/03
to

Steven Bornfeld wrote:
>
> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.

You're not alone (if that's any consolation)! I hadn't checked my
e-mail since this morning, and found 126 "messages" only about three of
them were the usual oriental spam (between 1 and 5KB), the rest was what
you describe, averaging between 143 and 160KB. (I also got a notice
from Earthlink telling me my e-mail storage was filled to capacity, and
I should do something about it!)

> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!

Fortunately, I have all incoming mail feeding to trash, so I don't have
to open any of it - I can scan the titles without opening them, then get
rid of it all by emptying trash with one click of the mouse. However, I
can't do anything about it jamming my Earthlink mailbox until I download
and get rid of it. Thinks have been so peacfully back to the normal 30
or 40 messages a day (mostly spam, of course) - wonder what happens if I
go on vacation and can't access my e-mail for few days?

garden_state

unread,
Sep 19, 2003, 1:43:40 AM9/19/03
to

"Steven Bornfeld" <marstev...@earthlink.net> wrote in message
news:3F6A700...@earthlink.net...

>
>
> A Nengineer wrote:
> > My SpamAssassin setup catches (nearly) every one of 'em.
> >
> > I typically get about six to ten SPAM-type emails per day.
> >
(snip)

> Thanks--I'll have a look at SpamAssassin.
> Steve
>
I use Mailwasher $29.95. It allows me to preview a message without opening
it. I like it a lot.


Jerry Kohl

unread,
Sep 19, 2003, 1:48:09 AM9/19/03
to
Jerry Kohl wrote:

> Jerry Kohl wrote:
>
> > Steven Bornfeld wrote:
> >
> > > I'm posting this in all the newsgroups I've posted to in the past
> > > couple of days.
> > > I have been assaulted by a hugh number of presumably infected e-mails
> > > at both my office and at home.
> >
> > I normally get one or two per day. So far today the count stands at 120.
>
> Correction: 125. Five more arrived while I was posting the last message.

30 more in the last hour. Interestingly enough, my wife has not had a single one of
these on her email account. She never reads or posts to newsgroups.

garden_state

unread,
Sep 19, 2003, 1:50:45 AM9/19/03
to

Skip Moy

unread,
Sep 19, 2003, 2:02:06 AM9/19/03
to
I'm getting the same thing thanks for the heads up
Skip

"Steven Bornfeld" <mars...@earthlink.net> wrote in message
news:3F6A62FE...@earthlink.net...

> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails

> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.

> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!
>

> Steve
>


John E. Golden

unread,
Sep 19, 2003, 1:58:40 AM9/19/03
to
Steven Bornfeld <mars...@earthlink.net> wrote in
news:3F6A62FE...@earthlink.net:

>>I'm posting this in all the newsgroups I've posted to in the past couple
of days. I have been assaulted by a hugh number of presumably infected e-

mails at both my office and at home. I say presumably infected because

they are mainly "failure notices" or "microsoft security patches".<<

Me too. They seem to be coming in at the rate of one every ten or fifteen
minutes.

I don't normally believe in capital punishment except for these people.

Regards,
John E. Golden

Kalman Rubinson

unread,
Sep 19, 2003, 2:31:17 AM9/19/03
to
On Fri, 19 Sep 2003 02:42:28 GMT, "Steve Cornelius"
<sscor...@comcast.net> wrote:

>Here is the link:
>http://securityresponse.symantec.com/avcenter/defs.download.html. When you
>install the definitions, it will alert you to the virus within the
>attachment. (As I was writing this, it found another one!)

The problem, for me, is not the alert. So far, my ISP has done that
with every one. The problem is the sheer number of alerts.

Kal

Nicolai P. Zwar

unread,
Sep 19, 2003, 3:09:26 AM9/19/03
to
Steven Bornfeld wrote:
> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected
> e-mails at both my office and at home. I say presumably infected
> because they are mainly "failure notices" or "microsoft security
> patches". The unnerving thing is that they are not picked up by my
> Norton Antivirus, which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!


Same here. I got about a hundred and fourty of them within the last 24
hours. Countless mailings infected with viruses and countless nonsense
messages telling me "message delivery failed", even though I never send
any messages.
Spammers should really be busted; it's no misdemeanor.

--
Nicolai Zwar
http://www.nicolaizwar.com

LarryV

unread,
Sep 19, 2003, 5:29:04 AM9/19/03
to
In Outlook Express, the caveat is that if you set up a rule to "delete
from server", such rules _must be the first rules in your list_. If
you set up any rules that require a message to be downloaded first to
test a condition, if they precede the "delete from server" rule, then
it will negate the "delete from server" rule since all messages need
to be downloaded first in order to test for the preceding condition.

I just set this up and I had to first delete all my existing rules.
Then I created a rule to "delete from server" for the entries in the
From line like "microsoft", "security" etc. Then I created a second
rule to "delete from server" based on the Subject line with entries
like viagra, penis etc. The text displayed in the "Message Rule
Description Box" that says "Apply this rule after the message arrives"
doesn't mean crap. As long as the "delete from server" rules are the
first rules in your your list, the messages will be deleted from the
server and not downloaded. Hope this isn't too confusing :)

"Lecter" <shre...@sbcglobal.net> wrote in message news:<vwwab.4488$lW4.83...@newssvr13.news.prodigy.com>...

Carrie

unread,
Sep 19, 2003, 5:48:24 AM9/19/03
to
"LarryV" <lar...@rcn.com> wrote in message
news:68514a82.03091...@posting.google.com...

> In Outlook Express, the caveat is that if you set up a rule to "delete
> from server", such rules _must be the first rules in your list_. If
> you set up any rules that require a message to be downloaded first to
> test a condition, if they precede the "delete from server" rule, then
> it will negate the "delete from server" rule since all messages need
> to be downloaded first in order to test for the preceding condition.
>
> I just set this up and I had to first delete all my existing rules.
> Then I created a rule to "delete from server" for the entries in the
> From line like "microsoft", "security" etc. Then I created a second
> rule to "delete from server" based on the Subject line with entries
> like viagra, penis etc. The text displayed in the "Message Rule
> Description Box" that says "Apply this rule after the message arrives"
> doesn't mean crap. As long as the "delete from server" rules are the
> first rules in your your list, the messages will be deleted from the
> server and not downloaded. Hope this isn't too confusing :)

The spammers are becoming wise to this... I have noticed recently that they
are using words like phakjsdhashkhk or P.E.N.I etc or they spell the word
incorrectly, such as perscription rather than prescription, in the subject
line, it is random so there is no way to make a rule to fit it, all the
other words in the subject line are innocuous so I can't create a rule using
them as I would ban most email from my account. I have a list of around 60
words in that rule and they get deleted from the server, worked great for a
while, but now I am back to getting around 20-25 spam emails a day.
--
Carrie, Midnight and Twilight
www.btinternet.com/~midnightlyons
http://community.webshots.com/user/carriephlyons
www.lyonsmusic.co.uk


Vaughn

unread,
Sep 19, 2003, 6:13:01 AM9/19/03
to
I have gotten exactly one! and it had to have made its way through two
different anti-virus programs. I have gotten no anti-virus "bounces" lately
from ATT so it is not yet recognizing this latest junk. I use my real
e-mail address here (with the customary munge) and I am sure to be in
hundreds of address books worldwide. So I don't think it has anything to do
with smd in particular.

Vaughn


"Steven Bornfeld" <mars...@earthlink.net> wrote in message
news:3F6A62FE...@earthlink.net...


> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!
>

> Steve
>


Richard Spross

unread,
Sep 18, 2003, 11:46:34 PM9/18/03
to
Steven Bornfeld wrote:

> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!
>
> Steve

I've been getting lots of those too. Besides trashing and deleting what can I
do?
Richard Spross


LarryV

unread,
Sep 19, 2003, 7:29:39 AM9/19/03
to
Try checking for the keyword in the message body instead of the subject
line. They usually spell it right within the body of the message.

"Carrie" <carriephl...@btinternet.com> wrote in message
news:bkejd8$eoj$1...@hercules.btinternet.com...

Dan Carey

unread,
Sep 19, 2003, 7:39:56 AM9/19/03
to

Steven Bornfeld wrote:
>
> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!
>
> Steve

Steve,

I've just deleted 75 of themhere at the office and 77 at home. All received
overnight.
The only newsgroup I've posted to this week is RMMGA so it seems we as a group
have been targeted.

Geezer

Mxsmanic

unread,
Sep 19, 2003, 8:00:08 AM9/19/03
to
Steven Bornfeld writes:

> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!

I've gotten as many as 200 copies of the SoBig virus per day. I just
delete them. I've never had any problem other than the minor annoyance
of getting all the virus attachments each day.

If you use Outlook Express, consider doing this:

1. Turn off the Preview Pane (otherwise messages get opened
automatically, and not just when you open them explicitly).

2. Set the Internet zone to Restricted, and turn off everything in that
zone (including Javascript, ActiveX, Java, etc.).

3. If you get a suspicious message, right-click on it and select
Properties, then look at the actual message text. This allows you to
see what it contains without actually opening it, and it is completely
safe. You can see the types of attachments the message contains. You
have to know what you are looking at, though.

4. Set up filters to set aside any message bigger than 5K. That will
make it easier to isolate suspect messages (most legitimate messages
contain only text and are quite small).

--
Transpose hotmail and mxsmanic in my e-mail address to reach me directly.

Mxsmanic

unread,
Sep 19, 2003, 8:00:53 AM9/19/03
to
Dr.Matt writes:

> I get about 100 of those per hour. I've asked my local postmaster to
> take action, as I cannot afford to keep my network connection open all
> the time just to run filter rules in the client application.

Switch to broadband.

Mxsmanic

unread,
Sep 19, 2003, 8:02:32 AM9/19/03
to
Steven Bornfeld writes:

> Earthlink has a so-called spam blocker, but it doesn't seem to allow
> message blocking for, say, a particular subject line, word or sender.
> I've sent them a suggestion that they provide this.

Be careful what you wish for. All spam filters also toss some non-zero
percentage of legitimate e-mail. The filters on Time Warner ISPs are so
aggressive that I can't even reach friends and clients on AOL or
CompuServe or Road Runner any more.

George Gleason

unread,
Sep 19, 2003, 8:11:12 AM9/19/03
to

"Richard Spross" <rcsp...@pacbell.net> wrote in message
news:3F6A8680...@pacbell.net...
I am just letting my email ride for a few days once it reaches its limit
nothing else will get in
some reason these get around all my filters and protections
even evade my do not open command in oE
so no email for a while
George


Dr.Matt

unread,
Sep 19, 2003, 8:16:47 AM9/19/03
to
In article <avrlmv8bporm422u2...@4ax.com>,

Mxsmanic <mxsm...@hotmail.com> wrote:
>Dr.Matt writes:
>
>> I get about 100 of those per hour. I've asked my local postmaster to
>> take action, as I cannot afford to keep my network connection open all
>> the time just to run filter rules in the client application.
>
>Switch to broadband.

send money

Mazzolata

unread,
Sep 19, 2003, 8:42:35 AM9/19/03
to
Steven Bornfeld <mars...@earthlink.net> wrote in message news:<3F6A62FE...@earthlink.net>...
> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected e-mails
> at both my office and at home. I say presumably infected because they
> are mainly "failure notices" or "microsoft security patches". The
> unnerving thing is that they are not picked up by my Norton Antivirus,
> which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!
>
No, this is not from newsgroup address harvesting - i'm getting them
at my "real" email address, not the hotmail one I use for posting.
What it means is that someone with an infected computer has your email
in their address book, it's been "stolen" from there, and it's being
used either to send stuff to you, or as a forged return address (why
you get all the "undeliverable' or "rejected" messages).

Mark Kleinhaut

unread,
Sep 19, 2003, 9:10:27 AM9/19/03
to

I use my real email address for posting and not and ANY WHATSOVER coming
this way.....go figure:)

markkl...@hotmail.com
www.markkleinhaut.com


----== Posted via Newsfeed.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeed.com The #1 Newsgroup Service in the World! >100,000 Newsgroups
---= 19 East/West-Coast Specialized Servers - Total Privacy via Encryption =---

Tony DeCaprio

unread,
Sep 19, 2003, 9:14:22 AM9/19/03
to
I have been bombarded with this also. How can this be stopped?

Steven Bornfeld <marstev...@earthlink.net> wrote in message news:<3F6A6F9E...@earthlink.net>...
> Allen & Linda Tyler wrote:


> >
> > Steven Bornfeld wrote:
> >
> >
> >> I'm posting this in all the newsgroups I've posted to in the past
> >>couple of days.
> >> I have been assaulted by a hugh number of presumably infected e-mails
> >>at both my office and at home. I say presumably infected because they
> >>are mainly "failure notices" or "microsoft security patches". The
> >>unnerving thing is that they are not picked up by my Norton Antivirus,
> >>which is up to date.
> >> I just deleted about 80 of these e-mails with attachments, each
> >>averaging about 150kb. My mailbox was completely jammed in one day.
> >> I strongly suspect it is due to the fact that I use my real e-mail
> >>address on my posts. Prior mass infected mailings have been sent to
> >>names I recognise.
> >> Please be vigilant!
> >>

> >>Steve
> >
> >
> > My ISP blocks virus-infested messages and sends me notices. Sometimes, I might
> > go a week without any; other times, maybe one or two a day. Today, so far, they
> > have sent me more than *forty five* notices.
> >
> > Incidentally, I use Norton AV, but since the ISP started their system it has
> > detected only two suspected items (that's in more than two years.)
> > Allen Tyler


>
> Earthlink has a so-called spam blocker, but it doesn't seem to allow
> message blocking for, say, a particular subject line, word or sender.
> I've sent them a suggestion that they provide this.
>

> Steve
>
> >
> >

Kevin Van Sant

unread,
Sep 19, 2003, 9:26:24 AM9/19/03
to
On 19 Sep 2003 06:14:22 -0700, coas...@yahoo.com (Tony DeCaprio)
wrote in message <b38d2f42.03091...@posting.google.com> :

>I have been bombarded with this also. How can this be stopped?

We need more of this:

http://apnews.excite.com/article/20030919/D7TLF6400.html


_________________________________________
Kevin Van Sant
jazz guitar

http://www.kevinvansant.com
to buy my CDs, listen to sound clips, and get more info.

Alternate site for recent soundclips
http://www.soundclick.com/bands/kevinvansant_music.htm

this out>@cableone.net Rolland

unread,
Sep 19, 2003, 9:46:22 AM9/19/03
to

"Rolland" <roll...@cableone.net> wrote in message
news:vmkpoeg...@corp.supernews.com...

>
> "Steven Bornfeld" <mars...@earthlink.net> wrote in message
> news:3F6A62FE...@earthlink.net...
> > I'm posting this in all the newsgroups I've posted to in the past
> > couple of days.
> > I have been assaulted by a hugh number of presumably infected e-mails
> > at both my office and at home. I say presumably infected because they
> > are mainly "failure notices" or "microsoft security patches". The
> > unnerving thing is that they are not picked up by my Norton Antivirus,
> > which is up to date.
> > I just deleted about 80 of these e-mails with attachments, each
> > averaging about 150kb. My mailbox was completely jammed in one day.
> > I strongly suspect it is due to the fact that I use my real e-mail
> > address on my posts. Prior mass infected mailings have been sent to
> > names I recognise.
> > Please be vigilant!
> >
> > Steve
>
> I'm getting one every 15 minutes. Don't have any idea how to stop them. I
> just keep deleting them.
>
> Rolland

As of 0845, 19 Sept. 03, I have received 265 since midnight. That was the
last time I did the delete. My ISP stops the junk before it gets to me. I
just go to their garage dump and push them out. Still, it's getting to be a
real hassle keeping that thing clean.

Rolland


Geo Sorfinger

unread,
Sep 19, 2003, 9:48:06 AM9/19/03
to
"Vaughn" <vaughnsimo...@att.fake.net> wrote in message news:<NEAab.149082$3o3.10...@bgtnsc05-news.ops.worldnet.att.net>...


It's definitely a rmcg phenomenon so far. I have seven e-mail
accounts. Every spam can be traced solely to the address I post here.
You can check this in OE6 by clicking File>Properties>Details. Not one
spam has shown up in any other of my accounts.

George

unread,
Sep 19, 2003, 10:02:59 AM9/19/03
to
In article <2eb67bf0.03091...@posting.google.com>,
geo...@rogers.com (Geo Sorfinger) wrote:

> "Vaughn" <vaughnsimo...@att.fake.net> wrote in message
> news:<NEAab.149082$3o3.10...@bgtnsc05-news.ops.worldnet.att.net>...
>
>
> It's definitely a rmcg phenomenon so far. I have seven e-mail
> accounts. Every spam can be traced solely to the address I post here.
> You can check this in OE6 by clicking File>Properties>Details. Not one
> spam has shown up in any other of my accounts.
>
>

It is clearly not related to newsgroup posting It has showed up on a
new email I set up yesterday and have never used anywhere or given to
anyone
George

tomw

unread,
Sep 19, 2003, 10:08:19 AM9/19/03
to
In article <b38d2f42.03091...@posting.google.com>,
coas...@yahoo.com says...

>
> I have been bombarded with this also. How can this be stopped?
>
>
>
We had a bad case of this at the university a couple of weeks ago. I,
personally, received thousands of emails daily. After a couple of weeks
it died down. According to the computer support people here, there was
nothing to be done. Filter out the offending subject headers, and wait
it out.
--
Tom Walls
the guy at the Temple of Zeus
http://www.arts.cornell.edu/zeus/

Steven Bornfeld

unread,
Sep 19, 2003, 10:16:59 AM9/19/03
to

Peter Meiers wrote:
> Hello,
>
> this morning, I received 51 emails of that type. Fortunately, my email
> program allows me a "selective mail download" so that I am able to
> download just the headers first, mark them for deletion or donwload, and
> then proceed. Works pretty good and saves much time otherwise spent for
> download of useless stuff.
>
> Best,
> Peter
My blocked senders list on Outlook express is getting longer and
longer, but these things are coming from everywhere. I'm also setting
up more and more message rules.
The issue isn't infection of my machine, which is up to date with
antivirus software. The issue is that I just deleted about 150 of these
things received in the last 10 hrs. I go to webmail and cleared the
mail server, but it was jammed full by 9 this morning.

Steve

>
> --------------------

Steven Bornfeld

unread,
Sep 19, 2003, 10:18:48 AM9/19/03
to

Lecter wrote:
> I'm using Outlook Express to create message rules...had to come up with at
> least 6 new ones to cover the "From" line (Admin, Microsoft, Microsoft
> Corporation, Internet Storage Space, and a few others). Then I told it to
> delete messages containing those phrases from the server...seems to be
> working well. Using the "block sender" method didn't work...this asshole
> must have dozens of e-mail addies!
>
> This person needs to be disembowled...

I have the same problem as Evelyn--if my mailbox gets filled every
couple of hours I'm not going to get my real e-mail.

Steve

>
>

Steven Bornfeld

unread,
Sep 19, 2003, 10:21:00 AM9/19/03
to

garden_state wrote:
> "Steven Bornfeld" <marstev...@earthlink.net> wrote in message

> news:3F6A700...@earthlink.net...
>
>>
>>A Nengineer wrote:
>>
>>>My SpamAssassin setup catches (nearly) every one of 'em.
>>>
>>>I typically get about six to ten SPAM-type emails per day.
>>>
>>
> (snip)
>
>>Thanks--I'll have a look at SpamAssassin.
>>Steve
>>
>
> I use Mailwasher $29.95. It allows me to preview a message without opening
> it. I like it a lot.
>
We use SpamKiller at the office. It also downloads only headers, and
can remove it from the server without downloading attachments. But the
mail servers at the office ISP (People PC) seem to have been
overwhelmed, and as of last night we had no e-mail at all.

Steve

>

Steven Bornfeld

unread,
Sep 19, 2003, 10:21:52 AM9/19/03
to

Jerry Kohl wrote:
> Jerry Kohl wrote:


>
>
>>Jerry Kohl wrote:
>>
>>
>>>Steven Bornfeld wrote:
>>>
>>>
>>>> I'm posting this in all the newsgroups I've posted to in the past
>>>>couple of days.
>>>> I have been assaulted by a hugh number of presumably infected e-mails
>>>>at both my office and at home.
>>>

>>>I normally get one or two per day. So far today the count stands at 120.
>>
>>Correction: 125. Five more arrived while I was posting the last message.
>
>
> 30 more in the last hour. Interestingly enough, my wife has not had a single one of
> these on her email account. She never reads or posts to newsgroups.

My wife calls my activity on the newsgroups my "secret life". Now she
has new ammo...

Steve

>
> --
> Jerry Kohl <jerom...@comcast.net>
> "Légpárnás hajóm tele van angolnákkal."
>
>

Steven Bornfeld

unread,
Sep 19, 2003, 10:23:20 AM9/19/03
to

Puff Griffis wrote:
> Steven,
> I don't believe it has anything to do with the newsgroup postings. I keep my work email for business only and have never used it for anything other than business and I deleted 22 of these buggers today on my work computer.
> Puff

Maybe not--but my wife gets none through her e-mail accounts, so she
has her mind made up...

Steve

>
> "Steven Bornfeld" <mars...@earthlink.net> wrote in message news:3F6A62FE...@earthlink.net...
>

>>I'm posting this in all the newsgroups I've posted to in the past
>>couple of days.
>>I have been assaulted by a hugh number of presumably infected e-mails

Steven Bornfeld

unread,
Sep 19, 2003, 10:25:17 AM9/19/03
to

LarryV wrote:
> In Outlook Express, the caveat is that if you set up a rule to "delete
> from server", such rules _must be the first rules in your list_. If
> you set up any rules that require a message to be downloaded first to
> test a condition, if they precede the "delete from server" rule, then
> it will negate the "delete from server" rule since all messages need
> to be downloaded first in order to test for the preceding condition.
>
> I just set this up and I had to first delete all my existing rules.
> Then I created a rule to "delete from server" for the entries in the
> From line like "microsoft", "security" etc. Then I created a second
> rule to "delete from server" based on the Subject line with entries
> like viagra, penis etc. The text displayed in the "Message Rule
> Description Box" that says "Apply this rule after the message arrives"
> doesn't mean crap. As long as the "delete from server" rules are the
> first rules in your your list, the messages will be deleted from the
> server and not downloaded. Hope this isn't too confusing :)

No--very interesting. Thanks for the info, I'll look into it!

Steve

Steven Bornfeld

unread,
Sep 19, 2003, 10:29:37 AM9/19/03
to

Mxsmanic wrote:
> Steven Bornfeld writes:
>
>
>> Earthlink has a so-called spam blocker, but it doesn't seem to allow
>>message blocking for, say, a particular subject line, word or sender.
>>I've sent them a suggestion that they provide this.
>
>
> Be careful what you wish for. All spam filters also toss some non-zero
> percentage of legitimate e-mail. The filters on Time Warner ISPs are so
> aggressive that I can't even reach friends and clients on AOL or
> CompuServe or Road Runner any more.
>

Yeah, I think the answer is to get one of these programs that only
downloads headers and allows easy remover from the server. Oh, and I've
learned to have my e-mail address "munged".

Steve


nightingale

unread,
Sep 19, 2003, 10:31:39 AM9/19/03
to
mleg...@nospam.ca (Max Leggett) wrote in message news:<3f6a6626....@News.CIS.DFN.DE>...
> New E-Mail Worm Targets Hole in Internet Explorer
>

I don't use that at home, and wish I had the option of not using it here.

Steven Bornfeld

unread,
Sep 19, 2003, 10:33:55 AM9/19/03
to

Kevin Van Sant wrote:
> On 19 Sep 2003 06:14:22 -0700, coas...@yahoo.com (Tony DeCaprio)
> wrote in message <b38d2f42.03091...@posting.google.com> :
>
>
>>I have been bombarded with this also. How can this be stopped?
>
>
>
>
> We need more of this:
>
> http://apnews.excite.com/article/20030919/D7TLF6400.html

I was hoping for something more...violent.

Steve

Allen & Linda Tyler

unread,
Sep 19, 2003, 10:09:12 AM9/19/03
to

Mxsmanic wrote:

> Steven Bornfeld writes:
>
> > Earthlink has a so-called spam blocker, but it doesn't seem to allow
> > message blocking for, say, a particular subject line, word or sender.
> > I've sent them a suggestion that they provide this.
>
> Be careful what you wish for. All spam filters also toss some non-zero
> percentage of legitimate e-mail. The filters on Time Warner ISPs are so
> aggressive that I can't even reach friends and clients on AOL or
> CompuServe or Road Runner any more.

Postini allows each user to select four different of blocks for email, from none
to very strict, for four different categories:
sales pitches, porn, racially insensitive and volume spam.

I want to add that I have no idea who profits from Postini; I have no interest
in it except that it provides a very valuable service for me.

Allen Tyler

Allen & Linda Tyler

unread,
Sep 19, 2003, 10:04:46 AM9/19/03
to

Allen & Linda Tyler wrote:

> Steven Bornfeld wrote:
>
> > I'm posting this in all the newsgroups I've posted to in the past
> > couple of days.
> > I have been assaulted by a hugh number of presumably infected e-mails
> > at both my office and at home. I say presumably infected because they
> > are mainly "failure notices" or "microsoft security patches". The
> > unnerving thing is that they are not picked up by my Norton Antivirus,
> > which is up to date.
> > I just deleted about 80 of these e-mails with attachments, each
> > averaging about 150kb. My mailbox was completely jammed in one day.
> > I strongly suspect it is due to the fact that I use my real e-mail
> > address on my posts. Prior mass infected mailings have been sent to
> > names I recognise.
> > Please be vigilant!
> >
> > Steve
>

> My ISP blocks virus-infested messages and sends me notices. Sometimes, I might
> go a week without any; other times, maybe one or two a day. Today, so far, they
> have sent me more than *forty five* notices.
>
> Incidentally, I use Norton AV, but since the ISP started their system it has
> detected only two suspected items (that's in more than two years.)
> Allen Tyler

Update:
In the past ten hours, I have received notices of about 250 more virus infestations
from my provider. The system they use to detect viruses (along with junk mail) is
named Postini. I can't thank them enough for providing this service, and at no
additional cost. Ask your providers why they don't offer some similar service, if
they aren't doing it now.
Allen Tyler


Mark Kleinhaut

unread,
Sep 19, 2003, 10:37:46 AM9/19/03
to

Steven Bornfeld > I was hoping for something more...violent.
>
>Steve
>
Like pulling their teeth out:)

John Albert

unread,
Sep 19, 2003, 10:42:41 AM9/19/03
to
RE the posting:

> I'm getting one every 15 minutes. Don't have any idea how to stop them. I

> just keep deleting them.

This posting is for Mac users only -- those running the "Classic" OS (OS
9.x, 8.x).

I've found a relatively easy and free solution to unwanted mail. It's
called "POPMonitor", available from the usual shareware locations.

It runs in either "freeware" (unregistered) or "shareware mode. I've found
the "freeware" mode does enough for my needs.

What it does is allow you to "preview" your email headers ON YOUR SERVER,
_before_ you actually download _anything_ to your own computer. You can
then delete all the "junk" before you open your email application and
receive the "bona fide stuff" to your computer.

It's painless to set up -- the classic Mac application which doesn't really
require any instructions.

I, too, have been getting dozens upon dozens of this "MS security" junk,
coming from who knows where. But it never _reaches_ my Mac -- I just drag
through it in POPMonitor's window and "mass delete" it. Yes, this "adds a
step" to fetching your mail, but it takes less than a minute to "preview"
20, 30, 40 or 50 pieces of junk and delete them. I find that it becomes
very easy to pick out the "real" email from the spam and junk.

There may be an OS X version of POPMonitor, not sure. I'm not an "X guy".

If you're a Mac'er, you might consider giving this a try. It's a very nice
solution to the junk email problem.

Hope this helps,
- John

The Webby

unread,
Sep 19, 2003, 10:44:33 AM9/19/03
to
In this morning's news at Google, look to the Technology/Science ??? for
this link on the virus. Instructions for those interested appear in the
article

http://insight.zdnet.co.uk/0,39020415,39116512,00.htm

If the link it too long .... just look at Google, News, and scroll down
until you see the topic.

TW

in article 3F6B11CD...@earthlink.net, Steven Bornfeld at
marstev...@earthlink.net wrote on 9/19/03 7:25 AM:

Greg M. Silverman

unread,
Sep 19, 2003, 10:47:54 AM9/19/03
to
Steven Bornfeld wrote:

> I'm posting this in all the newsgroups I've posted to in the past
> couple of days.
> I have been assaulted by a hugh number of presumably infected
> e-mails at both my office and at home. I say presumably infected
> because they are mainly "failure notices" or "microsoft security
> patches". The unnerving thing is that they are not picked up by my
> Norton Antivirus, which is up to date.
> I just deleted about 80 of these e-mails with attachments, each
> averaging about 150kb. My mailbox was completely jammed in one day.
> I strongly suspect it is due to the fact that I use my real e-mail
> address on my posts. Prior mass infected mailings have been sent to
> names I recognise.
> Please be vigilant!
>
> Steve
>

Hey Steve,
Problem is that all these new worms come out on a daily basis so you
have to make sure that the Norton updates occur daily, along with the
Windows updates. It's a bitch!

gms--

JP

unread,
Sep 19, 2003, 10:47:52 AM9/19/03
to
yes im getting these too.

I asked my service provider what can be done. They are helpless.
But said i should reply to the messages but replacing the user name with
abuse@

I think the logic is that the service provider that houses the spammer or
whatever
will get these and iof they get enough the will track down the source.

Im sorry..it kind of made sence..so i have responded in this manner..and now
i think im getting lots of message underliverable...Post administrator etc
messages.

Damn annoying this.

JP


Steven Bornfeld

unread,
Sep 19, 2003, 11:00:04 AM9/19/03
to

LarryV wrote:
> In Outlook Express, the caveat is that if you set up a rule to "delete
> from server", such rules _must be the first rules in your list_. If
> you set up any rules that require a message to be downloaded first to
> test a condition, if they precede the "delete from server" rule, then
> it will negate the "delete from server" rule since all messages need
> to be downloaded first in order to test for the preceding condition.
>
> I just set this up and I had to first delete all my existing rules.
> Then I created a rule to "delete from server" for the entries in the
> From line like "microsoft", "security" etc. Then I created a second
> rule to "delete from server" based on the Subject line with entries
> like viagra, penis etc. The text displayed in the "Message Rule
> Description Box" that says "Apply this rule after the message arrives"
> doesn't mean crap. As long as the "delete from server" rules are the
> first rules in your your list, the messages will be deleted from the
> server and not downloaded. Hope this isn't too confusing :)

Larry--
In outlook express 6 under mail rules, I see the option to delete, but I
believe that only deletes from the inbox. I can't see how to
automatically delete from the server. Where do I set this up?

LarryV

unread,
Sep 19, 2003, 11:19:41 AM9/19/03
to
Under the "Select the actions for your rule", you have to scroll down and
Delete From Server is the last option.

It will say "Apply this rule after the message arrives" under the Rule
Description, but that's meaningless.

As I mentioned, you have to make sure the very first rules are the ones that
Delete from the server, or else it won't work.

So if you have previously defined rules, you probably have to delete them,
create the rules that delete from the server, then recreate your old rules.

The reason for this is if the first rule processed requires that mail is
downloaded, then the mail is downloaded to your client before it ever gets
to see the rule that says delete from server.


"Steven Bornfeld" <marstev...@earthlink.net> wrote in message

news:3F6B19F4...@earthlink.net...

@yahoo.com Pt

unread,
Sep 19, 2003, 11:41:41 AM9/19/03
to
Like everyone else I am getting more than my share of the MS virus.
I am assuming that my email address is picked up in the usenet
newsgroups.
I just added (no spam) to my name.
Hopefully it will deter the onslaught.
Is there a free fix available for this worm?

Pt

PS...If you should email me remove (no spam) from my address.

Pt

Rick Del Savio

unread,
Sep 19, 2003, 11:56:50 AM9/19/03
to
Me Too. And two days ago I was complaining about getting 35 of these
things. Today I stopped counting at around 100. And it's just 12 noon
EST. RDS:(

--
Jazz Guitarist/Educator
Check out lessons and original music @
http://www.rickdelsavio.com

Max Leggett

unread,
Sep 19, 2003, 12:00:59 PM9/19/03
to
On Fri, 19 Sep 2003 15:56:50 GMT, Rick Del Savio
<rain...@optonline.net> wrote:

>Me Too. And two days ago I was complaining about getting 35 of these
>things. Today I stopped counting at around 100. And it's just 12 noon
>EST. RDS:(

I'm jealous. I haven't received even one. All I get is advice that my
manhood needs further endowment and that I can't get it up anyway.

Scott Daughtrey

unread,
Sep 19, 2003, 12:01:33 PM9/19/03
to
On Fri, 19 Sep 2003 15:41:41 GMT, Pt <peatea (no spam) @yahoo.com> wrote:

>Like everyone else I am getting more than my share of the MS virus.

Not me. When I signed on my new ISP over 6 months ago I decided that I would
no longer use a valid email in usenet. I have received ZERO spam in six
months...not a single incident. I have not had a virus mailed to me. Using "no
spam" and "remove" in the email address is a waste of time since bots can
easily filter out common "no spam" techniques.

Scott

Scott Daughtrey

unread,
Sep 19, 2003, 12:05:50 PM9/19/03
to
On Fri, 19 Sep 2003 16:00:59 GMT, mleg...@nospam.ca (Max Leggett) wrote:

>On Fri, 19 Sep 2003 15:56:50 GMT, Rick Del Savio
><rain...@optonline.net> wrote:
>
>>Me Too. And two days ago I was complaining about getting 35 of these
>>things. Today I stopped counting at around 100. And it's just 12 noon
>>EST. RDS:(
>
>I'm jealous. I haven't received even one. All I get is advice that my
>manhood needs further endowment and that I can't get it up anyway.

That's because your email can't be found by removing "no spam", "remove" etc.
You're smart enough to keep your actual ISP hidden.

Scott

Joe Thibodeau

unread,
Sep 19, 2003, 12:12:24 PM9/19/03
to
I think she was referring to that nasty combination when the 7 and 10 pins
are still standing and there's liitle you can do except to open the frame.
I'm sure that's what she was talking about.

Joe


"A Nengineer" <st...@polhemus.cc> wrote in message
news:2buab.8898$BS5...@newsread4.news.pas.earthlink.net...


> My SpamAssassin setup catches (nearly) every one of 'em.
>
> I typically get about six to ten SPAM-type emails per day.
>

> Today I got thirty (of which SA disposed of twenty-nine). The one that got
> away was a solicitation from a young woman inviting me to "split her
open."
>
> I have NO IDEA what she meant by that.
>
> "Rolland" <roll...@cableone.net> wrote in message
> news:vmkpoeg...@corp.supernews.com...

Joe Thibodeau

unread,
Sep 19, 2003, 12:17:30 PM9/19/03
to

My mailbox had 15.3 meg worth. 15 pages of infected mail. Thank god I setup
my filter rules to delete them all. It is good to know that this is not
retaliation because I've been busting spammers with SpamCop.

Joe


"Tony Done" <tony...@bigpond.com> wrote in message
news:M6uab.111064$bo1....@news-server.bigpond.net.au...
> You're not kidding. I've just deleted about 20 of them.
>
> Tony D


>
> "Steven Bornfeld" <mars...@earthlink.net> wrote in message
> news:3F6A62FE...@earthlink.net...

Steven Bornfeld

unread,
Sep 19, 2003, 12:23:53 PM9/19/03
to

LarryV wrote:
> Under the "Select the actions for your rule", you have to scroll down and
> Delete From Server is the last option.
>
> It will say "Apply this rule after the message arrives" under the Rule
> Description, but that's meaningless.
>
> As I mentioned, you have to make sure the very first rules are the ones that
> Delete from the server, or else it won't work.
>
> So if you have previously defined rules, you probably have to delete them,
> create the rules that delete from the server, then recreate your old rules.
>
> The reason for this is if the first rule processed requires that mail is
> downloaded, then the mail is downloaded to your client before it ever gets
> to see the rule that says delete from server.

Thanks Larry--missed that pesky scrollbar!

Steve

Steven Bornfeld

unread,
Sep 19, 2003, 12:40:01 PM9/19/03
to

LarryV wrote:
> Under the "Select the actions for your rule", you have to scroll down and
> Delete From Server is the last option.
>
> It will say "Apply this rule after the message arrives" under the Rule
> Description, but that's meaningless.
>
> As I mentioned, you have to make sure the very first rules are the ones that
> Delete from the server, or else it won't work.
>
> So if you have previously defined rules, you probably have to delete them,
> create the rules that delete from the server, then recreate your old rules.
>
> The reason for this is if the first rule processed requires that mail is
> downloaded, then the mail is downloaded to your client before it ever gets
> to see the rule that says delete from server.

Do I have to have separate rules to delete it from my mail reader? Or
does it delete from server before I ever see it?
I've set up rules to delete from server (as my ONLY rules, at this
point). I assume I can set up the rules to include Microsoft, or MS,
and don't have to specify the entire "from" line. They still seem to be
getting through to my server, though.

Steve

Nil

unread,
Sep 19, 2003, 1:24:18 PM9/19/03
to
On 19 Sep 2003, "JP" <jp...@optushome.com.au> wrote in
news:3f6b16e8$0$6524$afc3...@news.optusnet.com.au:

> I asked my service provider what can be done. They are helpless.
> But said i should reply to the messages but replacing the user
> name with abuse@

I advise against that. Most of those messages have bogus return
addresses, so unless you take the time to comb through the headers and
know how to interpret them, you're not likely to send the reply to the
real origin. Besides, these things are usually over within a few days,
so it will probably pass before the ISP is able to do anything, if they
were of a mind to in the first place. I think the best thing to do is
just filter them out and delete them.

LarryV

unread,
Sep 19, 2003, 1:33:03 PM9/19/03
to
Where the From line contains certain persons - so if you put Microsoft, it
will delete it from the server if the word Microsoft is in the From field.
There's a gazillion variants it seems, so I keep adding to the rule
everytime one makes it through. Caveat: my understanding is that the delete
from server rule only works if you're using a POP3 server for mail.


EvelynVogtGamble(Divamanque)

unread,
Sep 19, 2003, 1:04:44 PM9/19/03
to

"EvelynVogtGamble(Divamanque)" wrote:

> Fortunately, I have all incoming mail feeding to trash, so I don't have
> to open any of it - I can scan the titles without opening them, then get
> rid of it all by emptying trash with one click of the mouse. However, I
> can't do anything about it jamming my Earthlink mailbox until I download
> and get rid of it. Thinks have been so peacfully back to the normal 30
> or 40 messages a day (mostly spam, of course) - wonder what happens if I
> go on vacation and can't access my e-mail for few days?

I just discovered Earthlink has improved its "Spaminator" so now I can
block anything not coming from people in my address book (and peruse it
before I delete it, so I can update my address list for people not on
it.)

Jerry Kohl

unread,
Sep 19, 2003, 1:49:39 PM9/19/03
to
Kevin Van Sant wrote:

> On 19 Sep 2003 06:14:22 -0700, coas...@yahoo.com (Tony DeCaprio)
> wrote in message <b38d2f42.03091...@posting.google.com> :
>

> >I have been bombarded with this also. How can this be stopped?
>

Perhaps, but it would only actually apply to one of the nearly 200 spams
that have arrived in my mailbox in the past 24 hours, since all the rest
have been posted either from vanishing "temporary" nodes, or bounced off
of some unknowing person's legitimate address, or even generated from a
virus-infected address book.

And the one genuinely traceable spam message originated from Russia. How
do the British authorities propose to enforce their new law in such a
case?

--
Jerry Kohl <jerom...@comcast.net>
"Légpárnás hajóm tele van angolnákkal."


Native Texan

unread,
Sep 19, 2003, 2:01:25 PM9/19/03
to
Steve:
You ought to use a yahoo account for public exchanges and protect your ISP
mailbox. My yahoo e-mail was flooded today, so I guess I need to disguise
that now; but it's probably too late. Problem with these spammers is you
can't shoot 'em--and they definitely need killin'!
Get Noron Internet Security--it's worth the money.
-Mike

Native Texan

unread,
Sep 19, 2003, 2:02:22 PM9/19/03
to

"Mxsmanic" <mxsm...@hotmail.com> wrote in message
news:avrlmv8bporm422u2...@4ax.com...
> Dr.Matt writes:
>
> > I get about 100 of those per hour. I've asked my local postmaster to
> > take action, as I cannot afford to keep my network connection open all
> > the time just to run filter rules in the client application.
>
> Switch to broadband.

>
> --
> Transpose hotmail and mxsmanic in my e-mail address to reach me directly.

It doesn't matter; they're everywhere.
-mb


Native Texan

unread,
Sep 19, 2003, 2:13:27 PM9/19/03
to
Steve:

Set up an Outlook rule to permanently dump all e-mails with attachments.
I've tried using Outlook rules and it works somewhat, but the spammers
always find ways to get around it like using phony return addresses. Best
bet is use a free mail account for public exchanges and protect your ISP
mail account.
-Mike

"Steven Bornfeld" <marstev...@earthlink.net> wrote in message

news:3F6B0FDB...@earthlink.net...
>
>
> Peter Meiers wrote:
> > Hello,
> >
> > this morning, I received 51 emails of that type. Fortunately, my email
> > program allows me a "selective mail download" so that I am able to
> > download just the headers first, mark them for deletion or donwload, and
> > then proceed. Works pretty good and saves much time otherwise spent for
> > download of useless stuff.
> >
> > Best,
> > Peter
> My blocked senders list on Outlook express is getting longer and
> longer, but these things are coming from everywhere. I'm also setting
> up more and more message rules.
> The issue isn't infection of my machine, which is up to date with
> antivirus software. The issue is that I just deleted about 150 of these
> things received in the last 10 hrs. I go to webmail and cleared the
> mail server, but it was jammed full by 9 this morning.
>
> Steve
>
> >
> > --------------------

HotchkissTrio

unread,
Sep 19, 2003, 2:28:53 PM9/19/03
to
I've been putting every one I get in my "Junk Sender" List, but those
damned scripts they use just make up random numbers for the sender. I
hate virus dorks!

"Greg M. Silverman" <gmsP...@REMOVEMEumn.edu> wrote in message news:<bkf4ur$85j$1...@lenny.tc.umn.edu>...

Ted Vieira

unread,
Sep 19, 2003, 2:39:00 PM9/19/03
to
I'm getting the same mess in my email box too. It's started yesterday. This
morning I woke up and had to delete over 150 messages of this sort. Any idea
what's going on?

Ted


_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/

http://TedVieira.com
Bio Info, Free Online Guitar Instruction,
Instructional Books, Articles, hear my CDs and more...

--
Soloing Over Altered Chords: 4 ways to use melodic
minor scales to solo over altered dominant chords.
View at: http://TedVieira.com/altered/index.html


_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/

Joel M. Eichen D.D.S.

unread,
Sep 19, 2003, 2:29:28 PM9/19/03
to
When everyone stops looking into the SPAM then it will die out all by
itself!


Joel


On 19 Sep 2003 11:28:53 -0700, paulyho...@hotmail.com
(HotchkissTrio) wrote:

--
Joel M. Eichen, .
Philadelphia PA

DISCLAIMER FOLLOWS:

*********

Dental health-related material
is provided for information purposes
only and does not necessarily
represent endorsement by or an official
position of the SciMedDentistry gang
or any other agency either actual
or fictioous.

Advice on the treatment or care
of an individual patient should
be obtained through consultation
with a dentist who has examined
that patient or is familiar with
that patient's dental history.

STANDARD DISCLAIMER

Sheltech

unread,
Sep 19, 2003, 2:26:31 PM9/19/03
to

Ted Vieira <con...@tedvieira.com> wrote in message news:BB909BA7.20317%con...@tedvieira.com...

> I'm getting the same mess in my email box too. It's started yesterday. This
> morning I woke up and had to delete over 150 messages of this sort. Any idea
> what's going on?
>
> Ted
>
>
> _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
>
> http://TedVieira.com
> Bio Info, Free Online Guitar Instruction,
> Instructional Books, Articles, hear my CDs and more...
>
>

"Ctrl a Del " , mass deletion is what works for me.
Times like this I figure it's worth the risk of missing
out on that one penis enlargement technique that might
work. (^#

Dar


Jonathan Giblin

unread,
Sep 19, 2003, 3:17:47 PM9/19/03
to
For those with Yahoo (and probably other) email service(s):

You can choose keywords to block incoming mail. These virus mongers
seem to be set on tricking people into running what they say are
Microsoft security patches. Blocking "Microsoft" should do the trick.


Steven Bornfeld <mars...@earthlink.net> wrote in message news:<3F6A62FE...@earthlink.net>...

Richard Spross

unread,
Sep 19, 2003, 3:19:09 PM9/19/03
to
John Albert wrote:

> RE the posting:


> > I'm getting one every 15 minutes. Don't have any idea how to stop them. I
>
> > just keep deleting them.
>

> This posting is for Mac users only -- those running the "Classic" OS (OS
> 9.x, 8.x).
>
> I've found a relatively easy and free solution to unwanted mail. It's
> called "POPMonitor", available from the usual shareware locations.
>
> It runs in either "freeware" (unregistered) or "shareware mode. I've found
> the "freeware" mode does enough for my needs.
>
> What it does is allow you to "preview" your email headers ON YOUR SERVER,
> _before_ you actually download _anything_ to your own computer. You can
> then delete all the "junk" before you open your email application and
> receive the "bona fide stuff" to your computer.
>
> It's painless to set up -- the classic Mac application which doesn't really
> require any instructions.
>
> I, too, have been getting dozens upon dozens of this "MS security" junk,
> coming from who knows where. But it never _reaches_ my Mac -- I just drag
> through it in POPMonitor's window and "mass delete" it. Yes, this "adds a
> step" to fetching your mail, but it takes less than a minute to "preview"
> 20, 30, 40 or 50 pieces of junk and delete them. I find that it becomes
> very easy to pick out the "real" email from the spam and junk.
>
> There may be an OS X version of POPMonitor, not sure. I'm not an "X guy".
>
> If you're a Mac'er, you might consider giving this a try. It's a very nice
> solution to the junk email problem.
>
> Hope this helps,
> - John

John,

Haven't sourced "shareware or freeware" could you please point me in a
good direction.

Thanks,
Richard Spross


Dr.Matt

unread,
Sep 19, 2003, 3:13:17 PM9/19/03
to
In article <cnimmvs6a0mndn3sg...@4ax.com>,

Joel M. Eichen D.D.S. <joele...@yahoo.com> wrote:
>When everyone stops looking into the SPAM then it will die out all by
>itself!

Wishful thinking.

It can only be stopped by aggressive actions to prevent its promulgation.

--
Matthew H. Fields http://personal.www.umich.edu/~fields
Music: Splendor in Sound
Brights have a naturalistic world-view. http://www.the-brights.net/

Jerry Kohl

unread,
Sep 19, 2003, 3:44:04 PM9/19/03
to
"Joel M. Eichen D.D.S." wrote:

> When everyone stops looking into the SPAM then it will die out all by
> itself!

Your optimism is touching, but sadly misplaced. I have never opened any of these spam posts, over the past
year or more, but they keep coming, including the latest avalanche.

Dr.Matt

unread,
Sep 19, 2003, 4:16:29 PM9/19/03
to
In article <3F6B5C6A...@comcast.net>,

Jerry Kohl <jerom...@comcast.net> wrote:
>"Joel M. Eichen D.D.S." wrote:
>
>> When everyone stops looking into the SPAM then it will die out all by
>> itself!
>
>Your optimism is touching, but sadly misplaced. I have never opened any
>of these spam posts, over the past
>year or more, but they keep coming, including the latest avalanche.

I'm receiving them by the gobs--on a SunOS machine which cannot
execute them no matter how hard it tries.

Greg M. Silverman

unread,
Sep 19, 2003, 4:44:19 PM9/19/03
to
Dr.Matt wrote:

>In article <3F6B5C6A...@comcast.net>,
>Jerry Kohl <jerom...@comcast.net> wrote:
>
>
>>"Joel M. Eichen D.D.S." wrote:
>>
>>
>>
>>>When everyone stops looking into the SPAM then it will die out all by
>>>itself!
>>>
>>>
>>Your optimism is touching, but sadly misplaced. I have never opened any
>>of these spam posts, over the past
>>year or more, but they keep coming, including the latest avalanche.
>>
>>
>
>I'm receiving them by the gobs--on a SunOS machine which cannot
>execute them no matter how hard it tries.
>

It doesn't matter... the vast majority of them are 0 bytes.

gms--

Steven Bornfeld

unread,
Sep 19, 2003, 4:47:30 PM9/19/03
to

LarryV wrote:
> Under the "Select the actions for your rule", you have to scroll down and
> Delete From Server is the last option.
>
> It will say "Apply this rule after the message arrives" under the Rule
> Description, but that's meaningless.
>
> As I mentioned, you have to make sure the very first rules are the ones that
> Delete from the server, or else it won't work.
>
> So if you have previously defined rules, you probably have to delete them,
> create the rules that delete from the server, then recreate your old rules.
>
> The reason for this is if the first rule processed requires that mail is
> downloaded, then the mail is downloaded to your client before it ever gets
> to see the rule that says delete from server.

Well, by now I've entered enough keywords to my message rule that the
vast majority of the spams are being deleted from the server. Now all I
have to do is log on once and hour to clear out my mailbox!
This is a lesson well-learned. I think I probably will have to open a
new e-mail account, though.

Steve

>
>
> "Steven Bornfeld" <marstev...@earthlink.net> wrote in message

Steven Bornfeld

unread,
Sep 19, 2003, 4:48:22 PM9/19/03
to

You must have a better address book than I. ;-)

Steve


this out>@cable.net Rolland

unread,
Sep 19, 2003, 4:49:09 PM9/19/03
to
The pace is picking up. I received 271 in the last two hours.


"Rolland @cableone.net>" <rolland1<Take this out> wrote in message
news:vmm26h4...@corp.supernews.com...


>
> "Rolland" <roll...@cableone.net> wrote in message
> news:vmkpoeg...@corp.supernews.com...
> >

> > "Steven Bornfeld" <mars...@earthlink.net> wrote in message
> > news:3F6A62FE...@earthlink.net...
> > > I'm posting this in all the newsgroups I've posted to in the past
> > > couple of days.
> > > I have been assaulted by a hugh number of presumably infected e-mails
> > > at both my office and at home. I say presumably infected because they
> > > are mainly "failure notices" or "microsoft security patches". The
> > > unnerving thing is that they are not picked up by my Norton Antivirus,
> > > which is up to date.
> > > I just deleted about 80 of these e-mails with attachments, each
> > > averaging about 150kb. My mailbox was completely jammed in one day.
> > > I strongly suspect it is due to the fact that I use my real e-mail
> > > address on my posts. Prior mass infected mailings have been sent to
> > > names I recognise.
> > > Please be vigilant!
> > >
> > > Steve
> >

> > I'm getting one every 15 minutes. Don't have any idea how to stop them.
I
> > just keep deleting them.
> >

> > Rolland
>
> As of 0845, 19 Sept. 03, I have received 265 since midnight. That was the
> last time I did the delete. My ISP stops the junk before it gets to me. I
> just go to their garage dump and push them out. Still, it's getting to be
a
> real hassle keeping that thing clean.
>
> Rolland
>
>


Dr.Matt

unread,
Sep 19, 2003, 4:49:31 PM9/19/03
to
In article <bkfpr4$dvg$1...@lenny.tc.umn.edu>,

The vast majority of the ones I'm receiving are 148 Kb.

>gms--

Greg M. Silverman

unread,
Sep 19, 2003, 5:17:07 PM9/19/03
to
Dr.Matt wrote:

>In article <bkfpr4$dvg$1...@lenny.tc.umn.edu>,
>Greg M. Silverman <gmsp...@removemeatumn.edu.com> wrote:
>
>
>>Dr.Matt wrote:
>>
>>
>>
>>>In article <3F6B5C6A...@comcast.net>,
>>>Jerry Kohl <jerom...@comcast.net> wrote:
>>>
>>>
>>>
>>>
>>>>"Joel M. Eichen D.D.S." wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>When everyone stops looking into the SPAM then it will die out all by
>>>>>itself!
>>>>>
>>>>>
>>>>>
>>>>>
>>>>Your optimism is touching, but sadly misplaced. I have never opened any
>>>>of these spam posts, over the past
>>>>year or more, but they keep coming, including the latest avalanche.
>>>>
>>>>
>>>>
>>>>
>>>I'm receiving them by the gobs--on a SunOS machine which cannot
>>>execute them no matter how hard it tries.
>>>
>>>
>>>
>>It doesn't matter... the vast majority of them are 0 bytes.
>>
>>
>
>The vast majority of the ones I'm receiving are 148 Kb.
>

cool! you get actual files, I get nothing!

gms--

Sam Culotta

unread,
Sep 19, 2003, 5:17:58 PM9/19/03
to
Hi, Steve.
Since yesterday I've been getting them in bunches...over 100 by now. They
are various in title but all carry the same friggin' worm. My Norton
Anti-Virus catches them but interupts what I'm doing to ask me to
"quarantine" them. Just a collosal pain in the ass, I'm afraid.
Interestingly ( time out, I just had to fix two of them back to back ) the
other newsgroup I visit has no mention of these things. Could if have
anything to do with rmcg users?

--
Sam
( Change "invalid" to net to reply )


"Steven Bornfeld" <marstev...@earthlink.net> wrote in message

news:3F6A700...@earthlink.net...
>
>
> A Nengineer wrote:
> > My SpamAssassin setup catches (nearly) every one of 'em.
> >
> > I typically get about six to ten SPAM-type emails per day.
> >
> > Today I got thirty (of which SA disposed of twenty-nine). The one that
got
> > away was a solicitation from a young woman inviting me to "split her
open."
> >
> > I have NO IDEA what she meant by that.
>
> Thanks--I'll have a look at SpamAssassin.
> Steve


>
> >
> > "Rolland" <roll...@cableone.net> wrote in message
> > news:vmkpoeg...@corp.supernews.com...
> >

Sam Culotta

unread,
Sep 19, 2003, 5:19:29 PM9/19/03
to

"Joe Thibodeau" <jet...@allvantage.com> wrote in message
news:bkf9ti$16lle$1...@ID-205866.news.uni-berlin.de...
> I think she was referring to that nasty combination when the 7 and 10 pins
> are still standing and there's liitle you can do except to open the frame.
> I'm sure that's what she was talking about.
>
> Joe
>

You'd of thought a Nengineer woulda figured that out.

Sam


>
> "A Nengineer" <st...@polhemus.cc> wrote in message
> news:2buab.8898$BS5...@newsread4.news.pas.earthlink.net...


> > My SpamAssassin setup catches (nearly) every one of 'em.
> >
> > I typically get about six to ten SPAM-type emails per day.
> >
> > Today I got thirty (of which SA disposed of twenty-nine). The one that
got
> > away was a solicitation from a young woman inviting me to "split her
> open."
> >
> > I have NO IDEA what she meant by that.
> >

It is loading more messages.
0 new messages