Virus Emails

Does anyone know how to stop these emails?
===========================================
Return-Path: <admin@duma.gov.ru>
Received: from localhost ([62.94.205.191]) by tomts8-srv.bellnexxia.net (InterMail vM.5.01.06.04 201-253-122-130-104-20030726) with SMTP id <20030917133949.EGLY719.tomts8-srv.bellnexxia.net@localhost> for <lottomail@sympatico.ca>; Wed, 17 Sep 2003 09:39:49 -0400
From: "Microsoft" <security@microsoft.com>
To: <lottomail@sympatico.ca>
Subject: Use this patch immediately !
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary= "xxxx"
Message-Id: <20030917133949.EGLY719.tomts8-srv.bellnexxia.net@localhost>
Date: Wed, 17 Sep 2003 09:39:51 -0400


Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!



Download Attachment: patch.exe
===========================================
I get at least 3 per day from the same addy.
I assume this is a version of the lastest virus.
I have Mailwasher that just bounces them out .... but just kind of annoying.

Any ideas??

 

Hello linkz,

If they are comming from the same address, you can let your ISP know about it, they can block them. However, if they are comming from a infected system, blocking may solve it for that one instance only.

The ISP that I use - MSN, has a provision to block on the user level.

Other than that, just keep bouncing them and certainly don't open them.

Regards - Charles

 

I would suggest just deleting them.

By Bouncing they may well go back to some other unsuspecting/under protected user.

By Bouncing we would be playing right into the original senders hands.

The Address it shows as sender may well be on someone elses machine in another country somewhere.

In other words some joker sends me a viurs laden mail and grabs your address and sends it on to you looking like it came from me. And I may not even know about it.

HELP STOP Virus Spread.. Delete not bounce.

If this reply is not quite right or needs correcting in someway please do so. I want to HELP not hinder.

BillyBob

 

Hey BB,

I agree with you on the deletion of these emails. Linkz uses Mailwasher and that's what it does. However, don't know if the consequence of a "bounce" is as you describe, just don't know that much about how mailwasher works.

For my part, I don't open emails that I don't know who the sender is and delete them.

Regards - Chalres

 

Bounce means " Return to Sender " ( I believe anyway )

I like to see these questions ( or what ever ) raised. That is what I want. Then between members here we can get good straight solid info out.

Messing with The Virus situation is not an easy thing to deal with.

Even if you did open it there is no gaurrentee the address you see realy where it came from..

Plus I have bounced some of them just to have them come back as un-deliverable. That should ( if I am paying attention ) say something. It is more than likely a random address grabed off of an infected machine and is no longer valid.

MailWasher deletes the selected item right off of the server. It never gets to you machine.

MailWasher will not download mail.

BillyBob

 

BillyBob, I actually thought of that.

I tried it for a couple of days figuring it would top them. But they just keep coming.

I had the same message from a few from different addys, but they seemed to have stopped.

I will try for a week just to delete them and see what happens.

And since I posted, I got 2 more ... lol
I can just change my email address, but I guess then they would be bounced.
Lets see what happens

 

Nothing you do will completely stop them from coming in. You block one address and they find another.

I had mail containing the same data content from three different address in the same day.

But deleting them is just small step that we can take to help stop spreading TRASH and Viruses laden mail.

BillyBob

 

I believe too that the greater number of users that have your address the greater the possibility that one ( or more ) of them may not be running a well protected machine.

And that is what Virus creators count on.

That is not a nice thing to think but I do believe it is true.

BB

 

Well I'm still just deleting them.
This email is actually pretty clean from getting spam emails anyway, I know spammers change and change the sending addy ...... just look at my Mailwasher bounce list

This thing is really the only problem I have.

And ..... for anybodies information, when you bounce an email (at least through Mailwasher), it comes back to the user 'unknown mailbox' ..... in other words ...... says the user its just not there.

When I first got Mailwasher, I had to know so I bounced my own email lol ......

I did trace the IP [62.94.205.191] and even though the email says from russia [.ru] the trace is to italy [it]

 

YEP !!. It sure does do that.

And invalid address was grabed from somebodys list.

BillyBob

 

linkz--Here is an article that might help you determine where the spam is really coming from
http://www.pcmag.com/article2/0,4149,929898,00.asp
Then you could report it to the abuse department of the email provider of the spammer, or use services like Abuse.net and SpamCop. I have never had much luck with the last two however.

 

I found this while looking for info on Mailwasher. ( same site but different program )

I put it here but maybe it should be in a new thread In the Virus Forum also.

BillyBob

 

Quick Update:

It seems that the offending computer has been cleaned. I have not received any more viurs emails in over two weeks.

Woo hoo ......... 1 for the good guys lol