[UK-CONTEST] Re:Pirate e-mails
G3SVL
G3SVL at manyoaks.co.uk
Sat Jan 31 10:10:49 EST 2004
Roger (and others affected by the virus),
This virus 'steals' an address and then using that as the 'return to'
address, it makes up outgoing e-mail addresses and sends out mails with the
virus attached. As the majority of the outgoing addresses don't exist, and
as it has your address in the 'return to' filed hey presto you get all the
'bounce' messages. Any real addresses get the virus - and so it
propagates. It appears in my case that it is also making up 'return to'
addresses based on my domain name.
Others have made the very valid point that we should all run up-to-date
virus checkers - but it is also possible to run freeware to remove this
current crop if they have crept under the virus protection (McAfee did not
issue a fix for almost 24 hours after I first saw it as a rouge
attachment). Go to http://vil.nai.com/vil/stinger/ and follow instructions.
I have also set up a filter on my e-mail system that puts all incoming
e-mails with 'failure' or 'postmaster' or 'mailer daemon' in the header
straight into the delete bin. That way the mails don't bother me. Estimates
suggest weeks before it dies out.
Hope this helps and the bandwidth isn't viewed as spam by the subscribers
to the reflector!
73 de Chris G3SVL
_________________________________________
At 04:09 29/01/2004, G3SXW wrote:
>Dear UK-Contest,
>I've recently received e-mails where the 'from' name
>purports to be from G3txf, G3rfx, G3pjt (note the lower-
>case ending). These are spam. They have apparently stolen
>our e-mail i.d. names, but not quite got it right (upper-lower
>case confusion). They are easily deleted.
>More worrying - I am now receiving about 200 e-mails daily
>purporting to be 'failure, could not deliver' notifications.
>Again, they are easily deleted but this internet-vandalism is
>really depressing me! Someone may be sending out spam
>using my e-mail address so bounced messages come
>back to me. I have even received it myself!
>Forgive the bandwidth
>73 de (frustrated of Chessington) Roger/G3SXW.
>_______________________________________________
>UK-Contest mailing list
>UK-Contest at contesting.com
>http://lists.contesting.com/mailman/listinfo/uk-contest
More information about the UK-Contest
mailing list