[UK-CONTEST] Re:Pirate e-mails

G3SVL G3SVL at manyoaks.co.uk
Sat Jan 31 10:10:49 EST 2004


Roger (and others affected by the virus),

This virus 'steals' an address and then using that as the 'return to' 
address, it makes up outgoing e-mail addresses and sends out mails with the 
virus attached. As the majority of the outgoing addresses don't exist, and 
as it has your address in the 'return to' filed hey presto you get all the 
'bounce' messages. Any real addresses get the virus - and so it 
propagates.  It appears in my case that it is also making up 'return to' 
addresses based on my domain name.

Others have made the very valid point that we should all run up-to-date 
virus checkers - but it is also possible to run freeware to remove this 
current crop if they have crept under the virus protection (McAfee did not 
issue a fix for almost 24 hours after I first saw it as a rouge 
attachment). Go to http://vil.nai.com/vil/stinger/ and follow instructions.

I have also set up a filter on my e-mail system that puts all incoming 
e-mails with 'failure' or 'postmaster' or 'mailer daemon' in the header 
straight into the delete bin. That way the mails don't bother me. Estimates 
suggest weeks before it dies out.

Hope this helps and the bandwidth isn't viewed as spam by the subscribers 
to the reflector!

73  de  Chris G3SVL

_________________________________________
At 04:09 29/01/2004, G3SXW wrote:
>Dear UK-Contest,
>I've recently received e-mails where the 'from' name
>purports to be from G3txf, G3rfx, G3pjt (note the lower-
>case ending). These are spam. They have apparently stolen
>our e-mail i.d. names, but not quite got it right (upper-lower
>case confusion). They are easily deleted.
>More worrying - I am now receiving about 200 e-mails daily
>purporting to be 'failure, could not deliver' notifications.
>Again, they are easily deleted but this internet-vandalism is
>really depressing me! Someone may be sending out spam
>using my e-mail address so bounced messages come
>back to me. I have even received it myself!
>Forgive the bandwidth
>73 de (frustrated of Chessington) Roger/G3SXW.
>_______________________________________________
>UK-Contest mailing list
>UK-Contest at contesting.com
>http://lists.contesting.com/mailman/listinfo/uk-contest


More information about the UK-Contest mailing list