Hoax re registry

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Keep getting e-mails from (e-mail address removed) with subject, 'New
update to fix windows file errors in registry'. Indicates a picture is
attached. Is this a hoax not to be opened?
 
HerbJ said:
Keep getting e-mails from (e-mail address removed) with subject, 'New
update to fix windows file errors in registry'. Indicates a picture is
attached. Is this a hoax not to be opened?

Delete the email and don't open it or its attachment. Microsoft does not
send unsolicited emails. Make an email rule that deletes
(e-mail address removed) from the server so you never see it again.

Alias
 
HerbJ said:
Keep getting e-mails from (e-mail address removed) with subject, 'New
update to fix windows file errors in registry'. Indicates a picture is
attached. Is this a hoax not to be opened?

You have good instincts. This is worse than just a hoax though; it is
undoubtedly a virus. MS never sends emails with attachments for you to
run. Delete the mail unopened.


Malke
 
HerbJ

If you are using Outlook Express to use these newsgroups then please save
the entire e-mail to computer, zip it & add it to a post so I can download
it.

I have been dealing with SPAM 7 days a week since 1997 & the same with
viruses

Not all are viruses or malicious though contary to what the other posters
say. Reason, I received something similar, sent to Symantec Antivirus
Research Center (SARC) & they found nothing wrong with the file whatsoever.
No, I am not foolish enough to have clicked on it, but I did examine it
thoroughly myself (11 years of daily experience)

As for the SPAM message you are getting too - fantastic!! I love reversing
SPAM & find out what sad individual sent it. Plus, I use 5 realtime SPAM
databases on a daily (7 days a week) basis.

So, you see, I am extremely interested in this e-mail & any others with
different attachments you may get.

Cheers,
 
Newbie Coder said:
HerbJ

If you are using Outlook Express to use these newsgroups then please save
the entire e-mail to computer, zip it & add it to a post so I can download
it.

I have been dealing with SPAM 7 days a week since 1997 & the same with
viruses

Not all are viruses or malicious though contary to what the other posters
say. Reason, I received something similar, sent to Symantec Antivirus
Research Center (SARC) & they found nothing wrong with the file
whatsoever.
No, I am not foolish enough to have clicked on it, but I did examine it
thoroughly myself (11 years of daily experience)

As for the SPAM message you are getting too - fantastic!! I love reversing
SPAM & find out what sad individual sent it. Plus, I use 5 realtime SPAM
databases on a daily (7 days a week) basis.

So, you see, I am extremely interested in this e-mail & any others with
different attachments you may get.

That's amazing, I have none, absolutely none of the expertise and experience
you have in dealing with Spam, and yet I've failed to receive any Spam in
over 10 years.

However, I do have some expertise and experience in spotting clueless twits.
 
Incognitus,

Hope you are not calling me a clueless twit

Its part of my job & also a big hobby to fight SPAM. So, I get involved with
it 7 days a week & have done for many, many, many years.
 
George,

That's what I thought.

I rarely get SPAM myself but deal with loads from other users daily. I have
a few SPAM trap e-mail addresses too

Maybe Incognitus is just jealous because others know more than him/her
 
Thread readers,

I received a Brazilian ECard SPAM today with the same download attachment on
it, which in the past have been analised by SARC to be unmalicious. See? It
does happen from time-to-time
 
HerbJ said:
Thanks, that's what I thought. How do I make a rule in e-mail to delete?

Tools/Message Rules/Mail/New Rule. Where the From is
(e-mail address removed) Delete from Server, Stop processing more rules.

Alias
 
HerbJ,

What is the point in creating a rule for the said SPAM?

Example:

You create a rule against '(e-mail address removed)' but the next SPAM that comes in is
then '(e-mail address removed)' or something other. You will end up with thousands of
rules for the same message.

If however the SPAM comes from the same address each time then just contact
the person at that address & get them to stop sending... That would be the
best method

Please, please, please add the message & attachment to a zip file & add it
to your reply.
 
Newbie said:
HerbJ,

What is the point in creating a rule for the said SPAM?

Example:

You create a rule against '(e-mail address removed)' but the next SPAM that comes in is
then '(e-mail address removed)' or something other. You will end up with thousands of
rules for the same message.

If however the SPAM comes from the same address each time then just contact
the person at that address & get them to stop sending... That would be the
best method

That would be the best method to let the spammer know that your email is
valid.

Alias
 
Alias,

If its coming from one address then it isn't SPAM, is it?

If the sender is different each time then its a SPAM message most likely,
but when they try to spoof their address then you won't reply, will you?

So, if the message is SPAM then you'll just keep adding the said message to
block, which is pointless because the SPAMMER would be changing it next time
anyway.
 
Newbie said:
Alias,

If its coming from one address then it isn't SPAM, is it?

Please reread the OP's post. I get spam from one email address in
Brazil, over and over and over again so I created a delete from server
rule and don't see it anymore.

Alias
 
If its coming from one address then it isn't SPAM, is it?

What on Earth gave you that idea? I get virus e-mails regularly from the
same address, and like the OP have created a delete from server rule (only
to discover that Norton Antivirus apparently invalidates said rule and
downloads the message anyway, but it was worth a try).



Rob
 
Alias,

How do you know its from Brasil? It may specify '.com.br', but it could have
been spoofed.

Robert,

With Norton you can specify ports to scan...
 
How does specifying ports to scan help with my e-mail scanning? (Ignoring
for the moment that I don't have the firewall installed, since I'm behind a
stealth router and felt no particular need.)



Rob
 
Newbie said:
Alias,

How do you know its from Brasil? It may specify '.com.br', but it could have
been spoofed.

Robert,

With Norton you can specify ports to scan...

I know because I know who they are, what business they do and the
director's name among other things.

I wouldn't let Norton near any machine of mine.

Alias
 
In Norton you have the e-mail scanning option that you can specify ports
like 110 or 25 etc which are the default for POP3 etc.

If the users knows who the e-mail is coming from then its not a SPAM message
then

Alias,

I guess you probably use McCrappy or AVG 7 (with built in BHO) or something
bad like that

Client Security 3.1
(http://www.symantec.com/enterprise/products/overview.jsp?pcid=1001&pvid=839
_1) has the corporate enterprise version of Symantec firewall together with
Symantec Antivirus 10.1.5.5001 corporate edition & is the best thing since
sliced bread in my eyes. It just depends on what you prefer, but I remember
the days when McCrappy picked itself up as a virus
 
Back
Top