Swen in my e-mail as MS Security patches

[Barb]

Help!! I have a small e-mail box that keeps getting
overloaded with the supposed Microsoft security patch
(that contains the Swen virus), 25 to 30 every few days I
check it. How do I get it to NOT get into my Bulk mail in
the first place?? Should I call Sovernet or is there some
other way?

 

[Ken Bessler]

Help!! I have a small e-mail box that keeps getting
overloaded with the supposed Microsoft security patch
(that contains the Swen virus), 25 to 30 every few days I
check it. How do I get it to NOT get into my Bulk mail in
the first place?? Should I call Sovernet or is there some
other way?

Barb the 1st thing you need to do is stop posting to
the newsgroups with a valid return email address. Look
at mine.

Secondly, you can go to the mail options and create a
filter to divert the incoming mail to the trash. I have mine
set to do this if the body of the message contains the
word "update", "patch" or "support". Problem is that
while this keeps my inbox clean, my trash is now full
of these emails. When the system reaches 117% of
capacity, it stops working.

Yahoo won't do anything to help.

So, change your return address, install a filter and ride
it out. The worm has been dying down over the last
week or so. I was getting 1-2 emails per MINUTE
at the start. Now I'm getting 1-2 per hour.....

Ken

 

[Gene Murphy]

Ken...taking your advice and just trying to see if this email post to the
group with an anonymous email. Thanks for your input.
Respectfully
Gene Murphy...hopefully with a <fake email> address this time!

 

[Ken Bessler]

Ken...taking your advice and just trying to see if this email post to the
group with an anonymous email. Thanks for your input.
Respectfully
Gene Murphy...hopefully with a <fake email> address this time!

--

That seems to work however there *is* one problem:

If you only alter the first part of the address, the worm will flood
Comcast with emails to that address. That puts a load on Comcast's
servers and generally mucks everything up.

I suggest only corrupting the server address, like this:

(e-mail address removed)

The worm will try to send mail to that address and get a DNS
error. Yahoo, in this case, will never get the mail and neither
will I.

Another suggestion - don't be too simplistic with the text you use
to munge the address - do *not* use "NOSPAM" as this is so
common that the more sophisticated harvester bots are programmed
to catch this and strip it from the address, restoring the address
to a valid state!

More info on the W32.Swen-a@mm worm can be found at



Ken

 

[Gene Murphy]

Thanks! once again Ken have taken your advice! I think this time correctly
hate to see Comcast as they are my provider get like overloaded due to me.
Respectfully
Gene Murphy

 

[Nathan Haigh]

I'm also trying your suggestion about my reply to e-mail address

Thanks for the tip, i don't know why i hadn't thought of it before!
Cheers
Nath