Re: It's driving me crazy!

• Previous message: Richard Mueller: "Re: W32.Swen mutating?"
• In reply to: David H. Lipman: "Re: It's driving me crazy!"
• Next in thread: Jason Wade: "Re: It's driving me crazy!"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Thu, 30 Oct 2003 21:21:09 -0800

I fear the next virus will be worse.

My mail provider (was Ameritech, then SBC, now Yahoo) has
a spam blocking feature, but it places the messages in
a "bulk" folder in my account. This just fills up and
causes me to exceed the 25MB limit on the server. When I
used it briefly, it let many viruses and spam through.
Most of what it caught were Swen infected messages. It was
more difficult for me to delete the messages in
their "bulk" folder than in my Inbox.

Richard
>-----Original Message-----
>Just think -- It'll get much worse before things get
better.
>
>Verizon, my ISP, uses BrightMail SpamDetector. It
luckily has the ability to provide
>options such as message "rules" and being able to delete
files that the SpamDetector finds
>to be spam.
>
>Do you have the option to dump spam automatically ?
>
>Dave
>
>
>"Richard Mueller" <rlmueller-nospam@ameritech.net> wrote
in message
>news:043b01c39e82$b0966810$a601280a@phx.gbl...
>| I need to stay connected to the Internet all day, every
>| day, to keep from exceeding the limit on my email
account
>| on the SBC server. During peak periods, I exceed my 25MB
>| limit in 4 hours. When this happens the account is
>| disabled and all subsequent mail is lost, with no
>| notifications. If I use a spam blocker, the mail is
placed
>| in a folder on the server, which fills up fast, causing
my
>| account to be disabled. When I tried the spam blocker
>| briefly, it let many spam and virus messages through.
Most
>| of the messages blocked where Swen related, but this
>| feature caused my limit to be exceeded.
>|
>| When I complained, they claimed that they do scan for
>| viruses, but so far they have missed about 26,000 of
mine.
>| After much discussion, I think what they mean is that if
>| my mail stays on their server long enough, a scan might
>| recognize it. Of course, I can't risk leaving my mail on
>| the server, so that feature is of no use.
>|
>| I have started getting a few Yahoo messages lately
saying
>| they have blocked a virus infected message. My guess is
>| that sometimes their scan sees mail in my account. Of
>| course, these messages themselves are similar to virus
>| hoax messages, spam, or infected messages. I have to
deal
>| with them, and they are actually more difficult to
filter
>| since the virus signature is usually removed. I would
need
>| to code a signature for each ISP that blocks messages to
>| me. The variety of such messages I've seen is large.
>|
>| In the last few days I've started to get Swen related
>| messages that my scanning program does not recognize,
but
>| that cause my Outlook to freeze when I try to preview
>| them. I had to code a VBScript program to read the
>| messages. They turn out to be notices that an infected
>| message has been blocked. They appear to be from an ISP
in
>| Japan. It looks like the virus code is still there (code
>| that attempts to use the iframe file download exploit),
>| but the worm attachment is stripped off. Either the
>| exploit code hangs Outlook, or the crazy characters in
the
>| message, or Outlook is attempting to download foreign
>| fonts and fails because I'm not connected to the
Internet.
>| Whatever, it is troubling because Outlook hangs
everytime
>| I touch one of these things and I have to restart the
app.
>| It also scares me and I spend more time scanning for
>| viruses. I may have to add a signature to my program to
>| handle these.
>|
>| What a development - I'm forced to code my own programs
to
>| deal with virus related messages. A complete waste.
>|
>| Richard
>| Microsoft MVP Scripting and ADSI
>| >-----Original Message-----
>| >In article <4BB22D6F-1023-478A-B764-
>| 23BAE1B22EFE@microsoft.com>, rlmueller-
>| >nospam@ameritech.net says...
>| >> Only my ISP can stop the flood, but they refuse.
>| >
>| >Have you seen any options at the web mail site, yet? I
>| thought a Prodigy SC
>| >posted that SBCY users were going to get the same
options
>| that Yahoo!
>| >Premium customers get, but I have seen no sign of AV
>| options. Two other new
>| >options, though; an improved SpamGuard and something
>| called, "AddressGuard",
>| >which allows for the creation of up to 200 email
>| addresses, all based on an
>| >identity different from your Ameritech ID (or my
PacBell
>| ID).
>| >
>| >--
>| >Norman
>| >~Win dain a lotica, En vai tu ri, Si lo ta
>| >~Fin dein a loluca, En dragu a sei lain
>| >~Vi fa-ru les shutai am, En riga-lint
>| >.
>| >
>
>
>.
>

• Previous message: Richard Mueller: "Re: W32.Swen mutating?"
• In reply to: David H. Lipman: "Re: It's driving me crazy!"
• Next in thread: Jason Wade: "Re: It's driving me crazy!"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]