Re: How Do I Stop Swen Emails?
From: Phil Weldon (notdisclosed_at_example.com)
Date: 03/07/04
- Next message: Bruce Chambers: "Re: Pop Ups - suddenly have become a Blizzard"
- Previous message: Andrew Z Carpenter [MVP:Windows:Security]: "Information on confirmed hoaxes - 07MAR04"
- In reply to: Tedd Riggs: "Re: How Do I Stop Swen Emails?"
- Next in thread: Veronica Loell: "Re: How Do I Stop Swen Emails?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 07 Mar 2004 14:04:48 GMT
The originating IP addresses on swen mail are valid. The originating email
address is one harvested from the infected system's storage or from Usenet
newsgroup postings. If the infected system (like most) has a dynamic IP
address, newly assigned for each session, only the ISP can associate the
dynamicly assigned IP address with a particular customer. So far, the
originating IP address can't be forged, though spammers using zombied
systems taken over to spew spam have no relation at all to the originating
IP address.
-- Phil Weldon, pweldonatmindjumpdotcom For communication, replace "at" with the 'at sign' replace "mindjump" with "mindspring." replace "dot" with "." "Tedd Riggs" <T_Riggs@msn.cöm> wrote in message news:eFcvX7DBEHA.628@TK2MSFTNGP10.phx.gbl... > Sounds good to me, but according to the Anti-Virus and Spam blocker > companies, 80% of the IP address's are forged and will not help you out. > Some of them are not if the spammer is a amateur, but not so many of those > around anymore. > The SamSpade link you gave of course is a great tool. I use that one all the > time. > > -- > Tedd Riggs > PDA Square Content Developer > www.pdasquare.com > Redmond, WA > > > > "Veronica Loell" <lista@nakawe.se> wrote in message > news:%23XNhV6BBEHA.580@TK2MSFTNGP11.phx.gbl... > > Dan wrote / skrev: > > > >> I posted to usenet(using a munged email) and the bugger sniffed out my > >> real > >> email and started sending me emails with W32.Swen.A@MM. I used the email > >> danplace23@itwassobadsoihadtokillit.com and the thing sniffed out my real > >> email. > >> > >> Any help on how to get stop these emails from coming in? > >> > >> Bye, Dan > >> > >> > > > > I keep posting with unmunged address here and I only get about 25 of > > them per day, so not that bad. The one thing you can do is report them > > to the originating IP-address owners. Here's what you do: > > > > How to report Virus-SPAM > > > > 1. Go to > > http://spam.abuse.net/userhelp/howtocomplain.shtml > > for help on locating the originating IP-adress > > 2a. Go to > > http://www.abuse.net/lookup.phtml > > for looking up the abuse-adress. > > 2b. An alternative to 2a. is to get the tool SamSpade > > (http://www.samspade.org) and use it to do abuse.net lookups and > > whois-lookups if there is no abuse.net-adress. There are of course many > > such tools, > > SamSpade is just one free tool that I happen to use. > > > > Remember to > > - 1. always include full headers (like you normally > > would with spam-report) > > - 2. always include a link to information about > > the virus in question with your complaint/information-letter > > - 3. never include the virus itself > > > > Not every ISP or company will take it seriously, but some actually do. > > If you spend a little time reporting just a couple you will probably > > help cure at least one computer somewhere. > > > > ---------------------------------------------------- > > >
- Next message: Bruce Chambers: "Re: Pop Ups - suddenly have become a Blizzard"
- Previous message: Andrew Z Carpenter [MVP:Windows:Security]: "Information on confirmed hoaxes - 07MAR04"
- In reply to: Tedd Riggs: "Re: How Do I Stop Swen Emails?"
- Next in thread: Veronica Loell: "Re: How Do I Stop Swen Emails?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
