"Here's your attachment" ......

\"Here\'s your attachment\" ......

I have had at least 15 emails in the last 3 days,
that have the message, "Here's your attachment", Document Attached", "The documents you requested", or some crap to that effect.

Two of which, has came from Sasha !!!! /ubbthreads/images/graemlins/ooo.gif
Yes, thats right, our very own Sasha.

Yep, Viruses, Worms, data miners, every last one. /ubbthreads/images/graemlins/jpshakehead.gif

Anyone else having these lately?

I wasnt having a problem with spam at all, till the last couple weeks,
My 2 hotmail, and my NEW webhost email has them comming. /ubbthreads/images/graemlins/jpshakehead.gif *******s

-John

Re: \"Here\'s your attachment\" ......

John... I addressed this problem in THIS THREAD a month ago.

Re: \"Here\'s your attachment\" ......

is called email spoofing. Likely the ones supposedly from Sasha are actually from somebody that has Sasha in their address book. I hope you did not open those attachments!

Re: \"Here\'s your attachment\" ......

Anyone who opens any of the following attachments could be trapped in the wrong century:

asp, bat, chm, cmd, com, ebs, eml, exe, hta, htr, ida, its, js, jse, mht, msg, msi, msp, oft, pif, pl, plg, reg, scr, shs, src, vbe, vbs, whs, wsf, wsh

All emails with attachments with these extensions are filtered to my TRASH, where they find great company with my HTML email.

Re: \"Here\'s your attachment\" ......

That is TOO bad.
Now if I get an email from Sasha I will be afraid to open it. I might have been afraid anyway. /ubbthreads/images/graemlins/grinser2.gif

Jerry

Re: \"Here\'s your attachment\" ......

That doesn't excite me nearly as much as suspect email that comes from ME. I get bounce notifications that my email couldn't be delivered - when I never sent the mail in the first place, of course

Something has got to happen about SPAM Something needs to happen NOW!

Re: \"Here\'s your attachment\" ......

Sasha, I know about the thread you mentioned, I just wanted to see what others thought here, and if they were any diff.

Darell, Yep, we have alot of those at work. Boss gets them all the time, saying that his email couldnt get threw,

... and no,,, I dont ever open the attachments. /ubbthreads/images/graemlins/rolleyes.gif








I just forward them to unsuspecting CPF members.



>>> Roth /ubbthreads/images/graemlins/wink.gif

Re: \"Here\'s your attachment\" ......

John... I just didn't want anyone to think that you were accusing me of sending worms/viruses/nasties to CPF members. Your original post was a little vague in that area.

Re: \"Here\'s your attachment\" ......

I got a terrible email from Me. It was pornographic, and I was afraid it might have gone out to everyone in my address book.

My ISP told me that it probably wasn't to anyone but me, and I guess it wasn't or someone would have told me.
So now I have myself blocked from my email.

I am using Mailwasher Pro, and in conjuction with my ISP and its spam filter, I do not get any to my PC.

Jerry

Re: \"Here\'s your attachment\" ......

Sasha,
Oh sorry. /ubbthreads/images/graemlins/blush.gif

No this was NOT Sashas doing, just wanted everyone to know, just cuz you know the person its from , doesnt mean its safe.

That is a major change in the way viruses are passed on email now.
Before, if you knew the person, chances are, you were ok.

Not the case anymore. /ubbthreads/images/graemlins/frown.gif

Sorry for the confusion.

-John

Re: \"Here\'s your attachment\" ......

I came back from a two week holiday recently, to find about 400 e-mails waiting for me, of which nearly 300 were spam and around 50 were carrying viruses of one kind or another. I knew it was going to happen and got all the AV updates going before I collected the mail.

Something has to be done and given the lack of any effective action by those who are supposed to be protecting us, here are a few suggestions...

The Spamhaus Project is an organisation which, " tracks the Internet's Spammers, Spam Gangs and Spam Services, provides dependable realtime anti-spam protection for Internet networks, and works with Law Enforcement to identify and pursue spammers worldwide.". They carry a very large database of virtually all known spammers, their addresses, e-mail addresses and business contact details, along with much good advice on how to protect ourselves against their vile activities. I am currently copying many of the e-mail addresses listed into a .doc file. When I'm finished, I'm going to paste them into a page on my personal website, so that when the spambots next crawl over it they will pick up some "proper" addresses to spam.

I'm also contemplating creating a CGI bin for my personal site and installing Cliff's SpamBot Killer Script (available free from this page and others), in it. When it is trawled by the spambots, it generates a couple of thousand fake, but realistic looking e-mail addresses, all of which will bounce back on the spammers /ubbthreads/images/graemlins/hahaha.gif

One program I've seen recommended in CPF is Mailwasher, which examines messages on your e-mail server before you download them, allowing you to filter spam before it hits your hard drive. I'm going to check out the free version after Easter, along with Spamfire, which takes a different, more "proactive" approach in dealing with spammer scum and includes the highly amusing Web Bugs feature.

If you think that's a bit harsh, check out the following quote from Ms. Alyxsandra Sachs, a real life spammer, listed by Spamhaus, along with her partner in spam, Mr. Albert Ahdoot...

"These antispammers should get a life. Do their fingers hurt too much from pressing the delete key? How much time does that really take from their day?"

Makes you /ubbthreads/images/graemlins/mad.gif /ubbthreads/images/graemlins/mad.gif /ubbthreads/images/graemlins/mad.gif, doesn't it ?

Re: \"Here\'s your attachment\" ......

i have been getting 4 or more per day for the past month.

my antivirus has caught each one, but it is becoming annoying.

i think a bunch of people i know have been infected, and i am in their address book.

Bob

Re: \"Here\'s your attachment\" ......

It's particularly important to keep your AV defences regularly updated right now. Symantec have gone on the record, saying that they believe a massive virus attack is coming and that many thousands of computers have already been infiltrated by trojans, waiting to be triggered on the "big day", although they don't know exactly when that will be or precisely what form the attack will take.

Bearing this in mind and following my recently described keylogger problems, not to mention the fact that I run an e-commerce site, I am definitely planning to switch to Linux in the near future. It may not have all the "little luxuries" of Windoze, but it's a lot more stable and virus proof.

Re: \"Here\'s your attachment\" ......

Just in case, for outlook express users, there's a little trick for alerting you if a virus has sent out emails from your address book by sending it directly back to you.
In OE's address book create this email contact:
email address: <illegaladdress
in the First (name) field type: *virus
in the Display field type: *virus-trap

Re: \"Here\'s your attachment\" ......

My mother in law just switched from dial up to cable and now spend all her time in online games. She has started forwarding all the joke/chain letter mails like all noobs do and cc's me and my wife. Now I'm starting to get viruses so I know one of her new "friends" is sending them, started on a new mail address that I don't give out much and right after she started cc'ing me on all the stuff. Now I'm going to have to change my mail again /ubbthreads/images/graemlins/smile.gif

Re: \"Here\'s your attachment\" ......

As I stated earlier, Mailwasher is a great program, and simple.

I am glad that my ISP has installed a spam filter, and that has reduced my spam to my Mailwasher at least 75 per day, and maybe more.

I have also received the "Undeliverable" message several times and at least once today, but I eliminate it with Mailwasher, and it does not come to my computer.

Jerry

Re: \"Here\'s your attachment\" ......

[ QUOTE ]
lightnix said:
...


I'm also contemplating creating a CGI bin for my personal site and installing Cliff's SpamBot Killer Script (available free from this page and others), in it. When it is trawled by the spambots, it generates a couple of thousand fake, but realistic looking e-mail addresses, all of which will bounce back on the spammers /ubbthreads/images/graemlins/hahaha.gif


...


[/ QUOTE ]

You do have to realize that pretty much ALL spammers use computers that have been compromised in some way to send their spam out. So the spam you see will never directly come from the spammers themselves. They will never see the e-mail bounce back to them because they never use a valid FROM: or REPLY-TO: header in the emails. The compromised computers will just keep spitting out email after email after email... Unless that program generates domains that are truely non-functional then you will only be causing headaches for those domains that DO exist and who then start getting email bounced back to them as undelieverable.

With all those millions of spams out there with invalid/fake From/Reply-To headers and mail servers set to bounce back undelieverable messages.. it only causes mail servers to become even more overloaded with crud that people will have to deal with.

Just my $.000002

Re: \"Here\'s your attachment\" ......

Almost everyone has this kind of experience these days. What I do is I use this great mail client called The Bat .
It alowes me to see the message when it is stil on the mail server. If I smell something suspicious I just delete it on server without downloading it to my computer.

Re: \"Here\'s your attachment\" ......

Is it just me, or do you think the punishment for spamming should be to be painted red, white and blue and dropped off in downtown Fallujah, Iraq. Those that survive to make it to the outskirts of the city and protection of the Marines will be considered to have their debt to society paid. /ubbthreads/images/graemlins/grin.gif

Re: \"Here\'s your attachment\" ......

I am using Earthlink's Total Access and their Webmail feature. The messages stay on the server if the sender is not in my address book or the domain hasn't passed my permission. Then there is this cute little button marked "this is spam" that sends the offending email to Earthlink's databse. If enough people send it to them, they block the offender however that works. They already block about 90 spams per day to my account and I get about 30 or more all day long.

That this is spam button sure makes me feel good even if it doesn't do anything but delete the junk.