Where is all the .exe coming from?

R

Richard Radke

Where is all the .exe coming from and how do I stop it? I am getting
hundreds a day. They all go to the deleted folder using the Junk mail filter
but the Junk mail filter also transfers most of my good mail also. The junk
filter is of little use because it is poorly designed and does not work
properly.
 
R

Richard Kriss

Where is all the .exe coming from and how do I stop it?
Click to expand...

I kown where they are coming from but don't know how to stop them.

dick

MS Inet Mail Delivery Service <[email protected]>
Internet Security Center <[email protected]>
Microsoft Internet Security Center <[email protected]>
MS Corporation Technical Services <[email protected]>
MS Public Bulletin <[email protected]>
Microsoft Corporation Security Assistance
<[email protected]>
Technical Bulletin <[email protected]>
Net Email System <[email protected]>
<vmitngruxuz@news_microsoft.com>
Microsoft Security Center <yybblxx@newsletters_microsoft.com>
microsoft inet mail storage service <[email protected]>
Inet Mail System <[email protected]>
Microsoft <vmitngruxuz@news_microsoft.com>
inet mail storage service <[email protected]>
Microsoft <[email protected]>
inet mail storage service <[email protected]>
MS Corporation Public Bulletin <[email protected]>
Public Bulletin <[email protected]>
Customer Support <[email protected]>
Microsoft Network Security Division <[email protected]>
MS Corporation Security Division <[email protected]>
MS Corporation Program Security Division
<[email protected]>
MS Corporation Public Support <[email protected]>
MS Corporation Technical Assistance <[email protected]>
Network Security Section <vaoepwj_wptrgs@newsletters_msdn.net>
MS Network Security Division <lhyraobibfjvic@bulletin_msn.com>
Microsoft <[email protected]>
Public Services <[email protected]>
Public Services <[email protected]>
Internet Security Section <[email protected]>
Microsoft Internet Service <[email protected]>
MS Network Security Division <[email protected]>
Microsoft Technical Services <[email protected]>
Microsoft Internet Mail Storage System <[email protected]>
Microsoft Corporation Consumer <[email protected]>
MS Technical Support <zadfyjibflezyel@support_ms.net>
Microsoft Corporation Technical Support <[email protected]>
MS Public Services <[email protected]>
Commercial Customer <plebj_xhfuhm@newsletters_ms.com>
Internet Security Section
MS Security Center <[email protected]>
Microsoft Net Message Service <[email protected]>
MS Program Security Center <[email protected]>
Microsoft Corporation Public Services <[email protected]>
Network Security Center <[email protected]>
MS Internet Security Center <[email protected]>
Security Services <[email protected]>
Microsoft Corporation Public Services
<vrdjhdeadjgfbem@technet_microsoft.com>
Microsoft Customer Assistance <[email protected]>
MS Corporation Security Support <[email protected]>
Security Assistance <[email protected]>
MS Corporation Internet Security Division <[email protected]>
Microsoft <[email protected]>
MS Corporation Technical Bulletin <[email protected]>
MS Corporation Public Support <[email protected]>
Microsoft <[email protected]>
Microsoft Program Security Center <[email protected]>
MS Internet Security Division <[email protected]>
MS Corporation Security Division <[email protected]>
MS Corporation Network Security Department
oiihewygj@advisor_microsoft.com
[email protected]
[email protected]>
Microsoft Public Support <[email protected]>
MS Program Security Center <[email protected]>
MS Public Support <[email protected]>
MS Corporation Public Assistance <[email protected]>
MS Corporation Security Division <[email protected]>
Microsoft Technical Services <[email protected]>
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
 
K

Keith Esau

No, you do not know where they are coming from by the indications below. All
the listed emails are spoofed (not real).

The best you can find in most cases is the IP address the email came from.
You must read though the 'Received:' lines in the header to trace it back.
Sometime there is an 'X-Originating-IP: [206.47.199.10]" line. This is
usually the correct address, and you can try to block it, preferably at your
ISP.

Keith Esau
[email protected]
 
K

Keith Esau

Where is all the .exe coming from and how do I stop it? I am getting
hundreds a day. They all go to the deleted folder using the Junk mail filter
but the Junk mail filter also transfers most of my good mail also. The junk
filter is of little use because it is poorly designed and does not work
properly.
Click to expand...

I added a Rule (Tools menu) to remove all emails containing attachments that
have a name ending in ANY of the following: .exe, .bat, .scr, .pif, or .com.
It seems to be working. No one should be sending any files ending in these,
especially to a Mac user. Anyone who sends a good executable should zip it
first.

However, there is no action under the rules to delete it from the server (I
leave it on the server for 2 days so my laptop can sync). Does someone have
an AppleScript that can do this?

Keith Esau
[email protected]
 
M

Melba's Jammin'

This is the Swen worm making the rounds. You are not alone. I'm getting
about 50/hr. Nothing to do but wait it out and delete the stuff.
Click to expand...

Surely there is something that my ISP (Earthlink) can do to stop it on
their end, before it ever gets to my account with them. I've got their
Spamblocker set to its fussiest level but all that does is put it in a
Suspect Mail folder that counts towards my 10MB storage limit on my
account and in order to not generate any 'undeliverable' messages to
legitimate correspondents, I need to keep emptying that Suspect Mail
folder. And please accept my apology if this isn't the right place to
bitch about this. (OS 9.1, Entourage 2000)
 
R

Richard Radke

They are coming from our PC friends. For for the two weeks I have been
receiving 70-100 every day.

I give computer lessons, troubleshoot hardware and software on Macs and PCs.
About 90% of my business is on Windows based computers. Not one of the last
15 PC customers are getting the .exe attachments.

The only way to fix the problem is wait until they stop.
 
S

Sam Elowitch

In the meantime, I've created a rule that automatically deletes any message
from a sender not in my address book that contains an attachment with the
following extensions: .exe, .bat, .ini, etc.

Still, I hate getting the 30-40 phony Microsoft e-mails I receive every day.

-Sam
 
Top