Help me please

  • Thread starter Thread starter Rookie
  • Start date Start date
R

Rookie

some idiot sends me 100 e-mails a day infected with w32-Swen-A@mm Norton quarantines them all but it is a real pain to to have to go thouhgt the the quarantine process every time what can i do to stop the emails? or is it possible to get them auto quarantine the attachments.
 
some idiot sends me 100 e-mails a day infected with w32-Swen-A@mm Norton
quarantines them all but it is a real pain to to have to go thouhgt the the
quarantine process every time what can i do to stop the emails? or is it
possible to get them auto quarantine the attachments.


Reply: 1) Don't post to news groups in HTML. 2) What do you mean by "auto
quarantine" ? If NAV does quarantine them, what you're talking about is
"auto deleting" them. That's convenient in the case Swen, but what if it
were an attachment that wasn't really malacious?
 
Rookie said:
some idiot sends me 100 e-mails a day infected with w32-Swen-A@mm
Click to expand...

Someone needs to learn how to format a Usenet message ...
Norton quarantines them all but it is a real pain to to have to go thouhgt the the quarantine process every time what can i do to stop the emails? or is it possible to get them auto quarantine the attachments.
Click to expand...

Get MailWasher (available for 30 days free trial) and set the following filter:

If the Body contains "<iframe src=3D"" or "TITLE=3D"Microsoft Home Site"
target=3D"_top">Microsoft</A>" or "this is the latest version of security
update" then mark the message as mail to be deleted.

It will let remove the affected e-mail from the server, without downloading
them.

Regards, Zvi
 
[...]
some idiot sends me
Click to expand...

HTML posts?

And please, try posting with a subject line more descriptive to the
nature of your cry for help.

I haven't yet configured my newsreader to 'ignore' posts with subject
lines such as "help", "help me", "please help" et al, but i'm working on
it!
 
Zvi said:
Someone needs to learn how to format a Usenet message ...


Get MailWasher (available for 30 days free trial) and set the
following filter:

If the Body contains "<iframe src=3D"" or "TITLE=3D"Microsoft Home
Site" target=3D"_top">Microsoft</A>" or "this is the latest version
of security update" then mark the message as mail to be deleted.

It will let remove the affected e-mail from the server, without
downloading them.
Click to expand...
Hi zvi.

Thanks for that. For the uninitiated amongst us could you explain the
syntax of the above?

TIA
 
Paul Brewer said:
Hi zvi.

Thanks for that. For the uninitiated amongst us could you explain the
syntax of the above?
Click to expand...

When in MailWasher, open Tools, then Filters. 'Add' a new filter, name it
whatever you like (Swen?), tick 'mark for delete' and set the following rules,
all of the type 'The body', 'contains', and then one of the following strings:

<iframe src=3D"
TITLE=3D"Microsoft Home Site" target=3D"_top">Microsoft</A>
this is the latest version of security update

Click the button "Apply this filter when any rule below is satisfied" and make
the filter active by checking its box.

Note that the first rule, the one with the iframe thing, also kills a great deal
of other than Swen messages, like from Klez, Yaha, etc.

Cheers, Zvi
 
Hello,
Is it just as good to use a mail rule in Outlook Express 6
to block anything in the FROM line
such as Microsoft or Postmaster and so on?


Another thing if I may ask is....should I make the rule to delete from
server
or not download from server...I'm a newbie to computers and am not sure of
the
distinction between the two options?

Many thanks for reading this.

Brian

Zvi Netiv said:
Someone needs to learn how to format a Usenet message ...
Click to expand...
thouhgt the the quarantine process every time what can i do to stop the
emails? or is it possible to get them auto quarantine the attachments.
 
In Message-ID:<[email protected]> posted on
Note that the first rule, the one with the iframe thing, also kills a great deal
of other than Swen messages, like from Klez, Yaha, etc.
Click to expand...

Another rule that works well is;
If the Body contains "HTML"
then mark the message as mail to be deleted.
Gets a high percentage of routine spam too.

Then there's the blank field filter;
If the To field doesn't contain the RegExpr "."
or the From field doesn't contain the RegExpr "."
or the Subject field doesn't contain the RegExpr "."
then mark the message as mail to be deleted.
 
certsnsearches said:
Hello,
Is it just as good to use a mail rule in Outlook Express 6
to block anything in the FROM line
such as Microsoft or Postmaster and so on?


Another thing if I may ask is....should I make the rule to delete from
server
or not download from server...I'm a newbie to computers and am not sure of
the
distinction between the two options?

Many thanks for reading this.
Click to expand...

Brian......in OE 6 you will be forever adding words for the FROM line.

Use the rule (3rd down I believe) for the "body" of the message.....and
put 4 things in there.......

1. this is the latest version of security update
2. Cumulative patch
3. undeliverable
4. undelivered

Nos. 1 and 2 are from the MS Swen patch email........3 & 4 are from the
bounced one that says it was 'undeliverable'......

That is all you need to stop them. I don't bother trying to delete from
the server, etc.......frankly, I don't think it will work as the email
has to be downloaded first before the Message Rule can be applied.

In the second box of the Message Rule, tick off 3
things......Delete.....Mark as Read.......Stop Processing More Rules. I
won't explain the last one.....just do it.....ok??

Good luck......and Zvi's explanation was excellent and I will put those
phrases in Mailwasher.

Thanks, Zvi.....Heather
 
certsnsearches said:
Hello,
Is it just as good to use a mail rule in Outlook Express 6
to block anything in the FROM line
such as Microsoft or Postmaster and so on?
Click to expand...

Swen infected messages, and especially Swen bounces, can't be filtered
effectively on base of the content of the FROM field. Worse, you will be losing
benign e-mail messages, possibly important too, if you play that game.
Another thing if I may ask is....should I make the rule to delete from server
or not download from server...I'm a newbie to computers and am not sure of the
distinction between the two options?
Click to expand...

In Swen's case, "delete from server", definitely. You risk exceeding your mail
account's quota if just "not downloading".

Regards, Zvi
 
Many thanks Heather and Zvi.

Brian



Heather said:
Brian......in OE 6 you will be forever adding words for the FROM line.

Use the rule (3rd down I believe) for the "body" of the message.....and
put 4 things in there.......

1. this is the latest version of security update
2. Cumulative patch
3. undeliverable
4. undelivered

Nos. 1 and 2 are from the MS Swen patch email........3 & 4 are from the
bounced one that says it was 'undeliverable'......

That is all you need to stop them. I don't bother trying to delete from
the server, etc.......frankly, I don't think it will work as the email
has to be downloaded first before the Message Rule can be applied.

In the second box of the Message Rule, tick off 3
things......Delete.....Mark as Read.......Stop Processing More Rules. I
won't explain the last one.....just do it.....ok??

Good luck......and Zvi's explanation was excellent and I will put those
phrases in Mailwasher.

Thanks, Zvi.....Heather
Click to expand...
 
Back
Top