Where is all the .exe coming from and how do I stop it? I am getting
hundreds a day. They all go to the deleted folder using the Junk mail filter
but the Junk mail filter also transfers most of my good mail also. The junk
filter is of little use because it is poorly designed and does not work
properly.
--
Richard A Radke
Thanks & Have A Nice Day!
rich@thenewway.com
thenewway.com

Re: Where is all the .exe coming from? by Lawrence

Lawrence
Mon Sep 22 17:47:23 CDT 2003

In article <BB94C4BD.1CF1%rich@thenewway.com>,
Richard Radke <rich@thenewway.com> wrote:

> Where is all the .exe coming from and how do I stop it? I am getting
> hundreds a day. They all go to the deleted folder using the Junk mail filter
> but the Junk mail filter also transfers most of my good mail also. The junk
> filter is of little use because it is poorly designed and does not work
> properly.

This is the Swen worm making the rounds. You are not alone. I'm getting
about 50/hr. Nothing to do but wait it out and delete the stuff.

Re: Where is all the .exe coming from? by Richard

Richard
Mon Sep 22 19:30:52 CDT 2003

On 9/22/03 5:24 PM, in article BB94C4BD.1CF1%rich@thenewway.com, "Richard
Radke" <rich@thenewway.com> wrote:

> Where is all the .exe coming from and how do I stop it?

I kown where they are coming from but don't know how to stop them.

dick

MS Inet Mail Delivery Service <webrobot@netmail.com>
Internet Security Center <twadubueh_pwwsy@newsletters.com>
Microsoft Internet Security Center <zuogxbkdvj@news.com>
MS Corporation Technical Services <gsrobfofqneggj_nujq@updates.net>
MS Public Bulletin <czfxlv_uqdwien@advisor.com>
Microsoft Corporation Security Assistance
<zkogdanzauqwpa-ratv@newsletters.net>
Technical Bulletin <ghwmwn@newsletters.ms.net>
Net Email System <webrobot@rocketmail.net>
<vmitngruxuz@news_microsoft.com>
Microsoft Security Center <yybblxx@newsletters_microsoft.com>
microsoft inet mail storage service <mailerprogram@yahoo.com>
Inet Mail System <xmailprogram@puremail.net>
Microsoft <vmitngruxuz@news_microsoft.com>
inet mail storage service <omailroutine@yahoo.com>
Microsoft <rjvhfl_qejsq@advisor.com>
inet mail storage service <omailroutine@yahoo.com>
MS Corporation Public Bulletin <ufnuqo-ufwhgmn@advisor.msn.com>
Public Bulletin <qxagqwukkgf@updates.ms.com>
Customer Support <cyhrdzc_zordbup@newsletters.com>
Microsoft Network Security Division <cjfldq-mfvzyj@news.net>
MS Corporation Security Division <xplzescqb@support.microsoft.net>
MS Corporation Program Security Division
<fzwirqvwd-lnkxdctx@confidence.ms.com>
MS Corporation Public Support <wmkteuwpk@ktfz.com>
MS Corporation Technical Assistance <ioukqly@newsletters.com>
Network Security Section <vaoepwj_wptrgs@newsletters_msdn.net>
MS Network Security Division <lhyraobibfjvic@bulletin_msn.com>
Microsoft <tkegwdzxv_vond@confidence.com>
Public Services <lwejjxyhkyhhl-luqr@lb.redirect.msnbc.com>
Public Services <srqymyjx@news.com>
Internet Security Section <mgcniybqdj@bulletin.msn.net>
Microsoft Internet Service <emailform@freemail.com>
MS Network Security Division <nkjmbnztggld_wzed@bulletin.com>
Microsoft Technical Services <gadvfhazyi@technet.microsoft.com>
Microsoft Internet Mail Storage System <masterrobot@yahoo.net>
Microsoft Corporation Consumer <consumer-rglcxevvns@support.msn.net>
MS Technical Support <zadfyjibflezyel@support_ms.net>
Microsoft Corporation Technical Support <yqrghxkd@updates.com>
MS Public Services <opktwtalsmzk@technet.ms.com>
Commercial Customer <plebj_xhfuhm@newsletters_ms.com>
Internet Security Section
MS Security Center <cxzzah_hveimmv@newsletters.net>
Microsoft Net Message Service <smtprobot@netmail.net>
MS Program Security Center <pexieuqqtahqxg-yvgfnpzq@confidence.ms.com>
Microsoft Corporation Public Services <cawoqdgap@support.ms.com>
Network Security Center <bfaqupw@news.com>
MS Internet Security Center <qkozecnyksknob-tlaocki@bulletin.com>
Security Services <dcybsqsr@news.com>
Microsoft Corporation Public Services
<vrdjhdeadjgfbem@technet_microsoft.com>
Microsoft Customer Assistance <sfgbfgucltj_xnyqc@tmlp.ms.com>
MS Corporation Security Support <yoxgbfcqhwp@oqnyc.com>
Security Assistance <nxafhq@confidence.msdn.com>
MS Corporation Internet Security Division <maccjecxqjeonx@news.com>
Microsoft <bqjjaixzhuhhma@bulletin.ms.net>
MS Corporation Technical Bulletin <dyzgwkxejxmgxyy-yacaau@newsletters.net>
MS Corporation Public Support <tqbqxz@technet.msdn.net>
Microsoft <pmgpiqvuve-hjqbwdcd@newsletters.msn.net>
Microsoft Program Security Center <uoeosgzeupputcj@bulletin.net>
MS Internet Security Division <tlqxnv@confidence.com>
MS Corporation Security Division <htxpgpunqdvo_jjrb@advisor.net>
MS Corporation Network Security Department
oiihewygj@advisor_microsoft.com
etgdmhu@news.net
partner_koxkisdz@news.com>
Microsoft Public Support <xekmopnclxkz-kbnsyqbz@newsletters.net>
MS Program Security Center <psaltbedvqbarss@newsletters.net>
MS Public Support <okvhzgwmsce_tcdy@support.msn.com>
MS Corporation Public Assistance <wvagxzhcqgeob_oppzn@confidence.msn.com>
MS Corporation Security Division <htxpgpunqdvo_jjrb@advisor.net>
Microsoft Technical Services <wyyods@hauz.com>
vmvfraywamg-fuqb@support.com
wsxuqpniwhg_kefg@updates.com
piutncxvbhgofo@newsletters.microsoft.net
bcvmbpnwsztvog-hkkcovva@newsletters.microsoft.net
roxuwmrz-tvjtam@updates.microsoft.com


Re: Where is all the .exe coming from? by Keith

Keith
Tue Sep 23 10:41:56 CDT 2003

No, you do not know where they are coming from by the indications below. All
the listed emails are spoofed (not real).

The best you can find in most cases is the IP address the email came from.
You must read though the 'Received:' lines in the header to trace it back.
Sometime there is an 'X-Originating-IP: [206.47.199.10]" line. This is
usually the correct address, and you can try to block it, preferably at your
ISP.

Keith Esau
kaesau@nospam.sbcglobal.net

On 09-22-2003 7:30 PM, in article BB94FE6C.175D0%kriss@gbronline.com,
"Richard Kriss" <kriss@gbronline.com> wrote:

> On 9/22/03 5:24 PM, in article BB94C4BD.1CF1%rich@thenewway.com, "Richard
> Radke" <rich@thenewway.com> wrote:
>
>> Where is all the .exe coming from and how do I stop it?
>
> I kown where they are coming from but don't know how to stop them.
>
> dick
>
> MS Inet Mail Delivery Service <webrobot@netmail.com>
> Internet Security Center <twadubueh_pwwsy@newsletters.com>
> Microsoft Internet Security Center <zuogxbkdvj@news.com>
> MS Corporation Technical Services <gsrobfofqneggj_nujq@updates.net>
> MS Public Bulletin <czfxlv_uqdwien@advisor.com>
> Microsoft Corporation Security Assistance
> <zkogdanzauqwpa-ratv@newsletters.net>
> Technical Bulletin <ghwmwn@newsletters.ms.net>
> Net Email System <webrobot@rocketmail.net>
> <vmitngruxuz@news_microsoft.com>
> Microsoft Security Center <yybblxx@newsletters_microsoft.com>
> microsoft inet mail storage service <mailerprogram@yahoo.com>
> Inet Mail System <xmailprogram@puremail.net>
> Microsoft <vmitngruxuz@news_microsoft.com>
> inet mail storage service <omailroutine@yahoo.com>
> Microsoft <rjvhfl_qejsq@advisor.com>
> inet mail storage service <omailroutine@yahoo.com>
> MS Corporation Public Bulletin <ufnuqo-ufwhgmn@advisor.msn.com>
> Public Bulletin <qxagqwukkgf@updates.ms.com>
> Customer Support <cyhrdzc_zordbup@newsletters.com>
> Microsoft Network Security Division <cjfldq-mfvzyj@news.net>
> MS Corporation Security Division <xplzescqb@support.microsoft.net>
> MS Corporation Program Security Division
> <fzwirqvwd-lnkxdctx@confidence.ms.com>
> MS Corporation Public Support <wmkteuwpk@ktfz.com>
> MS Corporation Technical Assistance <ioukqly@newsletters.com>
> Network Security Section <vaoepwj_wptrgs@newsletters_msdn.net>
> MS Network Security Division <lhyraobibfjvic@bulletin_msn.com>
> Microsoft <tkegwdzxv_vond@confidence.com>
> Public Services <lwejjxyhkyhhl-luqr@lb.redirect.msnbc.com>
> Public Services <srqymyjx@news.com>
> Internet Security Section <mgcniybqdj@bulletin.msn.net>
> Microsoft Internet Service <emailform@freemail.com>
> MS Network Security Division <nkjmbnztggld_wzed@bulletin.com>
> Microsoft Technical Services <gadvfhazyi@technet.microsoft.com>
> Microsoft Internet Mail Storage System <masterrobot@yahoo.net>
> Microsoft Corporation Consumer <consumer-rglcxevvns@support.msn.net>
> MS Technical Support <zadfyjibflezyel@support_ms.net>
> Microsoft Corporation Technical Support <yqrghxkd@updates.com>
> MS Public Services <opktwtalsmzk@technet.ms.com>
> Commercial Customer <plebj_xhfuhm@newsletters_ms.com>
> Internet Security Section
> MS Security Center <cxzzah_hveimmv@newsletters.net>
> Microsoft Net Message Service <smtprobot@netmail.net>
> MS Program Security Center <pexieuqqtahqxg-yvgfnpzq@confidence.ms.com>
> Microsoft Corporation Public Services <cawoqdgap@support.ms.com>
> Network Security Center <bfaqupw@news.com>
> MS Internet Security Center <qkozecnyksknob-tlaocki@bulletin.com>
> Security Services <dcybsqsr@news.com>
> Microsoft Corporation Public Services
> <vrdjhdeadjgfbem@technet_microsoft.com>
> Microsoft Customer Assistance <sfgbfgucltj_xnyqc@tmlp.ms.com>
> MS Corporation Security Support <yoxgbfcqhwp@oqnyc.com>
> Security Assistance <nxafhq@confidence.msdn.com>
> MS Corporation Internet Security Division <maccjecxqjeonx@news.com>
> Microsoft <bqjjaixzhuhhma@bulletin.ms.net>
> MS Corporation Technical Bulletin <dyzgwkxejxmgxyy-yacaau@newsletters.net>
> MS Corporation Public Support <tqbqxz@technet.msdn.net>
> Microsoft <pmgpiqvuve-hjqbwdcd@newsletters.msn.net>
> Microsoft Program Security Center <uoeosgzeupputcj@bulletin.net>
> MS Internet Security Division <tlqxnv@confidence.com>
> MS Corporation Security Division <htxpgpunqdvo_jjrb@advisor.net>
> MS Corporation Network Security Department
> oiihewygj@advisor_microsoft.com
> etgdmhu@news.net
> partner_koxkisdz@news.com>
> Microsoft Public Support <xekmopnclxkz-kbnsyqbz@newsletters.net>
> MS Program Security Center <psaltbedvqbarss@newsletters.net>
> MS Public Support <okvhzgwmsce_tcdy@support.msn.com>
> MS Corporation Public Assistance <wvagxzhcqgeob_oppzn@confidence.msn.com>
> MS Corporation Security Division <htxpgpunqdvo_jjrb@advisor.net>
> Microsoft Technical Services <wyyods@hauz.com>
> vmvfraywamg-fuqb@support.com
> wsxuqpniwhg_kefg@updates.com
> piutncxvbhgofo@newsletters.microsoft.net
> bcvmbpnwsztvog-hkkcovva@newsletters.microsoft.net
> roxuwmrz-tvjtam@updates.microsoft.com


Re: Where is all the .exe coming from? by Keith

Keith
Tue Sep 23 10:50:39 CDT 2003

On 09-22-2003 5:24 PM, in article BB94C4BD.1CF1%rich@thenewway.com, "Richard
Radke" <rich@thenewway.com> wrote:

> Where is all the .exe coming from and how do I stop it? I am getting
> hundreds a day. They all go to the deleted folder using the Junk mail filter
> but the Junk mail filter also transfers most of my good mail also. The junk
> filter is of little use because it is poorly designed and does not work
> properly.

I added a Rule (Tools menu) to remove all emails containing attachments that
have a name ending in ANY of the following: .exe, .bat, .scr, .pif, or .com.
It seems to be working. No one should be sending any files ending in these,
especially to a Mac user. Anyone who sends a good executable should zip it
first.

However, there is no action under the rules to delete it from the server (I
leave it on the server for 2 days so my laptop can sync). Does someone have
an AppleScript that can do this?

Keith Esau
kaesau@nospam.sbcglobal.net


Re: Where is all the .exe coming from? by Melba's

Melba's
Wed Sep 24 09:23:47 CDT 2003

In article <lkrupp-4FA4A6.17484922092003@newssvr26.news.prodigy.com>,
Lawrence Krupp <lkrupp@ameritech.net> wrote:

> In article <BB94C4BD.1CF1%rich@thenewway.com>,
> Richard Radke <rich@thenewway.com> wrote:
>
> > Where is all the .exe coming from and how do I stop it? I am
> > getting hundreds a day. They all go to the deleted folder using the
> > Junk mail filter but the Junk mail filter also transfers most of my
> > good mail also. The junk filter is of little use because it is
> > poorly designed and does not work properly.

> This is the Swen worm making the rounds. You are not alone. I'm getting
> about 50/hr. Nothing to do but wait it out and delete the stuff.

Surely there is something that my ISP (Earthlink) can do to stop it on
their end, before it ever gets to my account with them. I've got their
Spamblocker set to its fussiest level but all that does is put it in a
Suspect Mail folder that counts towards my 10MB storage limit on my
account and in order to not generate any 'undeliverable' messages to
legitimate correspondents, I need to keep emptying that Suspect Mail
folder. And please accept my apology if this isn't the right place to
bitch about this. (OS 9.1, Entourage 2000)
--
-Barb,
I've got a bunch of Pillsbury Classic Cookbooks
(paperbacks) that I want to get rid of. Interested?

Re: Where is all the .exe coming from? Why not PCs.? by Richard

Richard
Wed Oct 01 17:00:46 CDT 2003

They are coming from our PC friends. For for the two weeks I have been
receiving 70-100 every day.

I give computer lessons, troubleshoot hardware and software on Macs and PCs.
About 90% of my business is on Windows based computers. Not one of the last
15 PC customers are getting the .exe attachments.

The only way to fix the problem is wait until they stop.

On 9/22/03 3:47 PM, in article
lkrupp-4FA4A6.17484922092003@newssvr26.news.prodigy.com, "Lawrence Krupp"
<lkrupp@ameritech.net> wrote:

> In article <BB94C4BD.1CF1%rich@thenewway.com>,
> Richard Radke <rich@thenewway.com> wrote:
>
>> Where is all the .exe coming from and how do I stop it? I am getting
>> hundreds a day. They all go to the deleted folder using the Junk mail filter
>> but the Junk mail filter also transfers most of my good mail also. The junk
>> filter is of little use because it is poorly designed and does not work
>> properly.
>
> This is the Swen worm making the rounds. You are not alone. I'm getting
> about 50/hr. Nothing to do but wait it out and delete the stuff.

--
Richard A Radke
Thanks & Have A Nice Day!
rich@thenewway.com
thenewway.com



Re: Where is all the .exe coming from? Why not PCs? by Sam

Sam
Tue Oct 14 08:56:38 CDT 2003

In the meantime, I've created a rule that automatically deletes any message
from a sender not in my address book that contains an attachment with the
following extensions: .exe, .bat, .ini, etc.

Still, I hate getting the 30-40 phony Microsoft e-mails I receive every day.

-Sam

On 10/1/03 6:00 PM, in article BBA09C9E.21EC%rich@thenewway.com, "Richard
Radke" <rich@thenewway.com> wrote:

> They are coming from our PC friends. For for the two weeks I have been
> receiving 70-100 every day.
>
> I give computer lessons, troubleshoot hardware and software on Macs and PCs.
> About 90% of my business is on Windows based computers. Not one of the last
> 15 PC customers are getting the .exe attachments.
>
> The only way to fix the problem is wait until they stop.
>
> On 9/22/03 3:47 PM, in article
> lkrupp-4FA4A6.17484922092003@newssvr26.news.prodigy.com, "Lawrence Krupp"
> <lkrupp@ameritech.net> wrote:
>
>> In article <BB94C4BD.1CF1%rich@thenewway.com>,
>> Richard Radke <rich@thenewway.com> wrote:
>>
>>> Where is all the .exe coming from and how do I stop it? I am getting
>>> hundreds a day. They all go to the deleted folder using the Junk mail filter
>>> but the Junk mail filter also transfers most of my good mail also. The junk
>>> filter is of little use because it is poorly designed and does not work
>>> properly.
>>
>> This is the Swen worm making the rounds. You are not alone. I'm getting
>> about 50/hr. Nothing to do but wait it out and delete the stuff.