BleepingComputer.com: Spam E-mail (mime Format)?

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Spam E-mail (mime Format)?

#1 User is offline   JJroger 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 12-February 07

Posted 24 February 2007 - 08:37 AM

Everyday when I turn on my PC there is always some spam mails normally selling pills for men. When I check the content of the mail which is an image. How can I set Outlook express to filter out this in the server and deleted it before downloading to my PC. The following is the source code as example, I have modified a bit to make it short.

---------------------------------------------------------------------------------------
Return-path: <pleeward@billgarrett.net>
Envelope-to: xxxxxxxxxxxxxxxxxx.com
Delivery-date: Sat, 24 Feb 2007 04:54:21 -0500
Received: from newtre by almira.dailydns.net with local-bsmtp (Exim 4.63)
(envelope-from <pleeward@billgarrett.net>)
id 1HKtbf-0005CU-3t
for xxxxxxxxxxxxxxxxx.com; Sat, 24 Feb 2007 04:54:21 -0500
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on almira.dailydns.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.9 required=5.0 tests=EXTRA_MPART_TYPE,HTML_MESSAGE,
RCVD_IN_XBL,UNPARSEABLE_RELAY autolearn=no version=3.1.8
Received: from [221.203.1.99] (helo=billgarrett.net)
by almira.dailydns.net with smtp (Exim 4.63)
(envelope-from <pleeward@billgarrett.net>)
id 1HKtba-0005Bq-J1
for admin@trendyfone.com; Sat, 24 Feb 2007 04:54:19 -0500
Received: from ([155.233.194.49])
by (5.27.7/5.27.7) with SMTP id A920396F80BAE8;
Sat, 24 Feb 2007 17:55:12 +0800
Message-ID: <001301c7583c$ee4834a0$0779557c@94042127c68e4f6>
From: "Irene Kaufman" <pleeward@billgarrett.net>
To: "admin" <admin@trendyfone.com>
Subject: Go so tunisia
Date: Sat, 24 Feb 2007 17:55:12 +0800
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0010_01C7583C.EE4834A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.1158

This is a multi-part message in MIME format.

------=_NextPart_000_0010_01C7583C.EE4834A0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0011_01C7583C.EE4834A0"

------=_NextPart_001_0011_01C7583C.EE4834A0
Content-Type: text/plain;
charset="windows-1252"
Content-Transfer-Encoding: quoted-printable

the seat of the Graces however, you had as good not say so while you are =
le Chevalier, or Monsieur le Commandeur de l' Ordre Teutonique. It is =
the take great care never to repeat (I do not mean here the =
pleasantries) in will be decisive, for they always stick. To keep good =
company, especially bha bha bha .......................

------=_NextPart_001_0011_01C7583C.EE4834A0--

------=_NextPart_000_0010_01C7583C.EE4834A0
Content-Type: image/gif;
name="char.gif"
Content-ID: <001301c7583c$ee4834a0$0779557c@94042127c68e4f6>
Content-Transfer-Encoding: base64

-----------------------------------------------------------------------------------------------------

Thanks for your help

J Roger

This post has been edited by JJroger: 24 February 2007 - 08:51 AM


#2 User is offline   TMacK 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 4,672
  • Joined: 18-March 06
  • Gender:Male
  • Location:B.C. Canada

Posted 24 February 2007 - 12:17 PM

Hi JJroger,
It's near impossible to set rules in OE for this type of Spam because the subject and sender are always different.

One important thing to remember is, Do Not Open Theses E-mails.

The only thing you can do at this point is change your e-mail address.
Create two e-mail accounts,one for friends and family and one that is "disposable" for ordering things online or signing up for anything online.
If you start getting Spam in your disposable e-mail account, it's easy to change.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#3 User is offline   Orange Blossom 

  • OBleepin Investigator
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 29,827
  • Joined: 14-July 06
  • Gender:Not Telling
  • Location:Bloomington, IN

Posted 24 February 2007 - 07:13 PM

Additionally, set up your e-mail client to BLOCK all images. If your friends send you pictures, tell them to send them as attachments. Save them as a file separately from your e-mail, scan them like the dickens, then open them with your own picture viewing software. The reasons for this are 1) that folks can send a 1 pixel clear image in a message, and if you open it the spammer knows that you have done so even if you don't respond, click on links etc. 2) It adds a layer of protection in case your friend's computer is infected and will help keep it off your computer. Note, spam may appear to come from friends as spammers can infect others' computers or forge headers.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom
An ounce of prevention is worth a pound of cure
SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#4 User is offline   HIPPO1023 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 84
  • Joined: 19-February 07

Posted 24 February 2007 - 09:19 PM

If your mail provider support automatic forwarding service, I recommend you to use "GMail."
Now, all people can obtain GMail account without invitation.
http://googleblog.blogspot.com/2007/02/fro...ail-with-3.html
"GMail's Spam filtering feature" is very excellent.

1/
Create your GMail account.
2/
Set automatic forwarding service at your mail provider from your current account to your GMail account.

More settings:

3/
To receive directly your mail from Google, you have to set your GMail account at your mail client and change your POP3 setting.

or

Create your new account at current mail provider, and then set automatic forwarding service at Gmail from GMail account to new account.
Finally you have to set your new account at your mail client.

[Note]
When you receive E-Mail, use only new account or GMail account. Never use all account which you set in your mail client.

#5 User is offline   Queen-Evie 

  • Official Bleepin' Bama Belle
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 4,564
  • Joined: 24-February 07
  • Gender:Not Telling
  • Location:Tuscaloosa, Alabama

Posted 26 February 2007 - 06:56 AM

You can set up rules to have the mail deleted from the server when downloading-this will send them into some black hole, never to be seen again. But as stated above, the sender, subject, and contents of the mail change so often it will be impossible to prevent it all from reaching your OE inbox.

To create rules, open OE. Click on TOOLS/Message Rules/Mail.

Your best best bet is to create several rules.

The first one-Where the subject line contains specific words. Look at some of the mail and see if there are certain key words that occur regularly. Check the subject line box, in box number 3 click on Contains specific words.
Enter the words, then click OK.

Box number 2, choose delete from server. Give the rule a name, click OK to apply the rule.

The second rule, do the same procedure except check Where the message body contains specific words.

Keep in mind that if any legitimate mail has any of the words in it, that mail will also be deleted.

You might want to consider creating a new folder for these messages instead of deleting them. You can check Move it to the specified folder, in box 3 choose the folder. This way you can glance at the messages and recover any that are legitimate before deleting the spam.

Now I have to ask you-are you using preview pane in OE? This should NOT be used, because when the mail is highlighted you automatically see it. The types of spam you mention contain web bugs, which "phone home" to the sender, confirming that your email address is a valid one, which opens you up to even more spam. Disable the preview pane to see only a list of mail. You can delete the spam without opening it, thus preventing it from "phoning home".

To change the view, VIEW/Layout. Uncheck Show preview pane, click OK.

If you want to block images, as suggested above, TOOL/Options/Security Tab.
Check the block images box, click Apply to save the change.

This post has been edited by Queen-Evie: 26 February 2007 - 07:25 AM


#6 User is offline   fozzie 

  • aut viam inveniam aut faciam
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 3,516
  • Joined: 14-November 06
  • Gender:Male
  • Location:Ossendrecht/The Netherlands

Posted 26 February 2007 - 07:40 AM

Question to Queen-Evie : Wouldn't a spamfilter like spamhilator solkve these issues?
Posted Image
Free antivirus : AVG Free Free Anti-spyware AVG Anti Spyware
Free Firewall :Zone Alarm Ccleaner Ad aware & Manual
SpybotS&D&Manual Free Handy programs

#7 User is offline   Queen-Evie 

  • Official Bleepin' Bama Belle
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 4,564
  • Joined: 24-February 07
  • Gender:Not Telling
  • Location:Tuscaloosa, Alabama

Posted 26 February 2007 - 07:45 AM

It would probably help, but I've never used a spam filter other than what my ISP provides.
And it's so good that I don't receive a lot of spam, maybe 1 every 2 or 3 months.

#8 User is offline   fozzie 

  • aut viam inveniam aut faciam
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 3,516
  • Joined: 14-November 06
  • Gender:Male
  • Location:Ossendrecht/The Netherlands

Posted 26 February 2007 - 07:48 AM

You could try Spamhilator in that case. It is free!!
Posted Image
Free antivirus : AVG Free Free Anti-spyware AVG Anti Spyware
Free Firewall :Zone Alarm Ccleaner Ad aware & Manual
SpybotS&D&Manual Free Handy programs

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users