Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spam E-mail (mime Format)?


  • Please log in to reply
7 replies to this topic

#1 JJroger

JJroger

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:31 PM

Posted 24 February 2007 - 08:37 AM

Everyday when I turn on my PC there is always some spam mails normally selling pills for men. When I check the content of the mail which is an image. How can I set Outlook express to filter out this in the server and deleted it before downloading to my PC. The following is the source code as example, I have modified a bit to make it short.

---------------------------------------------------------------------------------------
Return-path: <pleeward@billgarrett.net>
Envelope-to: xxxxxxxxxxxxxxxxxx.com
Delivery-date: Sat, 24 Feb 2007 04:54:21 -0500
Received: from newtre by almira.dailydns.net with local-bsmtp (Exim 4.63)
(envelope-from <pleeward@billgarrett.net>)
id 1HKtbf-0005CU-3t
for xxxxxxxxxxxxxxxxx.com; Sat, 24 Feb 2007 04:54:21 -0500
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on almira.dailydns.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.9 required=5.0 tests=EXTRA_MPART_TYPE,HTML_MESSAGE,
RCVD_IN_XBL,UNPARSEABLE_RELAY autolearn=no version=3.1.8
Received: from [221.203.1.99] (helo=billgarrett.net)
by almira.dailydns.net with smtp (Exim 4.63)
(envelope-from <pleeward@billgarrett.net>)
id 1HKtba-0005Bq-J1
for admin@trendyfone.com; Sat, 24 Feb 2007 04:54:19 -0500
Received: from ([155.233.194.49])
by (5.27.7/5.27.7) with SMTP id A920396F80BAE8;
Sat, 24 Feb 2007 17:55:12 +0800
Message-ID: <001301c7583c$ee4834a0$0779557c@94042127c68e4f6>
From: "Irene Kaufman" <pleeward@billgarrett.net>
To: "admin" <admin@trendyfone.com>
Subject: Go so tunisia
Date: Sat, 24 Feb 2007 17:55:12 +0800
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0010_01C7583C.EE4834A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.1158

This is a multi-part message in MIME format.

------=_NextPart_000_0010_01C7583C.EE4834A0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0011_01C7583C.EE4834A0"

------=_NextPart_001_0011_01C7583C.EE4834A0
Content-Type: text/plain;
charset="windows-1252"
Content-Transfer-Encoding: quoted-printable

the seat of the Graces however, you had as good not say so while you are =
le Chevalier, or Monsieur le Commandeur de l' Ordre Teutonique. It is =
the take great care never to repeat (I do not mean here the =
pleasantries) in will be decisive, for they always stick. To keep good =
company, especially bha bha bha .......................

------=_NextPart_001_0011_01C7583C.EE4834A0--

------=_NextPart_000_0010_01C7583C.EE4834A0
Content-Type: image/gif;
name="char.gif"
Content-ID: <001301c7583c$ee4834a0$0779557c@94042127c68e4f6>
Content-Transfer-Encoding: base64

-----------------------------------------------------------------------------------------------------

Thanks for your help

J Roger

Edited by JJroger, 24 February 2007 - 08:51 AM.


BC AdBot (Login to Remove)

 


#2 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:05:31 AM

Posted 24 February 2007 - 12:17 PM

Hi JJroger,
It's near impossible to set rules in OE for this type of Spam because the subject and sender are always different.

One important thing to remember is, Do Not Open Theses E-mails.

The only thing you can do at this point is change your e-mail address.
Create two e-mail accounts,one for friends and family and one that is "disposable" for ordering things online or signing up for anything online.
If you start getting Spam in your disposable e-mail account, it's easy to change.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#3 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:08:31 AM

Posted 24 February 2007 - 07:13 PM

Additionally, set up your e-mail client to BLOCK all images. If your friends send you pictures, tell them to send them as attachments. Save them as a file separately from your e-mail, scan them like the dickens, then open them with your own picture viewing software. The reasons for this are 1) that folks can send a 1 pixel clear image in a message, and if you open it the spammer knows that you have done so even if you don't respond, click on links etc. 2) It adds a layer of protection in case your friend's computer is infected and will help keep it off your computer. Note, spam may appear to come from friends as spammers can infect others' computers or forge headers.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#4 HIPPO1023

HIPPO1023

  • Members
  • 85 posts
  • OFFLINE
  •  
  • Local time:07:31 AM

Posted 24 February 2007 - 09:19 PM

If your mail provider support automatic forwarding service, I recommend you to use "GMail."
Now, all people can obtain GMail account without invitation.
http://googleblog.blogspot.com/2007/02/fro...ail-with-3.html
"GMail's Spam filtering feature" is very excellent.

1/
Create your GMail account.
2/
Set automatic forwarding service at your mail provider from your current account to your GMail account.

More settings:

3/
To receive directly your mail from Google, you have to set your GMail account at your mail client and change your POP3 setting.

or

Create your new account at current mail provider, and then set automatic forwarding service at Gmail from GMail account to new account.
Finally you have to set your new account at your mail client.

[Note]
When you receive E-Mail, use only new account or GMail account. Never use all account which you set in your mail client.

#5 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Members
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:07:31 AM

Posted 26 February 2007 - 06:56 AM

You can set up rules to have the mail deleted from the server when downloading-this will send them into some black hole, never to be seen again. But as stated above, the sender, subject, and contents of the mail change so often it will be impossible to prevent it all from reaching your OE inbox.

To create rules, open OE. Click on TOOLS/Message Rules/Mail.

Your best best bet is to create several rules.

The first one-Where the subject line contains specific words. Look at some of the mail and see if there are certain key words that occur regularly. Check the subject line box, in box number 3 click on Contains specific words.
Enter the words, then click OK.

Box number 2, choose delete from server. Give the rule a name, click OK to apply the rule.

The second rule, do the same procedure except check Where the message body contains specific words.

Keep in mind that if any legitimate mail has any of the words in it, that mail will also be deleted.

You might want to consider creating a new folder for these messages instead of deleting them. You can check Move it to the specified folder, in box 3 choose the folder. This way you can glance at the messages and recover any that are legitimate before deleting the spam.

Now I have to ask you-are you using preview pane in OE? This should NOT be used, because when the mail is highlighted you automatically see it. The types of spam you mention contain web bugs, which "phone home" to the sender, confirming that your email address is a valid one, which opens you up to even more spam. Disable the preview pane to see only a list of mail. You can delete the spam without opening it, thus preventing it from "phoning home".

To change the view, VIEW/Layout. Uncheck Show preview pane, click OK.

If you want to block images, as suggested above, TOOL/Options/Security Tab.
Check the block images box, click Apply to save the change.

Edited by Queen-Evie, 26 February 2007 - 07:25 AM.


#6 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:01:31 PM

Posted 26 February 2007 - 07:40 AM

Question to Queen-Evie : Wouldn't a spamfilter like spamhilator solkve these issues?

#7 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Members
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:07:31 AM

Posted 26 February 2007 - 07:45 AM

It would probably help, but I've never used a spam filter other than what my ISP provides.
And it's so good that I don't receive a lot of spam, maybe 1 every 2 or 3 months.

#8 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:01:31 PM

Posted 26 February 2007 - 07:48 AM

You could try Spamhilator in that case. It is free!!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users