SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Wed, 24 Sep 2003 08:20:27 PDT7
From:	Peter Skye <pskye@peterskye.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Rejected messages that I never sent

Content Type: text/plain

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

> Maybe your ISP has stripped the virus
> from the email and removed too much.
>
> I get a few messages without any text in the
> body every month and they appear to be a
> spam run that the spammer screwed up.

The spammer may not have "screwed up". Look at the email source. Often
there is a hidden attachment, and my understanding is that with certain
settings on some Windows email programs these things will run
automatically.

The Swen virus contains "Content-Type: multipart/mixed" attachments. I
just checked a bunch of these bouncebacks and each one has the original
message encoded (base64 I think) as a hidden attachment, probably
because that's the easiest way for the SMTP server to bounce it when it
is multipart/mixed.

I got 62 of these things between 10pm last night and 8am this morning.
At 155K each they filled my 10MB mailbox.

- Peter

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 24 | September | 2003 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.