I know it is not coming from Microsoft. I know it is a virus. What I don't understand is why Declude is not catching it? Or how to stop it if the system is not recognizing it as a virus or spam.
How did you stop it? Thanks Samantha -----Original Message----- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 4:52 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] MS Customer Assistance SPAM Samantha, if you look at the Declude Sender header, you will see this is not from Microsoft, but rather a virus. (Or corrupt version of.) There have been some posts here and on the Virus list of filters to use to trap these. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Bridges, Samantha > Sent: Wednesday, October 08, 2003 12:55 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] MS Customer Assistance SPAM > > Here are the headers and thanks for the reply. > > Microsoft Mail Internet Headers Version 2.0 > Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org > with Microsoft SMTPSVC(5.0.2195.6713); > Wed, 8 Oct 2003 14:59:54 -0400 > Received: from SMTP32-FWD by apollo.misd.net > (SMTP32) id A01090512; Wed, 8 Oct 2003 14:56:14 -0400 > Received: from smtp3.mail.ctc.net [166.82.29.3] by apollo.misd.net > with ESMTP > (SMTPD32-8.02) id ADC2CCF70130; Wed, 08 Oct 2003 14:56:02 -0400 > Received: from tntsnq (166.82.57.38.quickclick.ctc.net [166.82.57.38]) > by smtp3.mail.ctc.net (Switch-3.1.2/Switch-3.1.0) with SMTP id > h98IuPTI002633; > Wed, 8 Oct 2003 14:56:25 -0400 (EDT) > Date: Wed, 8 Oct 2003 14:56:25 -0400 (EDT) > Message-Id: <[EMAIL PROTECTED]> > FROM: "MS Customer Assistance" > <[EMAIL PROTECTED]> > TO: "Microsoft Partner" <[EMAIL PROTECTED]> > SUBJECT: Newest Network Update > Mime-Version: 1.0 > Content-Type: multipart/mixed; boundary="yeywiqbosbr" > X-RBL-Warning: IPNOTINMX: > X-Declude-Sender: [EMAIL PROTECTED] [166.82.29.3] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) > for spam. > X-Spam-Tests-Failed: IPNOTINMX [0] > Return-Path: [EMAIL PROTECTED] > X-OriginalArrivalTime: 08 Oct 2003 18:59:54.0414 (UTC) > FILETIME=[5C149CE0:01C38DCE] > > --yeywiqbosbr > Content-Type: multipart/related; boundary="mmtmmlvuhdsnadd"; > type="multipart/alternative" > > --mmtmmlvuhdsnadd > Content-Type: multipart/alternative; boundary="mlxonrzgth" > > --mlxonrzgth > Content-Type: text/plain > Content-Transfer-Encoding: quoted-printable > > --mlxonrzgth > Content-Type: text/html > Content-Transfer-Encoding: quoted-printable > > > --mlxonrzgth-- > --mmtmmlvuhdsnadd > Content-Type: image/gif > Content-Transfer-Encoding: base64 > Content-ID: <ahdkprc> > > --mmtmmlvuhdsnadd > Content-Type: image/gif > Content-Transfer-Encoding: base64 > Content-ID: <czsmbrx> > > > --mmtmmlvuhdsnadd-- > --yeywiqbosbr > Content-Type: application/x-msdownload; name="update882.exe" > Content-Transfer-Encoding: base64 > Content-Disposition: attachment > > > --yeywiqbosbr-- > > -----Original Message----- > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 08, 2003 3:45 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] MS Customer Assistance SPAM > > > What spam from MS Customer Assistance? Can you post the headers? > > John Tolmachoff MCSE CSSA > Engineer/Consultant > eServices For You > www.eservicesforyou.com > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Bridges, Samantha > > Sent: Wednesday, October 08, 2003 12:15 PM > > To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] MS Customer Assistance SPAM > > > > Hello > > > > Any ideas how to block the spam message from MS Customer Assistance? > > I > > > keep getting it and want to stop it! Aarrrgghhh. > > > > Also, I have noticed an increase in the amount of spam getting > > through. In particular, more and more sporno (porn). Is this > > because of the spam domains being attacked by spammers? Or, why is > > more and more spam getting in? > > > > Thanks > > > > Samantha > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
