Re: [Declude.JunkMail] WAY OT: command line for killing a win2k process
www.sysinternals.com : look for pskill it's a free utility. Erminio Sharyn Schmidt schreef: Hi, I'm going to take a minute to pick at all the incredibly knowledgable brains here. I need to create a batch file for killing a process remotely on a win2k terminal server. Anyone know what the syntax is off the top of their heads? Correct me if I'm wrong, but I believe net stop can only be used on services, this is acutally a process that can be seen from task manager. Thanks! Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AutoWhiteList
R. Scott Perry wrote: Can we use @domain.com in our webmail adress book to whitelist all mail from specific domain ? No, IMail won't allow that, but you can add "[EMAIL PROTECTED]". The "all@" indicates that every E-mail address at the domain should be whitelisted. That is not completely true: I have the entry "Declude Mailinglisten" <@declude.com> in my aliases.txt and it works. But I had to put it there by hand. Erminio --- [This E-mail has been scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Is this unique?
Nick Hayer wrote: On 25 Aug 2004 at 15:18, E. Ballerini wrote: Hi Erminio - I saw this explanation on a google search - my question is are the id's unique to this mac client eg ok to filter on? Thanks -Nick Hayer As I understand it, the combination x-mac-type="4A504547"; x-mac-creator="4A565752" means nothing more than that a Mac e-mail client has send an email with a .jpg picture to you. Maybe you can make a filter for it and give it just enough points to tip the balance? (Assuming it has other spam behaviour) Erminio --- [This E-mail has been scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Is this unique?
Nick Hayer wrote:
Scott -
We are getting a lot of spam with this text in the email:
x-mac-type="4A504547"; x-mac-creator="4A565752"
Question - can I filter on this or is this a common MAC string?
These are file attachments that have come from a Mac email client,
probably Outlook Express.
The mac doesn't use file extensions to determine the type of a file (for
example a JPEG), instead it uses a type ID and a creator ID which are
part of the files info (including the created date, modified date,
etc). The ID's a are 32 bit longs and are normally ASCII coded for
readability. In your case all the creator ID's are 4A565752, which is
'JVWR' and if memory serves that is the code for "JPEG Viewer" a
shareware image viewer, and the file types are 47494666 ('GIFf') and
4A504547 ('JPEG'), which makes sense as all the file names say .gif and .jpg
Erminio
---
[This E-mail has been scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
Re: [Declude.JunkMail] sober.h stopped?
Guhl, Markus (LDS) wrote: hi, i did not catch or get any sober.h-messages for the last 3 days. is somebody still catching this spam/virus-hybrid monster? if not, why? is there any information about a deadline in this thing? as fare as i understand the sober.h-thing there was the virus sober.g that fetched the spamsending virus sober.h for the computers that it had infected. when sober.h was on a computer it shut down sober.g. now i don't see sober.h anymore. could that mean, that there is some sober.i ready to start? It's nearly dead: Declude test results -- dec0701.log POLIT-COMBO 40 POLIT-CONTENT 46 POLIT-QMAIL 61 POLIT-UMLAUT 24 And this is indeed going on for a few days now. Erminio --- [This E-mail has been scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] COMBO-Filter solution for todays german polite emails
Bonno Bloksma wrote: Hi, We are Dutch, based in the Netherlands and we have a .nl domain name. So it's at least more then just .de domains that get spammed. It looks like these mails are news reports which are sent to various addresses. Same here: Dutch based and .nl domain. Erminio
