RE: [Declude.JunkMail] Excel files in zip files spreading

2007-07-28 Thread Todd Richards
Yeah, I started seeing these today too. Anyone have anything set up to catch them? Todd _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Saturday, July 28, 2007 11:59 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Excel files

RE: [Declude.JunkMail] Excel files in zip files spreading

2007-07-28 Thread John T \(lists\)
Yes, I see that now. What caught me off guard was the blank subject line this time, as before the subject line contained the name of the file. Thanks. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Saturday, July 28, 2007 9:46 AM To: declude.junkmail@declud

Re: [Declude.JunkMail] Excel files in zip files spreading

2007-07-28 Thread Matt
John, It's just another one of the viruses from the Storm botnet. Same guys as the ones sending fake greeting card viruses and PDF stock spam among other things. Matt John T (lists) wrote: I am not sure what is the purpose yet, but I am catching a lot of emails this morning with a blan

[Declude.JunkMail] Excel files in zip files spreading

2007-07-28 Thread John T \(lists\)
I am not sure what is the purpose yet, but I am catching a lot of emails this morning with a blank subject, Thunderbird in the header, attached zip file and the zip file contains an single xls file. THESE ARE NOT LEGIT EMAILS. Any body else seeing this and know what they are, virus or spam?

RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

2007-07-28 Thread Scott Fisher
I'll give it a try. Here's what I will use/ DNSWL-FINANCIAL-NONEdnsbl %IP4R%.list.dnswl.org 127.0.2.0 0 0 DNSWL-FINANCIAL-LOW dnsbl %IP4R%.list.dnswl.org 127.0.2.1 0 0 DNSWL-FINANCIAL-MEDIUM dnsbl %IP4R%.list.dnswl.org 127.0.2.2

RE: [Declude.JunkMail] whitelisting/negative weights with DNSWL.org

2007-07-28 Thread Scott Fisher
Ewww. Look at all the return codes! I'd be interested in seeing some rates. Does it hit enough to work? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, July 27, 2007 6:42 PM To: declude.junkmail@declude.com Subject: [Declude.Jun