Re: Spam & Junk email - what to do?

[salfter@salfter.dyndns.org (Scott Alfter)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In article <IMOcnc8cMNoVo_aiU-KYvg@comcast.com>,
Bill Garber <willy46pa@comcast.net> wrote:
>"Scott Alfter" <salfter@salfter.dyndns.org> wrote in message
>news:cAGab.65883$nf3.50719@fed1read07...
>> It's the latest Microsoft worm to make the rounds, and this one's more of
>> a nuisance than usual...previous worms just tried to compromise
>> webservers, but this one is clogging people's inboxes like nobody's
>> business.  It's bad enough on broadband, but at ~140K each, it must
>> really suck to be on dialup right now.
>
>Apparently, everyone is getting the same worm in varying sizes. Mine
>is 106 kb and ALL are the same size, but with different names and from
>different sources.

106K is the actual size of the worm.  When encoded (uuencode or base64) for
sending through email, it increases in size to 140K...that's how much
traffic is generated for each copy you get.  There are also some of what
appear to be bounce messages that carry a malicious file that's maybe 1K or
so (probably just a script instead of an .exe).

At this point, I've had nearly 1700 copies of this nastiness mailed to
me...and that's just in the past 24 hours.  My qmail filter scripts have
bounced about 30% of them (a few hundred had already arrived before the
scripts were in place, but they seem to be catching most of them now).

  _/_   Scott Alfter
 / v \  salfter@salfter.dyndns.org
(IIGS(  http://alfter.us            Top-posting!
 \_^_/  pkill -9 /bin/laden         >What is the most annoying thing on Usenet?

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/a2HLVgTKos01OwkRAsW0AKCoA9KowOM/sXkkvLdu5nq/rSXrbgCeMJs0
0uOZk8wb3aETbZcFCMRC3D8=
=xpMX
-----END PGP SIGNATURE-----