Searching \ for '[ADMIN:] Is my email being posted somwhere?' in subject line. ()
Make payments with PayPal - it's fast, free and secure! Help us get a faster server
FAQ page: www.piclist.com/techref/index.htm?key=
Search entire site for: '[ADMIN:] Is my email being posted somwhere?'.

Exact match. Not showing close matches.
PICList Thread
'[ADMIN:] Is my email being posted somwhere?'
2004\06\09@235505 by Matthew Brush

flavicon
face
It seems like ever since I signed up for the PIClist my email has been overrun with spam.  Is my email address being posted somewhere?  I only use this account for the PIClist so I can't figure out how else these spammers would be getting it?  I supose it could just be a coincidence, but I suspect it's being harvested from the archive or something?

Also, does anyone have any good ideas for how to get my revenge on these spammers?  I'd like to do something like people do with fax machines where they fax a reply to spam faxes with a completely black page to soak up the spammers ink.  Most of the spam I'm getting on this account contains attachments which I'm certain contain some bug or another.  I would love to somehow get my vengeance!!!

Thanks, Peace

MJ Brush

--
http://www.piclist.com hint: To leave the PICList
spam_OUTpiclist-unsubscribe-requestTakeThisOuTspammitvma.mit.edu

2004\06\09@235713 by Shawn Wilton

flavicon
face
Well, if this account is really only used for the piclist, then do
something simple and blacklist everything but this email address.

Easy.


Shawn Wilton
Junior in CpE
MicroBiologist

Phone: (503) 881-2707
Email: .....shawnKILLspamspam@spam@black9.net

http://black9.net


Matthew Brush wrote:
{Quote hidden}

--
http://www.piclist.com hint: To leave the PICList
.....piclist-unsubscribe-requestKILLspamspam.....mitvma.mit.edu

2004\06\10@001553 by Shawn Wilton

flavicon
face
I also noticed that you use a Yahoo account, and so you should be made
aware that all yahoo accounts are publicly visible, and they've been
known to sell addresses.  If you really want a secure email address, try
hushmail, or perhaps someone with a personal domain.


Shawn Wilton
Junior in CpE
MicroBiologist

Phone: (503) 881-2707
Email: EraseMEshawnspam_OUTspamTakeThisOuTblack9.net

http://black9.net

Shawn Wilton wrote:
{Quote hidden}

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@004650 by Ben Hencke

flavicon
face
I have recently received 3 infected emails on this piclist email
address, perhaps they are related to your problems? I think a virus is
hopping around this piclist perhaps? I never get any spam though. I
would second that Yahoo addresses get spam for no obvious reason.

RemoveMEjisakTakeThisOuTspamnetcourrier.com
spamBeGone200406021313.46822.digitalspamBeGonespamjoescat.com
TakeThisOuTbobsmith5EraseMEspamspam_OUTverizon.net

Have all sent me emails with virus attachments and lame one line
messages like "please confirm the message".

Are these people subscribed to piclist?

Anyone else getting messages from these emails?

- Ben

On Jun 9, 2004, at 8:54 PM, Matthew Brush wrote:

{Quote hidden}

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@011422 by PicDude

flavicon
face
I also use this email specifically for piclist use, and occassionally get emails directly from PIClisters.  Usually, piclist email has been very spam free, but I've noticed that lately I've received some spam as well.  My guess is that someone on this list has a virus that has mined my email address.

Cheers,
-Neil.



On Wednesday 09 June 2004 10:54 pm, Matthew Brush scribbled:
{Quote hidden}

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@013955 by Don Taylor

flavicon
face
The Risks mailing list had an item recently about a company claiming to be
introducing offensive measures against net attacks.  Some, perhaps many,
are concerned about the consequences of such a product.  The company:

http://www.symbiot.com/

But I haven't dug through their stuff enough to really tell what they are
planning to offer or whether this is something an individual or a small
mailing list could afford to buy.

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@022738 by Russell McMahon

face
flavicon
face
> The Risks mailing list had an item recently about a company claiming to be
> introducing offensive measures

It seems to work for Microsoft :-)

       RM

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@044829 by Howard Winter

face
flavicon
picon face
On Wed, 9 Jun 2004 21:46:52 -0700, Ben Hencke wrote:

> Anyone else getting messages from these emails?

Most recent viruses (and almost all spammers) spoof the address they came from, so you can't conclude that the
apparent sender is the culprit.

Somewhere there is a virus or spammer that has harvested and is using my email address, because I'm now
getting a lot of "failed delivery" messages, saying that a particular message couldn't be delivered for some
reason, and it's certainly not a message that I've sent!

I have to assume that some spam/virus-laden messages *are* getting through, that seem to come from me!  And
there is nothing I can do about it, apart from abandoning an email address I've been using for ten years...

It's a shame the law seems to be so weak on this, and rarely stops anyone (Sasser being a recent exception to
this - an 18-year-old german was arrested for writing it).

Cheers,

Howard Winter
St.Albans, England.

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@045452 by Jose Da Silva

flavicon
face
On June 9, 2004 08:54 pm, Matthew Brush wrote:
>It seems like ever since I signed up for the PIClist my email has been
> overrun with spam.

I have to agree with this too, except for the PIClist and another 2 places,
I have to say this account has been free since before I started posting to
the PIClist, this virus stuff only started recently.

I deleted the 1st couple so i don't know if they are from the same place,
but the last 2 I notice comes from Brazil.
I believe... perhaps anyone running a windows machine on the PIClist who
lives or posts from Brazil may want to check their computer for viruses.

The last 2 had header information:
(200-153-182-17.dsl.telesp.net.br [200.153.182.17])

Hopefully this helps whoever realize they may have an infected machine  ;-)

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@104732 by ColinC

flavicon
face
>Somewhere there is a virus or spammer that has harvested and is using my email address, because I'm now
>getting a lot of "failed delivery" messages, saying that a particular message couldn't be delivered for some
>reason, and it's certainly not a message that I've sent!
>
I got some of these "failed delivery" messages too, with a link to click
on to see the message.  I kind of assumed that *that* was a virus, and
left it alone.  I must have clicked on something I shouldn't have,
though, since yesterday I noticed I had several directories loaded up
with "Britney" and "Eminen" exe files.

Colin

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@124751 by Dwayne Reid

flavicon
face
At 08:46 AM 6/10/2004, ColinC wrote:
>I got some of these "failed delivery" messages too, with a link to click
>on to see the message.  I kind of assumed that *that* was a virus, and
>left it alone.  I must have clicked on something I shouldn't have,
>though, since yesterday I noticed I had several directories loaded up
>with "Britney" and "Eminen" exe files.

Better head over to Symantec and download the Netsky removal tool they
offer.  I recently had to deal with a machine that my nephew had caused to
be infected - same thing there - he clicked on one of those failed delivery
messages.  He noticed the problem only after the hard drive filled up with
those various .exe files - all with different file names but the same length.

dwayne

--
Dwayne Reid   <dwaynerEraseMEspam.....planet.eon.net>
Trinity Electronics Systems Ltd    Edmonton, AB, CANADA
(780) 489-3199 voice          (780) 487-6397 fax

Celebrating 20 years of Engineering Innovation (1984 - 2004)
 .-.   .-.   .-.   .-.   .-.   .-.   .-.   .-.   .-.   .-
    `-'   `-'   `-'   `-'   `-'   `-'   `-'   `-'   `-'
Do NOT send unsolicited commercial email to this email address.
This message neither grants consent to receive unsolicited
commercial email nor is intended to solicit commercial email.

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@131241 by Roland

flavicon
face
At 09:08 AM 10/06/2004 -0600, you wrote:
>At 08:46 AM 6/10/2004, ColinC wrote:
>>I got some of these "failed delivery" messages too, with a link to click
>>on to see the message.  I kind of assumed that *that* was a virus, and
>>left it alone.  I must have clicked on something I shouldn't have,
>>though, since yesterday I noticed I had several directories loaded up
>>with "Britney" and "Eminen" exe files.
>Do NOT send unsolicited commercial email to this email address.
>This message neither grants consent to receive unsolicited
>commercial email nor is intended to solicit commercial email.
>

or look at grisoft.com, free, with updates;

Regards
Roland Jollivet

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\10@135850 by Matthew Brush

flavicon
face
I get those fake Failed Messages things all the time, though I NEVER open
attachments under any circumstances unless I've talked to the sender and am
expecting an attachment.

I think that a large group of people should get together and pool their
bandwidth and shut down these spammers/worm spreaders one by one just like
they do to companies and whatnot (ie. DOS attacks).  There must be some
offensive means by which people can pay back the spammers.  I've been
racking my brain on this a lot lately and the only way I came up with being
able to stop spam completely, is to make a web page with a mail script and a
special hidden address, and then people who wish to email me would be
required to go to my page and fill in the web-based email form.  That way, I
can tell Outlook to only allow email from the one addres but no one would go
for that (especially not people on the PIClist :)

I was under the impression that the USA has anti-spam laws?  Don't they also
have a task force?  My telemarketing and spam have been double since the US
made the no-Call list and the spam thing.  I guess the spammers decided to
maintain their quotas by calling/emailing more people in Canada?

I guess I'll have to live with the spam, it's not like it doesn't stick out
like a sore thumb in my inbox, just a little more deleting.

Anyway, thanks for the replies.  Peace

MJ Brush

{Original Message removed}

2004\06\10@173337 by Heinz Czychun

flavicon
face
Hi,

       If it's an infected host, and you have the actual IP address,
then I found this worked for me, to stop the emails. This worked with
three different ISPs, Cogeco, Earthlink and RoadRunner, YMMV.

       Here is the email I sent to RoadRunner abuse service
(EraseMEabusespamrr.com). I got the email address from the host info tool. The
emails stopped within about 5 days.....

Since Feb. 03/04 02:19:48  EST, I've received in excess of 30 emails,
with various user and domain names but with a consistent  host name,
and ip address of

       cpe-66-75-178-186.socal.rr.com [66.75.178.186]

Included in those, were emails from mail daemons about failed email
deliveries with my own account name as the return address. I would
like your help in stopping these unsolicited emails from the
indicated host in your network.

       To help resolve this problem I have included two pieces of
information. One is the information I received from the Host Info
Tool at http://www.cyberwarmachine.com/hitool/, (which includes a
traceroute output) and the other is a dump of the received emails.
<actually the email headers only>

       From my research, and some of the replys, especially from the
mail daemons, I assume this host is infected by the Mydoom virus.

       Thank you, in advance, for your time, in looking into this matter.




       Included of course were the afore mentioned pieces of information.

       I'm not sure if this would work against spammers, but at
least if court action were taken against the ISPs, they would not be
able to say they didn't know about it.

Hope this helps,
Heinz



{Quote hidden}

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

2004\06\11@022657 by Peter L. Peres

picon face
>I get those fake Failed Messages things all the time, though I NEVER open
>attachments under any circumstances unless I've talked to the sender and
>am expecting an attachment.

Do not take them lightly, they can get you blacklisted by misconfigured
blacklists and graylists. Then your legitimate mail will start to bounce.
Guess how I know this ?

>I think that a large group of people should get together and pool their
>bandwidth and shut down these spammers/worm spreaders one by one just
>like they do to companies and whatnot (ie. DOS attacks).  There must be
>some offensive means by which people can pay back the spammers.

I think there is a misspelling in 'shut' above. The way to stop spam is to
bury the SMTP protocol, with due honors, somewhere deep and dark and come
up with something that cannot be faked so easily in the header sector at
least. The idea that anyone can write whatever one wants in the headers of
an email he/she sends is a license to fraud, and is used as such
copiously by spammers, viruses etc. No legitimate email user would ever
fake the envelope, assuming he wants an answer. At most he'd leave it
blank.

Peter

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics

2004\06\11@105038 by James Newton, Host

face picon face
Any public list is going to get mined. All a spammer has to do is subscribe,
lurk, and collect addresses. We have done everything we can to prevent them
from ripping addresses from other sources such as the archive, etc... But
there is no real way to stop it from ever happening.

If you only use this email address to get piclist email, set up a rule that
deletes any email not from mitvma.mit.edu.

As for revenge, the fax thing is likely to be illegal. However, you can
block AND report email effectively using a combination of the tools listed
below.

http://www.spampal.com stops spam from known sources. Easy to install and
use. Avoid the URL plug-in
http://www.spamcop.net accepts reports of spam and provides a blocking list
of known spammers
http://www.massmind.org/stats/spamlog.htm semi-automates the reporting of
spam. Look at the volume of spam I have reported using this system. It
doesn't take long at all.

Finally, please do not use the [ADMIN]: tag.

---
James Newton: PICList webmaster/Admin
RemoveMEjamesnewtonEraseMEspamEraseMEpiclist.com  1-619-652-0593 phone
http://www.piclist.com/member/JMN-EFP-786
PIC/PICList FAQ: http://www.piclist.com



> {Original Message removed}

2004\06\11@111530 by James Newton, Host

face picon face
An interesting idea... I was thinking about something like that myself.

---
James Newton: PICList webmaster/Admin
RemoveMEjamesnewtonspam_OUTspamKILLspampiclist.com  1-619-652-0593 phone
http://www.piclist.com/member/JMN-EFP-786
PIC/PICList FAQ: http://www.piclist.com



> {Original Message removed}

More... (looser matching)
- Last day of these posts
- In 2004 , 2005 only
- Today
- New search...