On 21 Jan 2004 22:52:10 GMT, Richard Knispel <muddyfoxx@nomail.afraid.org> wrote:
Those are swen generated messages. While you're now munging your email
address, there are still old messages on the news servers, for newly
infected computers to pick up your email address from. Also, any
infected computers that already have your address, will continue sending
the messages to you, until their owners remove the worm from their
computers.
The messages usually are sent in pairs. One appearing to be the M$ update,
the other appearing to be a mail bounce. Both have swen attached.
You can learn to read the email headers to identify the originating isp,
and forward the message (with complete headers) to the abuse desk, at
that isp, or just wait, until the owners clean up their computers, and
the messages age off of the news servers.
You can also install magic mail monitor, and set it up to automatically
delete the swen from your pop mail account, without having to download
the messages.
Regards, Dave Hodgins
--
Change nomail.afraid.org to rogers.com to reply by email.
(nomail.afraid.org has been set up specfically for
use in usenet. Feel free to use it yourself.)
