powermail-discuss Digest #2551 - Monday, January 29, 2007 foxtrot list by "Marlyse Comte" <[EMAIL PROTECTED]> Re: foxtrot list by "Barbara Needham" <[EMAIL PROTECTED]> Re: foxtrot list by "Karim Kabbabe" <[EMAIL PROTECTED]> Re: Negative unread messages in the inbox by "PowerMail Engineering" <[EMAIL PROTECTED]> Re: foxtrot list by "C. A. Niemiec" <[EMAIL PROTECTED]> Re: foxtrot list by "Jim Pistrang" <[EMAIL PROTECTED]> Re: foxtrot list by "Ken Pope" <[EMAIL PROTECTED]> greeting card malware? by "Mark Gerber" <[EMAIL PROTECTED]> Re: greeting card malware? by "computer artwork by subhash" <[EMAIL PROTECTED]> Re: greeting card malware? by "Wayne Brissette" <[EMAIL PROTECTED]> Re: greeting card malware? by "Matthias Schmidt" <[EMAIL PROTECTED]> Re: greeting card malware? by "Justin Beek" <[EMAIL PROTECTED]> Re: greeting card malware? by <[EMAIL PROTECTED]> Re: greeting card malware? by "Michael Lewis" <[EMAIL PROTECTED]> Re: greeting card malware? by "Michael Lewis" <[EMAIL PROTECTED]> Re: greeting card malware? by "Mark Gerber" <[EMAIL PROTECTED]> Re: greeting card malware? by "Frank Mitchell" <[EMAIL PROTECTED]>
---------------------------------------------------------------------- Subject: foxtrot list From: "Marlyse Comte" <[EMAIL PROTECTED]> Date: Sun, 28 Jan 2007 22:05:46 -0600 I'm wondering about the foxtrot list if that is alive. I'm sure I was subscribed but somehow it seems not and so I re-subscribed today but never received a welcome email etc. and so I'm not sure if the list is up or what... anyone else on that list? ---marlyse ---------------------------------------------------------------------- Subject: Re: foxtrot list From: "Barbara Needham" <[EMAIL PROTECTED]> Date: Sun, 28 Jan 2007 21:47:04 -0800 Marlyse Comte wrote: > I'm wondering about the foxtrot list if that is alive. I'm sure I was > subscribed but somehow it seems not and so I re-subscribed today but > never received a welcome email etc. and so I'm not sure if the list is > up or what... anyone else on that list? Yes it is active, that is to say alive. I have 4 posts for all of January 2007, 1 of them being from fox trot engineering 6 Jan 2007, 7 Jan 2007, and 3 on 26 Jan 2007. I didn't get anything on the power mail list for about 5 months last year... -- Barbara Needham ---------------------------------------------------------------------- Subject: Re: foxtrot list From: "Karim Kabbabe" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 12:38:38 +0800 Yes I am on the list :-) On 29 Jan 2007, at 12:05 PM, Marlyse Comte wrote: > I'm wondering about the foxtrot list if that is alive. I'm sure I was > subscribed but somehow it seems not and so I re-subscribed today but > never received a welcome email etc. and so I'm not sure if the list is > up or what... anyone else on that list? > > ---marlyse > > ---------------------------------------------------------------------- Subject: Re: Negative unread messages in the inbox From: "PowerMail Engineering" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 09:51:32 +0100 Robert Snyder wrote: >The only way that I can make the -3 unread and the bold In Tray go away >is to compact my mailboxes. When that completes, there are no new unread >emails in the inbox, and unread and bold are gone. You can also fix this problem by performing a "verify the consistency of database records". To do this, press the command and option keys while PowerMail is launching, and check the appropriate checkbox. If this problem happens again, and you have an idea of what could have caused it, please let me know. Jérôme - PowerMail Engineering --------------------------------------------------------------------- "First, PowerMail downloads mail in about half the time of Entourage. Second, it's rock solid. Hasn't crashed once (Entourage crashed regularly). Third, searches are lightening fast, very impressive facility. Fourth, it has a very nice filtering capability, at least as strong as Entourage and probably stronger (my rules sets are fairly straightforward). Fifth, it auto syncs with AddressBook without the need for external scripts like in Entourage." PowerMail user comment on www.versiontracker.com Download a demo version from www.ctmdev.com --------------------------------------------------------------------- ---------------------------------------------------------------------- Subject: Re: foxtrot list From: "C. A. Niemiec" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 05:27:15 -0500 >I'm wondering about the foxtrot list if that is alive. ... >anyone else on that list? No one here but us FoxTrot list members. :) But I am surprised at the lull in PM list activity. Chris -- ---------------------------------------------------------------------- Subject: Re: foxtrot list From: "Jim Pistrang" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 06:43:46 -0500 Hi Marlyse, >I'm wondering about the foxtrot list if that is alive. Alive but very quiet. Jim -- Jim Pistrang JP Computer Resources Certified Member, Apple Consultants Network 413-256-4569 <http://www.jpcr.com> ---------------------------------------------------------------------- Subject: Re: foxtrot list From: "Ken Pope" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 07:52:15 -0500 >I'm wondering about the foxtrot list if that is alive. Yes, though very low-traffic (which has its benefits). Every once-in-a- while, someone posts a question and almost immediately another user or someone from the company posts the answer. Very helpful. Ken ---------------------------------------------------------------------- Subject: greeting card malware? From: "Mark Gerber" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 09:04:00 -0500 This isn't specific to PowerMail, but I'm hoping someone can point me in the right direction to solve this problem. For the past several weeks I've been getting a lot of e-mail dumped into my Spam folder with the subject indicating "delivery failed." They are from addresses I don't know and are responding to an e-mail from my domain (using a random name, for instance: hpbxx @ gerberstudio.com). There is often an attachement named something like "Greeting Card.exe" involved. As far as I've been able to find out I seem to have been infected with the "Happy New Year" worm, but I haven't found a solution for OS X. Does anyone know where I can get more information? Thanks. Mark ---- Mark Gerber GERBER STUDIO/Tradigital Illustration <http://www.gerberstudio.com> <http://www.theispot.com/artist/mgerber> ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "computer artwork by subhash" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 15:18:44 +0100 [Mark Gerber <[EMAIL PROTECTED]> schrieb am 29.1.2007 um 9:04 Uhr:] >"Greeting Card.exe" >"Happy New Year" >OS X ??? How can you be infected with a worm which is an .exe-file on Mac OS? That is impossible. Sounds to me as if someone else (using Windows) is infected and the worm uses your domainname to send mails to (sometimes non existing) mailboxes. -- http://www.subhash.at ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Wayne Brissette" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 08:26:39 -0600 (GMT-06:00) >>"Greeting Card.exe" >>"Happy New Year" >>OS X > >??? > >How can you be infected with a worm which is an .exe-file on Mac OS? >That is impossible. > >Sounds to me as if someone else (using Windows) is infected and the worm >uses your domainname to send mails to (sometimes non existing) mailboxes. You beat me to it. ;-) Spam in general seems to be way up recently. One day last week I had 399 spam messages, then two days later it was 350. It's gotten to a point that real mail is less than 2% of all my emails. :-( Wayne ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Matthias Schmidt" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 15:24:49 +0100 Am/On Mon, 29 Jan 2007 09:04:00 -0500 schrieb/wrote Mark Gerber: >This isn't specific to PowerMail, but I'm hoping someone can point me in >the right direction to solve this problem. I think that's a misconfigured mailserver which is rejecting (infected virus) mail instead of bouncing it. > >For the past several weeks I've been getting a lot of e-mail dumped into >my Spam folder with the subject indicating "delivery failed." They are >from addresses I don't know and are responding to an e-mail from my >domain (using a random name, for instance: hpbxx @ gerberstudio.com). >There is often an attachement named something like "Greeting Card.exe" >involved. > >As far as I've been able to find out I seem to have been infected with >the "Happy New Year" worm, but I haven't found a solution for OS X. Does >anyone know where I can get more information? the worm affects only Windoze .... But if you're afraid of viruses on the Mac, install ClamXav, works great. Another nice thing is snort, the installation for OS X is called HenWen. All the best Matthias ----------------------------------------------- Admilon Consulting GmbH http://www.admilon.com Tel. +81-736-56-3905 ----------------------------------------------- ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Justin Beek" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 08:45:59 -0600 Look through the headers. Look for a Lookup warning. It may show that it is from someone else: X-Lookup-Warning: MAIL lookup on [EMAIL PROTECTED] does not match 201.69.126.198 If your server doesn't perform Lookups, look for the originating IP and see if it is from your domain: Return-path: <[EMAIL PROTECTED]> Received: from smtp.-snip-.com (201-69-126-198.dial-up.telesp.net.br [201.69.126.198]) I would guess that it is NOT coming from your network. Justin On Jan 29, 2007, at 8:04 AM, Mark Gerber wrote: > This isn't specific to PowerMail, but I'm hoping someone can point > me in > the right direction to solve this problem. > > For the past several weeks I've been getting a lot of e-mail dumped > into > my Spam folder with the subject indicating "delivery failed." They are > from addresses I don't know and are responding to an e-mail from my > domain (using a random name, for instance: hpbxx @ gerberstudio.com). > There is often an attachement named something like "Greeting Card.exe" > involved. > > As far as I've been able to find out I seem to have been infected with > the "Happy New Year" worm, but I haven't found a solution for OS X. > Does > anyone know where I can get more information? > > Thanks. > Mark > ---- > Mark Gerber > GERBER STUDIO/Tradigital Illustration > <http://www.gerberstudio.com> > <http://www.theispot.com/artist/mgerber> > > > > ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 10:10:54 -0500 (EST) Your email address has been "spoofed." I have 2 domains that have NO outgoing email server at all and I get returns all the time. I just ignore them. There is absolutely nothing you can do about this. Most email servers can catch a fraudulent email address and bounce it. > Am/On Mon, 29 Jan 2007 09:04:00 -0500 schrieb/wrote Mark Gerber: > >>This isn't specific to PowerMail, but I'm hoping someone can point me in >>the right direction to solve this problem. > > > I think that's a misconfigured mailserver which is rejecting (infected > virus) mail instead of bouncing it. > >> >>For the past several weeks I've been getting a lot of e-mail dumped into >>my Spam folder with the subject indicating "delivery failed." They are >>from addresses I don't know and are responding to an e-mail from my >>domain (using a random name, for instance: hpbxx @ gerberstudio.com). >>There is often an attachement named something like "Greeting Card.exe" >>involved. >> >>As far as I've been able to find out I seem to have been infected with >>the "Happy New Year" worm, but I haven't found a solution for OS X. Does >>anyone know where I can get more information? > > the worm affects only Windoze .... > > But if you're afraid of viruses on the Mac, install ClamXav, works great. > Another nice thing is snort, the installation for OS X is called HenWen. > > All the best > > Matthias > > ----------------------------------------------- > Admilon Consulting GmbH > http://www.admilon.com > Tel. +81-736-56-3905 > ----------------------------------------------- > > > ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Michael Lewis" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 10:38:19 -0500 Wayne Brissette sez: >Spam in general seems to be way up recently. One day last week I had 399 >spam messages, then two days later it was 350. It's gotten to a point >that real mail is less than 2% of all my emails. :-( Sadly this is true for me as well. SpamSieve isn't even catching a lot of it, particularly the ones that are filled with random sentences from works of literature. It also was missing a bunch of things that said "loan request" in it despite me marking them spam, until I went in and blacklisted anything with loan request in it. Maybe I need to recalibrate SpamSieve, but I generally delete all my spam and don't remember I should be saving it until I think about recalibrating. :) DOH! -- Michael Lewis Off Balance Productions [EMAIL PROTECTED] www.offbalance.com ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Michael Lewis" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 10:46:09 -0500 [EMAIL PROTECTED] sez: >Your email address has been "spoofed." I have 2 domains that have NO >outgoing email server at all and I get returns all the time. I just >ignore them. There is absolutely nothing you can do about this. Most >email servers can catch a fraudulent email address and bounce it. There is one thing that can be done, at least if the emails are advertising something. Once when my domain was spoofed and I had to deal with around 20,000 bouncebacks over the course of a week, I was able to use WhoIs to track down the ISP of the pharmaceutical site being advertised. Don't go after the spammer -- you can probably never find it; go after the advertiser. They have to have some place for a person to contact in order to make their money -- so hit them there. Once I had the internet provider of the advertiser, I sent a nicely worded cease-and-desist letter claiming if they did not shut down the site, I would have to contact my lawyers to complete papers filing for fraudulent use of my corporate identity. Yeah, I don't know if such a thing exists, but pad it out with some legal mumbo jumbo and it sounded good. :) They shut down the advertiser's site. I still got bouncebacks for a while, but I was much more satisfied. :) -- Michael Lewis Off Balance Productions [EMAIL PROTECTED] www.offbalance.com ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Mark Gerber" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 12:28:05 -0500 Thanks for all the responses. For the several weeks this has been happening I've been assuming this worm was a Windows problem and that my address was being spoofed. But then I came across a message that had been returned from a client's domain. Granted this is a huge company with any number of people and several websites--but I was alarmed at the coincidence (at least, I hope it was a coincidence). So I wondered if some malware out there had finally found it's way to OS X in spite of no mention of both it and "Macintosh" on the security sites I check when something like this comes up. I appreciate those familiar with these problems answering so quickly. It sounds like I have to endure these things until someone(s?), somewhere takes care of it on their own computer(s) and there's nothing I can do about it unless I want to track down the advertised ISPs and contact them to put a stop to it. And there is no way I can determine who's computer it was that snatched my domain for it's own use. In the meantime, I'll check out ClamXav and HenWen to see what they offer in terms of peace of mind. Mark ---- Mark Gerber GERBER STUDIO/Tradigital Illustration <http://www.gerberstudio.com> <http://www.theispot.com/artist/mgerber> ---------------------------------------------------------------------- Subject: Re: greeting card malware? From: "Frank Mitchell" <[EMAIL PROTECTED]> Date: Mon, 29 Jan 2007 11:36:36 -0700 Hello Michael >>Spam in general seems to be way up recently. One day last week I had 399 >>spam messages, then two days later it was 350. It's gotten to a point >>that real mail is less than 2% of all my emails. :-( > >Sadly this is true for me as well. SpamSieve isn't even catching a lot >of it, particularly the ones that are filled with random sentences from >works of literature. I suspect these are intended to overload programs which work like SpamSieve with "millions" of random 'good' words. If there are enough of them they could eventually render SS ineffective. Your experience seems to confirm this. For this reason, I simply delete such random word messages rather than do a "Mark as Spam". That's my theory anyway 8^) Frank -- Frank Mitchell, Scottsdale, Arizona ---------------------------------------------------------------------- End of powermail-discuss Digest