please help - 62 email virus at a time - wont stop

[kyleste]

I keep getting this virus email and file . The email text says " Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"
the subject title is sometimes the same and sometimes not.
For the most part the subject title says " Construct Comp"
So here is the problem - I know not to open the attached file. Getting this email is not the real problem . The Real problem is that I am getting this email about 200 times a day . Thats around 200 emails , 62 of them at a time. This means that my email box keeps filling up and I can not receive any email other than this virus email. I check my email, get 62 of the virus emails , then wait about 4 to 6 hours and then I will have 62 more of them all over again.
This has rendered my email accountant useless for receiving any emails, from my customers or friends and family. I have tried to create message rules in my outlook express like don't download emails with attachments or delete emails with attachments from server but none of that is working. And even if it did my email box would still be full and unable to receive email other than the virus emails which fill it up.
Here is a copy of the header - PLEASE NOTE . the ip address is the exact same one in every virus email I receive. The only thing that is ever different is sometime the subject title. here is a copy of the header:
Return-Path: <>
Received: from [24.3.218.47] by imf15bis.bellsouth.net
(InterMail vM.5.01.01.01 201-252-104) with SMTP
id <20010814192152.DTCP4225.imf15bis.bellsouth.net@[24.3.218.47]>
for <[email protected]>; Tue, 14 Aug 2001 15:21:52 -0400
From:
To: [email protected]
Subject: Constructcomp
date: Tue, 14 Aug 2001 15:16:15 -0300
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed; boundary="----0557B14F_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
Message-Id: <20010814192152.DTCP4225.imf15bis.bellsouth.net@[24.3.218.47]>
please help me - thanks - best regards - kyle

------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[irmeruu]

I had a similar problem and had to call my ISP and have them delete all emails addressed to me there. That solved my problem and you might give it a try. Good luck.

Vince

------------------
There's no second chance to make a first impression.

[Airhead]

It sounds a lot like the SirCam worm, but without more information it is hard to tell for sure. I would do a virus check online just to be doubly sure that your computer is not infected. If it is SirCam, it shouldn't be if you didn't open the attachments. You might read about SirCam here.

I don't know if there is much you can do about getting these emails from other infected users. Perhaps Big John is around. I recall he said that he had received over 300.

[adc]

Your are correct..it is a virus...I was getting it too but not on the scale you are. My ISP even sent out an email warning members not to open any such mails.

I blocked it in my email filters at the ISP server and have never got another.

You should be able to do same.

[tomster1]

An option that will solve the problem if you are use Outlook Express or Outlook is to set up a rule to automatically delete these messages. I will explain here how to set up a rule to take care of this in case you are not familiar with rules, this id for OE but I am sure Outlook has a similar config.
Tools Tab then Rules button.
Simply look for the option "when the subject line contains..... Tick that after specifying the words "please help"
Then in the next box you can tell OE to delete the message automatically.

[kyleste]

thanks for the help - but as stated above - i have tried all sorts of different rules and none of them have even slowed down the problem. And even if it did delete them automatically it would help me any because i would still have the problem of my email box (on the server before i get them) being full all of the time and would still not be able to get any email. my account is full with nothing but the email viruses and its keeping me from getting any other emails.
i have also called tech support for my server (bellsouth.net) and gave them the ip address that i listed above and they said that it is their policy not to block ip address from sending email to people. I forget why , but they gave me some lame excuse. Anyone have any other suggestions ? Like how can i find out who it is that is sending them to me ? so i can let them know that their pc is infected with this virus and keeps sending me these emails . i have already done a full virus scan and i dont have any viruses. besides that, as a rule, i never open any attatchments anyway, no matter who they are from - so i am positive i am not infected with anything .
please help
thanks
kyle


------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[Airhead]

Perhaps by my reply putting this back on the first page you will get other suggestions.

Be aware, though, that while the SirCam worm causes an infection only by opening an attachment, there are other worms and virii which do not require an attachment to run.

[This message has been edited by Airhead (edited 08-15-2001).]

[irmeruu]

I must add that my ISP bent over backwards to erase and block the email that I was receiving and I must say also that Bell South is very negligent to their customers and I would be looking for a replacement ISP. I can't imagine poorer service.....says something for big business.

Vince

------------------
There's no second chance to make a first impression.

[BIG JOHN]

Hi kyleste, being a moderator & lots of people having my e-mail adress I was getting it bout 60 times a day for about 3 weeks, this is what I started doing & I haven't gotten it for about a week now, right click on the message header, click properties, click details tab, then message source, maximize that window & scroll down, you will see the address it came from, this is the e-mail I sent to the person:

This is to inform you that I received the sircam.32 virus from your e-mail address, & that your computer is infected with it, I suggest you get a good up to date anti virus program & scan your machine with it immediately. BJ



------------------
"Cause after all, we are just here to help."
[PS:Post back & let us know the results.]
My Other Hangout