email virus keep coming 62 at a time - wont stop

[kyleste]

I keep getting this virus email and file . The email text says " Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"
the subject title is sometimes the same and sometimes not.
For the most part the subject title says " Construct Comp"
So here is the problem - I know not to open the attached file. Getting this email is not the real problem . The Real problem is that I am getting this email about 200 times a day . Thats around 200 emails , 62 of them at a time. This means that my email box keeps filling up and I can not receive any email other than this virus email. I check my email, get 62 of the virus emails , then wait about 4 to 6 hours and then I will have 62 more of them all over again.
This has rendered my email accountant useless for receiving any emails, from my customers or friends and family. I have tried to create message rules in my outlook express like don't download emails with attachments or delete emails with attachments from server but none of that is working. And even if it did my email box would still be full and unable to receive email other than the virus emails which fill it up.
Here is a copy of the header - PLEASE NOTE . the ip address is the exact same one in every virus email I receive. The only thing that is ever different is sometime the subject title. here is a copy of the header:
Return-Path: <>
Received: from [24.3.218.47] by imf15bis.bellsouth.net
(InterMail vM.5.01.01.01 201-252-104) with SMTP
id <20010814192152.DTCP4225.imf15bis.bellsouth.net@[24.3.218.47]>
for <[email protected]>; Tue, 14 Aug 2001 15:21:52 -0400
From:
To: [email protected]
Subject: Constructcomp
date: Tue, 14 Aug 2001 15:16:15 -0300
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed; boundary="----0557B14F_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
Message-Id: <20010814192152.DTCP4225.imf15bis.bellsouth.net@[24.3.218.47]>
please help - thanks - best regards - kyle

------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[JS_COMP]

Kyle,

What is probably happening is someone you know did open up the attachment. That specific virus (Sircam32) reads address books and sends out e-mails to recipients in the address book. One of your friends or family probably opened up the attachment and now they have the virus. This would be one reason why it is continually sent to you. I would suggest e-mailing anyone that e-mails you on a regular basis and make sure they scan their system. Here is the McAfee link with the virus info. http://www.mcafee.com/anti-virus/vir...t.asp?cid=2360

[DVOM]

kyleste, In my OE 5.5, under "tools" then "message rules" I've got a "blocked senders list" option. If you don't have that, you might want to upgrade to IE and OE 5.5. This would also solve some vulnerablity issues that OE 5 has.

[kyleste]

as stated above - i have tried all sorts of different message rules - none of them have even slowed down the problem.
thanks for the advice though.
best
kyle


------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[DVOM]

kyleste, 5.5 handles things a little differently than 5 does. If 5 is the one that came on your machine, then you would be able to revert back to it if 5.5 doesn't fix the problem.
Good luck.
BTW, the "blocked senders list" I use blocks everything from whatever e addy you put in there.

[This message has been edited by DVOM (edited 08-14-2001).]

[kyleste]

look in the header that i posted above - there is no return address at all.
even though any message rule that i have tried has not worked so far---- what would i type in as the user id to block ?
thanks
kyle


------------------
kyle

PIII
96mb ram
15g hd
Win 98
dsl(internal modem)
Latest version of mcafee virus scan - DAT files updated regularly
Compaq presario
IE 5.0

[DVOM]

kyleste, I've been looking over that header you posted. At this point I'd suggest calling you ISP to see if they can do anything to block it.
BTW, I've also looked over some headers from my own E's, that IP header your getting is from the message going thru your ISP. I get the same thing but with an E addy (IP) at my ISP.

[This message has been edited by DVOM (edited 08-14-2001).]

[eddie5659]

Hiya

Blocking via sender is okay, but then you have to do it with everyone. Try this.

Tools | Message Rules | Mail Rules.

Click New.

In the first box, tick the one you want..probably Where the Subject Line..

In the second, choose again..maybe Delete it or Do not download from server.

Then in the third box, a blue highlighted text will appear, saying Contains Specific words. Click it and type in the Subject you are getting

Hi How Are you or whatever it says. Click Add and OK everything.

This will then block any emails sent to you with that subject on.

Regards

eddie