my email/address book are invaded

This sounds viral to my non-technical view.

I have had the spam I'm receiving become a torrant over the past few weeks. As the email downloads (in groups of 10-40), I hear email (3-5) being sent out (a sound that I use only for outgoing mail), but there no sign of it in "sent box". My mail or address book has been invaded as I've gotten spam labelled "sent" by friends or me, which is just spam. There will be 10-20 every couple of hours, with same greeting, just a different name which is weird even for spam.

The ISP (AT&T/SBC) needs to do better. I had created rules which worked well for a few years, and catches about 100/day, but now the mass is so big some get past rules, and to check my mail, I have to look in junk folder, delete folder, and inbox (using Entourage).

What's the first 3 things to do?
Thanks.

tom

Powerbook G4, iPod 3rd Gen (dock) Mac OS X (10.4.7)

Powerbook G4, iPod 3rd Gen (dock), Mac OS X (10.4.7)

Posted on Nov 30, 2006 6:34 PM

Reply
9 replies

Nov 30, 2006 7:04 PM in response to vulkun

First, it's unlikely that you have a virus since no OS X viruses are known to exist in the wild. And the only "proof of concept" exploits either require physical access to you computer or just pop up some advertisements.

If spam is being sent using your email address or that of your friends, the odds, IMO, are nearly 100% that one or more of your Windows using friends has a virus. Possibly the spamthru virus.

So, let's see if we can deal with the spam. You mention your rules have worked for a few years so you're not a newbie so I'll skip the "intro to rules".

Are you getting a lot of image spam, that is spam with little or no text and an image containing the ad? If so, perhaps this will help. mailapp rule fix. I'm using a variation of this rule on our corporate email server and it is stopping a ton of spam.

If you're willing to spend some money SpamSieve has a good reputation. It's $30.00

- Wayne

PowerMac G5 Mac OS X (10.4.8)

Dec 1, 2006 12:52 AM in response to Pastahelmet

Are any of your Mail rules set to Reply, Forward or
Redirect messages? ...
Glen


Glen I have set the rules to change the color to identify which set of rules caught it, play an error sound (different than the send sound), then moves it to delete folder. I also use rules for a little sorting. I just reviewed the rules and actions, and only no rules or sequelae produce the send sound.
Thanks for the thought.

Tom

Dec 1, 2006 1:32 AM in response to David Gimeno Gost

more clear description avoiding..any speculation as to what the cause.. What
does “I've gotten spam labelled "sent" by friends or
me” mean? What does Entourage have to do with this?


Sure, I tried to be brief. I'm using Entourage, not Mail which seemed to be more common in these posts. Each program is set up a little differently, e.g., different choice of preferences, and so all do much the same job but approaches vary. Seemed relevent.

2nd item: when I open my email Inbox I see a Subject and the Sender's name. I have recently received obvious spam, but the "sender's name" is my own, or that of a friend or relative. None of us are sending spam.

I found too many false positives when I turned up the spam filter some years ago when I started using Entourage; they outnumbered the spam, so I turned it down (yrs ago) and wrote rules which identified most of the spam, at which point it would change it's color corresponding to the set of rules that caught it, played an error sound used only for this, and moved the emails to the delete folder. That worked fine until the past month of so when it was like the Dutch Boy pulling his thumb from the dike. I'm getting about 100 spams daily. My rules catch 90% of them, but the the system is breaking under the number; I'm getting too many false positives, so I have a tedious job of scouring the Delete folder twice a day for real email. Additionally there were the other oddities of hearing Send wooshes as the spam came in, finding my name as both sender and frequently in the subject, of spam labeled as sent by persons in my Address book, and oddly getting spam obviously from the same source in the form but each with a different "sender's" name attached- on the order of 30-40 of these nearly identical emails for many days in a row; it's like the magic brooms in Fantasia; what purpose in sending 100-200 of the same spam letter to one address?

I never answer them, I don't open them unless I can't tell; I won't open attachments unless I expect them.

I hope that's enough detail. I'm open to suggestions or will answer more questions.

Thanks.
tom





Powerbook G4, iPod 3rd Gen (dock) Mac OS X (10.4.7)

Dec 1, 2006 1:55 AM in response to WG

Fs unlikely> OS X viruses > If spam is being sent using your email address or
odds, IMO, nearly 100%- Windows using friends has a
virus. spamthru virus.

So, let's see if we can deal with the spam. You
mention your rules have worked for a few years so
you're not a newbie so>

a lot of image spam, that is spam
with little or no text and an image containing the
ad?
If you're willing to spend some money >SpamSieve
has a good reputation. It's $30.00


Wayne-
Not exactly a newbie; was on the web before browsers, B4 Mosaic. I think you're right, even though the spam is mostly text, you have to "download pictures" to see it so that probably an image. I'll try both your ideas. I don't know if I have any friends who use PC's, but I get newletters and such which probably do.
My rules--now there are a lot--- over the years as spammers changed strategies-- catches the vast majority and puts in Delete folder. That wouldn't be a problem except I'm having to scour for false positives, which there always are. I rather spend $30 than rewrite my rules-- and I would like to catch the spam before I have to sort through it, and not lose the real email (e.g., work related; but a Mac shop).

Thanks.


tom

Dec 1, 2006 4:45 AM in response to vulkun

I'm using Entourage, not Mail which seemed to be more common in these posts.
[...] Seemed relevent.


Oh man! Of course it’s relevant! The problem is precisely that you didn’t made it clear enough. If you’re using Entourage instead of Mail, you should have made it clear from the very beginning, and preferably in the subject of your post, so that people not familiarized with or interested in that piece of software would know what you’re talking about without having to read everything.

It’s not that Mail is more “common” in this forums. It’s that this is Apple’s Mail & Address Book forum, i.e. this forum is for discussing issues related to Mac OS X’s Mail and/or Address Book applications.

Entourage issues are off-topic here. I personally have nothing against discussing such issues here if there is no better place to do so (which I don’t know), as long as you make it clear that you’re talking about Entourage, not Mac OS X’s Mail, without everyone willing to help having to read a confusing post. If you read the other replies, you’ll see that everybody here was assuming you were talking about Mac OS X’s Mail...

At this point, I have no idea what you’re problem is, nor what to do about it. All I can tell you is that you may find helpful the following articles, which are applicable to any mail account (not just .Mac), and any mail client (not just Mail):

Why was I "spammed" at my .Mac Mail address?
How HTML Email Messages Relate to Unsolicited Commercial Email ("spam")

Dec 1, 2006 10:15 AM in response to David Gimeno Gost

David-

Thanks for straigtening me out. I think that:

1) It's not obvious how strict the rules are here; but I need to know these things now that my AppleCare expired.

2) I'm not the first person to have wandered in the wrong discussion group, even with a generic problem. As I explained, it crossed my mind, which is why I mentioned it, and asked how/where to get started..

3) You seem a little tense. Would a little massage help?

4. Thank you for the help you would given if I were in the right place and not wasting your time. Truly. From the heart. Maybe next time.

tom



Powerbook G4, iPod 3rd Gen (dock) Mac OS X (10.4.7)

Powerbook G4, iPod 3rd Gen (dock) Mac OS X (10.4.7)

Powerbook G4, iPod 3rd Gen (dock) Mac OS X (10.4.7)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

my email/address book are invaded

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.