Attention! Avast Was Tagged!

Hello,

This is just an informational message. I was in MailWasher both yesterday and again today, when I was notified by Avast that "a potential virus had been spotted in my email. The “From” was Avast! When I brought it up, the tagger was as follows: “FamousBluePill orexis@info4u.info

Obviously, it was NOT from Avast. The above “FamousBluePill” is one that I must have “blocked” in Outlook Express a hundred times–always with a different letter or number in the address. MailWasher will take care of it now. And as for Spam >:( >:( >:(

sunny

thanx 4 the info sunny :slight_smile:

Sunny
What rule did you establish in Mailwasher to make sure you filter it out the next time?
Isn’t anything sacred any more???

Sunny,

The email WAS from Avast. When Avast scans your email and finds something in it that is potentially dangerous, it prevents THAT email from being opened and SENDS you one of its own…sort of a notification.

This way, you are alerted without the danger of inadvertently opening infected email.

As Bob has asked, how did you configure Mail Washer?
It should filter out the “pill”.

Let us know.

If you haven’t already done so add a new Origin of spam item for the following database - sbl-xbl.spamhaus.org this picks up most spam of all my filters.

It is easier to hit origins of spam than from email address, as you have found they are often forged and it is a very fast moving target.

David

David R
Thanks for the quick reply.

If you haven't already done so add a new Origin of spam item for the following database - sbl-xbl.spamhaus.org this picks up most spam of all my filters.
My question is exactly what do I add???? ??? Thanks

A new reference database for origins of spam, when compared against known origins of spam email can be quickly identified as spam…

In MW click the Tools, Spam Tools, Origin of Spam, and click Add - Give the new entry a new name ‘Your Choice’ and for Domain sbl-xbl.spamhaus.org and that’s it.

MW will now check email against these databases (there are actualy two at this location).

DavidR
Thanks all done. One less thing to worry about. :slight_smile:

DavidR.

Thanks for the information you gave here. I appreciate it and am sure others do also. :slight_smile:

David - when I tried to add that to my MW, I got this warning:

“The domain of the DNS blacklist server is not well formed.”

Of course, with that warning it will not let me add it.

Anyone know why … or … what I did wrong? ???

Did you cut and paste the ‘sbl-xbl.spamhaus.org’ without the quotes? You don’t have to add http or www, etc. just what I gave. Check the one for SpamCop that is already there to see the format if you are unsure, highlight/select it and click edit to see the format.

DavidR
It has to be a typo. I used copy and paste and had no problems.
Again Thanks.

Yes, I did a copy & paste … just as you had it in your first post. And, I did check the Spamcop one and they appeared to be the same format.

I’ll try it again. :slight_smile:

Edit:

Well, it worked this time. I have no idea what was different last night nor why it didn’t work.

Thanks for the help from all of you! :smiley:

Hello,

I want to thank DavidR, Techie 101, and all of you who gave advice and helped us learn through this topic. I’ve set the spam tool in MailWasher. I’ve not yet set filters, tho. I’m embarrassed :-[ to admit that I haven’t set filters in MW yet. I haven’t had it for long, but I took one (long) look at a reference page cited by MW for “instructions” and put it on my mental calendar for a “rainy day.”

One thing I’ve noticed is that the same “tagged” Avast message has come through at least ten times, but with a different ad message. Today I got another one. I was very surprised because I had asked for CNN AM QuickNews, a daily email. It came through “tagged,” but this time I deleted/bounced in MW, then allowed it when it appeared in my OE mail. I tried that because, if I had deleted in OE, I would have been automatically rejected by CNN, and I wanted that daily email. (Of course, my Avast was running!) Also, when I deleted in MW, it said that it had “removed” the tag, so I was able to get that message and setup.

Thank you all, again, for helping me.

sunny