Version: 2008
Advanced Search
advertisement
advertisement

Forum display:

Spyware, viruses, & security : email security

by vmillo - 8/9/06 3:03 PM
advertisement
Post 1 of 25

email security

by vmillo - 8/9/06 3:03 PM

I get curious about emails in my Inbox that I think are probably spam, but might be legitimate. I don't want to Open them in case they're spam, yet I want to know more about them before discarding in case they are a real message to me. In the belief that perhaps I can cleverly beat the system, I read the "Properties, Details" (right click the message in the Inbox, choose properties them the Details tab)to determine whether it was sent to me or some other name/address. I also sometimes read the "Message Source". My question is whether reading only the Message Source keeps me immune to the bad things that happen in opening spam. I'm using Windows XP and Outlook Express.

Post 2 of 25

not opening such is the key

by dawillie - 8/10/06 6:00 AM In reply to: email security by vmillo

reading in message source is safe because you have not opened the mail and can delete unread.

David

Post 3 of 25

Correction

by dawillie - 8/10/06 6:01 AM In reply to: not opening such is the key by dawillie

'can delete unread'.

should read 'un-opened'.

Post 4 of 25

I would go further

by MarkFlax Moderator - 8/11/06 2:16 AM In reply to: Correction by dawillie

I would not even look at the contents of the email, via properties/source or otherwise.

The way I look at it is this.

If I do not recognise who the sender is, then I have no interest in the contents. Why would I? Why would someone who I don't know, and who presumably therefore doesn't know me, send me an email?

There's only one answer, it's spam. So it gets deleted.

Mark

Post 5 of 25

assumptions can be a problem

by vmillo - 8/11/06 6:20 AM In reply to: I would go further by MarkFlax Moderator

What prompted this original question was an email I received from someone totally unkown to me with a subject that didn't ring any bells. I almost deleted it unopened, but curiosity made me read the "message source". It was a very important response from a company I'd written to regarding a huge refund available. Thank goodness for curiosity.

Post 6 of 25

That's very true

by MarkFlax Moderator - 8/11/06 8:50 AM In reply to: assumptions can be a problem by vmillo

I would, though, have expected the company involved to have used some sort of identifier in their email. They are as aware as we customers are, if not more so, of the problem of spam.

But I realise that's not a satisfactory answer, and I am glad your curiosity won over this time, :)

Mark

Post 7 of 25

reading "source" vs "opening"

by vmillo - 8/11/06 6:24 AM In reply to: Correction by dawillie

Yes, that is precisely my question: Does reading the "message source" constitute "opening" the email or not.

Post 8 of 25

No it does not.

by dawillie - 8/12/06 3:24 PM In reply to: reading "source" vs "opening" by vmillo

It's a back door method and allows you to read instead of opening and exposing yourself to an executable.

Post 9 of 25

Open every one, no problem.

by Brianstech - 8/11/06 5:29 AM In reply to: email security by vmillo

Just make sure you set your preferences to "TEXT ONLY".

I can't tell you how, each site has different ways. Usually it's under "Options".

Text Only will not allow HTML scripts, photos, ads, etc. No hidden "bugs" can launch through plain text.

If you trust a sender, simply "Allow" them, you'll see the whole message.

I have my Hotmail, Yahoo, and Rock.com accounts set for Text Only.

Post 10 of 25

I'm serious!

by Brianstech - 8/11/06 6:02 AM In reply to: Open every one, no problem. by Brianstech

I'm a member of Scam Busters, a private group on eBay.

Because of all the phishing emails, we are trying to educate the world on opening all emails in "Text Only" mode.

Apparently, there are hidden scripts that steal passwords when people simply open emails. The amount of hijacked accounts lately are alarming. I can help shut down around 1000 scam listings an hour. Those listings are on innocent people's accounts, people who either gave their information to phishers, or opened one of these latest emails.

We wish everyone would opt for Text Only.

Post 11 of 25

How to set "text only".

by vmillo - 8/11/06 6:26 AM In reply to: Open every one, no problem. by Brianstech

For Outlook Express, go to Tools > Options > Read tab.
Check "read all messages in plain text".

Post 12 of 25

Set Text Only In Thunderbird

by donniebnyc - 8/11/06 7:36 AM In reply to: Open every one, no problem. by Brianstech

This is a great idea. In Thunderbird, click View > Message Body As > Plain Text.

If you determine that a message is legit and want to view the HTML version, double-click it to open in a new window. Then click View > Message Body As > Original HTML. You will see the HTML in this message only without changing the global settings.

Post 13 of 25

Correction

by donniebnyc - 8/11/06 8:19 AM In reply to: Set Text Only In Thunderbird by donniebnyc

The global settings are changed.

So, after viewing a legit message in HTML you must reset to text only by clicking View > Message Body As > Plain Text.

Post 14 of 25

I don't use Outlook ANYTHING for E-mail.......

by Bbbjck - 8/11/06 5:08 PM In reply to: email security by vmillo

In the first place, if I haven't given my address out to someone I KNOW it and know that getting mail from others is a warning that it is most likely to be SPAM. E.G.: If I write to someone, I save a copy of that letter in my ''Sent'' folder until I hear back from them. This way if I recieve a 'suspicious' e-mail from and address I don't recognize I can 'compare notes' if it's not readily apparent who sent it but it seems to relate to that saved letter. OR if I expect to be corresponding with this person on a regular basis I simply add their e-mail address to my address book.

Secondly, by opening SPAM you can possibly/probably activate ''web beacons'' that are built into the body of the SPAM notifying the SPAMMER that they have in fact found a 'viable address' to reak havoc with. Web beacons can be only one pixel and therefore invisible to the eye.

I use Yahoo! E-mail and have, without incident, for over five years now. They have built in SPAM filters and Norton Anti-virus. Ninety-nine point-nine percent of the SPAM I get in there goes DIRECTLY into the "Bulk Folder". If any SPAM does slip through (spammers are getting craftier by the MINUTE!) and winds up in my 'Inbox', I KNOW it and can delete it unopened. I do, however open the Bulk folder and check for the odd/occasional e-mail that goes there instead of the Inbox where it belongs. I.E.: Someone forwards an e-mail to EVERYONE :| on their address list or a subscription hasn't had it's address entered into my address book.

There are other services that give the same type of e-mail service as Yahoo! if you don't care to use Yahoo! mail. I.E: Google, MSN, PalTalk, etc.

I use my ISP's (Road Runner) Webmail Page to enter my Mailbox there. I don't use it any more (because my late spouse spread that address out everywhere and it gets SPAMMED HARD) so I only go in once a month, or so, to see if I'm being spoofed or if there is something that has wound up in there that I actually do need. In the case of knowing whether or not I'm being spoofed I have my 'vacation message' set to go off. If I get my own message back I know that my address is being spoofed and report it to my ISP. In the case that I find something in there I do need I forward it to my Y! addy and inform the sender to send all future correspondences to my Y! addy. After almost two years of that my RR addy only gets about 20 SPAMs a day.

For additional 'protection' I have an e-mail addy set up through a forum website that I use to give out to those who I KNOW WILL pass on my address to 'advertisers' thus cutting down even further on the amount of SPAM I get. THAT account only gets opened enough to keep it active or retrieve stuff I do want. I usually let it stay full so the SPAM sent to it 'bounces' back to the spammer. :D

This is all before the plethora of anti-malware programs I run on my XP box. ;)

Post 15 of 25

Re: I don't use Outlook ANYTHING for E-mail..........

by Big Steve - 8/11/06 9:04 PM In reply to: I don't use Outlook ANYTHING for E-mail....... by Bbbjck

Your post happens to be a very detailed post concerning emails. I do quite a bit of emailing; I have an anti-virus software called Panda Platinum 2006 which scans my emails but according to your post; that may not be enough to protect my computer from security threats that can sneak into my computer by email?

My email is Outlook Express Version 6 which I do use quite a bit. These other accounts which you mentioned; Yahoo; Hotmail; Google and others; are these other email accounts free or do you have to pay for them?

Do I also understand you correctly that a virus can be sent to you via email if it's sent to you in HTML format and just to be safe you recommend opening up all of your emails in plain text format rather than HTML format?

I am signed up to several legitimate websites who send me emails from time to time; my own city has a pretty good website; I have added their email address to my safe list yet I still receive emails from my city's website which come in labeled as SPAM.

I'm also registered with a major credit card website which from time to time will send me email updates such as my current balance; my new statement has dropped; my payment has been posted and such; those emails come through listed as PHISHING EMAILS.

Just to play it safe I never open those emails; instead I go directly to the website sending me the email and check. Could my AV software which is Panda Platinum be causing these incoming emails to be labeled as such; SPAM or PHISHING? What exactly is SPAM? What do you mean by the term spoofed?

I just assumed that SPAM was a nuisance from advertisers who bombard you with their emails once they confirm they have reached a valid email address. Is SPAM considered to be dangerous; pose a real security threat to a computer or if controlled is SPAM considered to be just a nuisance?

Every day I receive emails from companies claiming that my mortgage application for $000,000.00 has been approved and to please call or I receive emails from discount Rx drug companies wanting to sell me prescription drugs; I never go to those type of websites although I have price checked certain prescription drugs at websites like Walgreens Drugs or Drugstore.com.

Are those received emails; the one informing me of my mortgage application or someone wanting to sell me discounted prescription drugs; are those considered to be SPAM? If such emails are SPAM then how did they get my legitimate email address?


Big Steve
Biloxi, Mississippi
08/11/06

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software