E-mail spam filter for Microsoft Windows ™
|
|
jwSpamSpy E-mail spam filter for Microsoft Windows ™ |
Introduction
Features
Affiliates
What's new?
ReadMe file
Frequently Asked Questions (FAQ)
Troubleshooting guide
Technical terms and definitions
Links
Features:
jwSpamSpy has been tested extensively in-house and by our partners; it has filtered all our emails since June 2003. Currently we filter about 140,000 emails per day (that's 1 Million emails per weeks!) coming into our servers, which is how we keep track of many of the spammers listed on our website.
Download and Purchase at ShareIt.com:
Recognizes "fingerprints" of spam software
Extensive database of known spammer domains, spam hosters, etc.
Realtime check of SURBL (Spam URI Block List)
Supports external DNS blacklist servers
Supports whitelisting but doesn't require it
Filters all current email worms
Virus Reporting Assistant:
Filters "virus warning" spam
Filters virus bounces
How to register as an affiliate:
Some useful explantions of email and spam terms:
Blacklist or blocklist: A list of items (email addresses, IP addresses or domain names) that are cause for refusing delivery of an email if they are detected in the email.
POP3: Post Office Protocol, version 3. This is a set of commands and responses used by email programs and mail servers to deliver mail from the mail server to the mail client, such as Outlook Express. You don't need to know exactly about how this works - as long as your email account can be accessed via POP3 (ask your email provider or system administrator if in doubt), jwSpamSpy will work ith it.
Spam: Unsolicited bulk email. This is any email sent to multiple addresses that the recipients do not want to receive.
Whitelist: A list of items (email addresses, subject lines) that enable delivery of an email despite any filtering that may normally occur.
Copyright © 2004-2011 joewein.de LLC.
Privacy policy
(you can easily whitelist contacts from your address book)
(Outlook, Outlook Express, Netscape, Eudora, Thunderbird, TheBat!, etc.)
Spam filtering without time limit / one year of free online updates.
Download free evaluation version or
purchase a license for the full version here
jwSpamSpy features in detail
We have analyzed millions of spams, looking for markers that identify the kinds of software that spammers use to send emails. We have also checked tens of thousands of legitimate mails from a large variety of sources for markers for common legitimate email programs. jwSpamSpy looks at every aspect of an email to determine if it is spam or legitimate.
Domain blacklists are one of the most effective filter mechanisms. jwSpamSpy knows tens of thousands of spammer domain names, with new ones being recognized automatically and also fed to clients via a secure online update mechanism.
SURBL (http://www.surbl.org) is a public service that tracks domain names advertised in spam. jowein.de LLC is one of the main data providers of SURBL, but by querying SURBL for domains we also detect spam domains that have been recognized from other sources, further boosting detection rates.
jwSpamSpy checks the IP-addresses of machines used to deliver email versus external blacklist servers, including Spamhaus.org, the most reliable blacklist server available. Any mail sent from blacklisted servers will be subjected to close scrutiny.
If you want to, you can add the addresses of your friends, family and business partners to a whitelist of trusted senders. You can whitelist individual addresses or domains or both. You can import addresses from your address book too. But best of all, you don't have to do any of that. We receive almost 3000 legitimate emails per month. Running without whitelists we find that only rarely does jwSpamSpy flag a legitimate mail as suspicious (i.e. forward it as an attachment), in which case it can easily be retrieved. jwSpamSpy classes mails into three categories: legitimate, suspicious and spam. Our conservative filtering algorithm looks as all aspects of mail to classify it, using multiple criteria to draw its conclusions. Because of this approach it will not stop legitimate mail as spam. We primarily give you the option of whitelisting for your own peace of mind :-)
Several hundred viruses per month are sent to our mailboxes, but jwSpamSpy filters them all. For several months, several variants of Netsky have been the dominating variety, followed by Swen and the Sober family of worms. jwSpamSpy provides both virus protection and spam filtering, for the price that others charge for each of these two features individually.
Most virus infected machines do not run any virus scanners. Generally, they keep on spreading viruses until a virus recipient notifies the service provider (ISP) via which the infected machine connects to the net. Since current viruses do not include the sender's email address, finding out which machine is infected and having its owner notified is difficult. jwSpamSpy greatly simplifies this complex task. It not only filters all viruses it recognizes, it also keeps a record of associated essential information about these virus mails that is sufficient for contacting the service providers. The supplied information then allows them to identify the customer who has a problem.
When viruses have been filtered, you can invoke the Virus Reporting Assistant from the Tools menu. It will open a plain text file (abuse.txt in the logs folder of jwSpamSpy, usually C:\Program Files\JoeWein\SpamSpy\logs). For every intercepted virus there will be an entry similar to the following example. You can cut and paste these into your email program to quickly and efficiently report virus-infected computers:
The initial line is the date header generated by the virus, an indication when it sent the virus mail. This is for your information only, in case you are processing a log of viruses received over a number of days. The next line is the contact email address of the ISP whose customer sent the virus. It needs to be pasted into the To: line of a new email. The following line goes into the Subject: line. The remainder needs to be copied into the message body. Mail this off and the ISP should have all the information required to track down the customer responsible for the virus sent to you.
Sat, 29 May 2004 22:13:49 +0200
abuse@chello.nl
Virus 'netsky' from f22134.upc-f.chello.nl [80.56.22.134]
We have received a virus-email from your network.
The virus-email contained the following dangerous attachment:
File name: Informations.zip
File type: zip
BASE64-encoded size: 30730
Here is the mail header of the virus mail:
Received: from f22134.upc-f.chello.nl ([80.56.22.134] helo=mydomain)
by eta.mc1.myprovider with esmtp (Exim 4.34) id 1BUADD-0007v9-ED
for myname@mydomain; Sat, 29 May 2004 22:13:51 +0200
From: twinkletoesn22@hotmail.com
To: myname@mydomain
Subject: Information
Date: Sat, 29 May 2004 22:13:49 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0002_00000542.00007389"
X-Priority: 1
X-MSMail-Priority: High
Modern viruses send out mails that do not contain any email address under which the sending computer can be reached. What appears to be the sender address is actually the address of another person to which the virus will also send a virus mail – with yet another fake sender address. When you receive an virus email, you get no valid email address for the sender. Despite this well-documented behaviour, many virus filter products offer the option of mailing a warning to the innocent person whose address has been abused as a fake sender address by the virus. In many of these products, sending this kind of "warning" spam is even the default configuration. jwSpamSpy detects several dozen types of virus warning spam and filters it out.
Because modern viruses abuse addresses of third parties as fake sender addresses, it is quite possible for you to receive a notification by email explaining that a mail from an email address belonging to you was not deliverable to someone that you never sent any mail to! Such non-delivery notifications are commonly known as "bounces". While you may want to know that one of your own mails did not reach the recipient because of a mistyped address, bounces sent for other people's viruses are annoying and even dangerous. In many cases, the complete (virus-)email will be attached to this notification. jwSpamSpy treats such non-delivery notifications for viruses like it treats virus emails themselves: It filters them and collects information about the actual virus sender, assisting you to report it to the service provider of the infected computer.
Do you like our program and would recommend it to others? You can do that and get paid for every sale to a customer you referred to our online shop. Register as an affiliate and receive a percentage of every sale made because of a referral by you. Click the following link to sign up:
Once you have signed up, visit the ShareIt website and log in as an affiliate to build links to the jwSpamSpy online shopping site that will contain your affiliate ID. Every sale made through a link by you will have have your account credited with a percentage.
