E-mail spam filter for Microsoft Windows ™

About us

jwSpamSpy filters spams and viruses

What jwSpamSpy can do for you

  • Stops most spams
  • Your valid emails are safe
  • Doesn't waste your time

jwSpamSpy will stop most spam from reaching you. It combines a high detection rate with a very low rate of "false positives" and it doesn't need "training" or extensive setup. If any valid mail is treated as suspect or spam it can always be recovered. jwSpamSpy works with email programs such as Outlook Express, Microsoft Outlook and with many other types of email client software for Windows 2000 or XP. It can also be used with some webmail providers.

How does it work? All your email goes through a mailbox on a mail server, from which your computer usually picks it up. jwSpamSpy reads this mailbox, checks which emails are spam, removes those and leaves you with only the valid emails. By configuring your email program to use jwSpamSpy as a go-between (proxy) for picking up mails, this process becomes largely transparent to the user.

jwSpamSpy is easy to install. Once installed, you just pick up your mail the way you did before, but without virtually all the spam. jwSpamSpy runs in the background and doesn't take up any of your valuable time. When using jwSpamSpy, double click on the icon in the system tray (near the clock) to change settings or to get more information.

If you are a current user of jwSpamSpy, either the evaluation version or the registered version, see
"What's new" for recent improvements, known problems and other useful hints.


Free Download:
Try before you buy

Buy the full version:
QuickBuy at Share-It!

Your order is secure
with Share-It!

Introduction Features Affiliates What's new? ReadMe file Frequently Asked Questions (FAQ) Troubleshooting guide Technical terms and definitions Links


jwSpamSpy has been tested extensively in-house and by our partners; it has filtered all our emails since June 2003. Currently we filter about 140,000 emails per day (that's 1 Million emails per weeks!) coming into our servers, which is how we keep track of many of the spammers listed on our website.

Download and Purchase at ShareIt.com:
Download free evaluation version or purchase a license for the full version here

jwSpamSpy features in detail

Recognizes "fingerprints" of spam software
We have analyzed millions of spams, looking for markers that identify the kinds of software that spammers use to send emails. We have also checked tens of thousands of legitimate mails from a large variety of sources for markers for common legitimate email programs. jwSpamSpy looks at every aspect of an email to determine if it is spam or legitimate.

Extensive database of known spammer domains, spam hosters, etc.
Domain blacklists are one of the most effective filter mechanisms. jwSpamSpy knows tens of thousands of spammer domain names, with new ones being recognized automatically and also fed to clients via a secure
online update mechanism.

Realtime check of SURBL (Spam URI Block List)
SURBL (http://www.surbl.org) is a public service that tracks domain names advertised in spam. jowein.de LLC is one of the main data providers of SURBL, but by querying SURBL for domains we also detect spam domains that have been recognized from other sources, further boosting detection rates.

Supports external DNS blacklist servers
jwSpamSpy checks the IP-addresses of machines used to deliver email versus external blacklist servers, including Spamhaus.org, the most reliable blacklist server available. Any mail sent from blacklisted servers will be subjected to close scrutiny.

Supports whitelisting but doesn't require it
If you want to, you can add the addresses of your friends, family and business partners to a whitelist of trusted senders. You can whitelist individual addresses or domains or both. You can import addresses from your address book too. But best of all, you don't have to do any of that. We receive almost 3000 legitimate emails per month. Running without whitelists we find that only rarely does jwSpamSpy flag a legitimate mail as suspicious (i.e. forward it as an attachment), in which case it can easily be retrieved. jwSpamSpy classes mails into three categories: legitimate, suspicious and spam. Our conservative filtering algorithm looks as all aspects of mail to classify it, using multiple criteria to draw its conclusions. Because of this approach it will not stop legitimate mail as spam. We primarily give you the option of whitelisting for your own peace of mind :-)

Filters all current email worms (Netsky, Swen/Gibe, Sober, etc.)
Several hundred viruses per month are sent to our mailboxes, but jwSpamSpy filters them all. For several months, several variants of Netsky have been the dominating variety, followed by Swen and the Sober family of worms. jwSpamSpy provides both virus protection and spam filtering, for the price that others charge for each of these two features individually.

Virus Reporting Assistant:
Most virus infected machines do not run any virus scanners. Generally, they keep on spreading viruses until a virus recipient notifies the service provider (ISP) via which the infected machine connects to the net. Since current viruses do not include the sender's email address, finding out which machine is infected and having its owner notified is difficult. jwSpamSpy greatly simplifies this complex task. It not only filters all viruses it recognizes, it also keeps a record of associated essential information about these virus mails that is sufficient for contacting the service providers. The supplied information then allows them to identify the customer who has a problem.

When viruses have been filtered, you can invoke the Virus Reporting Assistant from the Tools menu. It will open a plain text file (abuse.txt in the logs folder of jwSpamSpy, usually C:\Program Files\JoeWein\SpamSpy\logs). For every intercepted virus there will be an entry similar to the following example. You can cut and paste these into your email program to quickly and efficiently report virus-infected computers:

Sat, 29 May 2004 22:13:49 +0200
Virus 'netsky' from f22134.upc-f.chello.nl []

We have received a virus-email from your network.

The virus-email contained the following dangerous attachment:
    File name: Informations.zip
    File type: zip
    BASE64-encoded size: 30730

Here is the mail header of the virus mail:

Received: from f22134.upc-f.chello.nl ([] helo=mydomain) 
 by eta.mc1.myprovider with esmtp (Exim 4.34) id 1BUADD-0007v9-ED 
 for myname@mydomain; Sat, 29 May 2004 22:13:51 +0200
From: twinkletoesn22@hotmail.com
To: myname@mydomain
Subject: Information
Date: Sat, 29 May 2004 22:13:49 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0002_00000542.00007389"
X-Priority: 1
X-MSMail-Priority: High
The initial line is the date header generated by the virus, an indication when it sent the virus mail. This is for your information only, in case you are processing a log of viruses received over a number of days. The next line is the contact email address of the ISP whose customer sent the virus. It needs to be pasted into the To: line of a new email. The following line goes into the Subject: line. The remainder needs to be copied into the message body. Mail this off and the ISP should have all the information required to track down the customer responsible for the virus sent to you.

Filters "virus warning" spam
Modern viruses send out mails that do not contain any email address under which the sending computer can be reached. What appears to be the sender address is actually the address of another person to which the virus will also send a virus mail – with yet another fake sender address. When you receive an virus email, you get no valid email address for the sender. Despite this well-documented behaviour, many virus filter products offer the option of mailing a warning to the innocent person whose address has been abused as a fake sender address by the virus. In many of these products, sending this kind of "warning" spam is even the default configuration. jwSpamSpy detects several dozen types of virus warning spam and filters it out.

Filters virus bounces
Because modern viruses abuse addresses of third parties as fake sender addresses, it is quite possible for you to receive a notification by email explaining that a mail from an email address belonging to you was not deliverable to someone that you never sent any mail to! Such non-delivery notifications are commonly known as "bounces". While you may want to know that one of your own mails did not reach the recipient because of a mistyped address, bounces sent for other people's viruses are annoying and even dangerous. In many cases, the complete (virus-)email will be attached to this notification. jwSpamSpy treats such non-delivery notifications for viruses like it treats virus emails themselves: It filters them and collects information about the actual virus sender, assisting you to report it to the service provider of the infected computer.

How to register as an affiliate:
Do you like our program and would recommend it to others? You can do that and get paid for every sale to a customer you referred to our online shop. Register as an affiliate and receive a percentage of every sale made because of a referral by you. Click the following link to sign up:

Once you have signed up, visit the ShareIt website and log in as an affiliate to build links to the jwSpamSpy online shopping site that will contain your affiliate ID. Every sale made through a link by you will have have your account credited with a percentage.

Some useful explantions of email and spam terms:

Blacklist or blocklist: A list of items (email addresses, IP addresses or domain names) that are cause for refusing delivery of an email if they are detected in the email.

POP3: Post Office Protocol, version 3. This is a set of commands and responses used by email programs and mail servers to deliver mail from the mail server to the mail client, such as Outlook Express. You don't need to know exactly about how this works - as long as your email account can be accessed via POP3 (ask your email provider or system administrator if in doubt), jwSpamSpy will work ith it.

Spam: Unsolicited bulk email. This is any email sent to multiple addresses that the recipients do not want to receive.

Whitelist: A list of items (email addresses, subject lines) that enable delivery of an email despite any filtering that may normally occur.

Copyright © 2004-2011 joewein.de LLC. Privacy policy