the EXE enclosures are fixable, but RSS blog spam is harder