Re: Worm and Virus attack

Article View: sci.electronics.design

Article #2608

Back to sci.electronics.design Previous Next

#2608

From: Dusty Rhodes
Date: Wed, 24 Sep 2003 22:49

38 lines
2820 bytes

Mark Fergerson wrote:
> Dusty Rhodes wrote:
>> Ben Bradley wrote:
>
> <snip>
>
>>>   People are talking about obscene volumes, thousands per day, but
>>> I'm "only" getting a few dozen a day.
>>
>>
>> I haven't seen so much as single one, at least not the MS scam
>> version. Only very rarely do I see others. I figured it was due to
>> effective counter measures at Texas.net, but I'm not seeing it on
>> any of my other accounts, either. Ah, the benefits of living right,
>> I suppose.
>
>    It's likely because you munged your reply address
> (included "THISPART") right off the bat. When the harvesters
> go through the newsgroups and adds yours to their list, it
> doesn't work so you get no reflections.
>
>    I just wish I'd munged mine earlier. Sigh.

It does appear to be aimed at Usenet users. Not only are regular users
seeing higher volumes of the worm via e-mail than others, it's now being
posted to many groups, which strikes me as particularly stupid. If one knows
enough to mung one's return addy, it is very likely one also knows better
than to download and run some alleged MS patch posted to Usenet by random
idiots.

At least the worm authors/distributors were/are clueless, as are most script
kiddy wannabes. Imagine the potential damage had they bothered to
incorporate any of the mung removing systems in use by the spamwhore
harvesters.

Cheers,

Dusty

Technical Details

Message-ID: <Zbpcb.90755$z32.51358@twister.austin.rr.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!cambridge1-snf1.gtei.net!news.gtei.net!bos-service1.ext.raytheon.com!cyclone.swbell.net!newsfeed1.easynews.com!easynews.com!easynews!news-west.rr.com!news.rr.com!cyclone.austin.rr.com!twister.austin.rr.com.POSTED!53ab2750!not-for-mail

References:

<3f4939c.0309190951.5ee61d08@posting.google.com> <3f70cdb1.88645463@newsgroups.bellsouth.net> <thmcb.128342$834.98699@twister.austin.rr.com> <3F721832.8060904@biz.ness>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 112d1e,4a531e8bd9cad7b2
X-Google-Attributes: gid112d1e,public
X-Google-Thread: 113866,4a531e8bd9cad7b2
X-Google-Attributes: gid113866,public
X-Google-ArrivalTime: 2003-09-24 15:49:30 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!cambridge1-snf1.gtei.net!news.gtei.net!bos-service1.ext.raytheon.com!cyclone.swbell.net!newsfeed1.easynews.com!easynews.com!easynews!news-west.rr.com!news.rr.com!cyclone.austin.rr.com!twister.austin.rr.com.POSTED!53ab2750!not-for-mail
From: "Dusty Rhodes" <crustydusty1@THIS PARThotmail.com>
Newsgroups: sci.electronics.design,austin.internet
References: <3f4939c.0309190951.5ee61d08@posting.google.com> <3f70cdb1.88645463@newsgroups.bellsouth.net> <thmcb.128342$834.98699@twister.austin.rr.com> <3F721832.8060904@biz.ness>
Subject: Re: Worm and Virus attack
Lines: 40
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <Zbpcb.90755$z32.51358@twister.austin.rr.com>
Date: Wed, 24 Sep 2003 22:49:29 GMT
NNTP-Posting-Host: 24.175.47.62
X-Complaints-To: abuse@rr.com
X-Trace: twister.austin.rr.com 1064443769 24.175.47.62 (Wed, 24 Sep 2003 17:49:29 CDT)
NNTP-Posting-Date: Wed, 24 Sep 2003 17:49:29 CDT
Organization: Road Runner - Texas

Reply to Parent Message