Article View: sci.electronics.design
Article #2609Re: Worm and Virus attack
From: Not Me
Date: Wed, 24 Sep 2003 23:05
Date: Wed, 24 Sep 2003 23:05
38 lines
3200 bytes
3200 bytes
On Wed, 24 Sep 2003 22:49:29 GMT, "Dusty Rhodes" <crustydusty1@THIS PARThotmail.com> wrote: >Mark Fergerson wrote: >> Dusty Rhodes wrote: >>> Ben Bradley wrote: >> >> <snip> >> >>>> People are talking about obscene volumes, thousands per day, but >>>> I'm "only" getting a few dozen a day. >>> >>> >>> I haven't seen so much as single one, at least not the MS scam >>> version. Only very rarely do I see others. I figured it was due to >>> effective counter measures at Texas.net, but I'm not seeing it on >>> any of my other accounts, either. Ah, the benefits of living right, >>> I suppose. >> >> It's likely because you munged your reply address >> (included "THISPART") right off the bat. When the harvesters >> go through the newsgroups and adds yours to their list, it >> doesn't work so you get no reflections. >> >> I just wish I'd munged mine earlier. Sigh. > >It does appear to be aimed at Usenet users. Not only are regular users >seeing higher volumes of the worm via e-mail than others, it's now being >posted to many groups, which strikes me as particularly stupid. If one knows >enough to mung one's return addy, it is very likely one also knows better >than to download and run some alleged MS patch posted to Usenet by random >idiots. I'm getting about 100 per day on my regular email address that has never been used on usenet. They may be harvesting from other locations as well, as I have use my regular email on bulletin boards. my usenet address is getting hammered as well, but I expect that all the time in any case.
Technical Details
Message-ID:
<4m84nvo3229lorktic6p3ojq7ol96sjjli@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!wn14feed!worldnet.att.net!216.166.71.14!border3.nntp.aus1.giganews.com!intern1.nntp.aus1.giganews.com!nntp.giganews.com!news.giganews.com.POSTED!not-for-mailReferences:
<3f4939c.0309190951.5ee61d08@posting.google.com> <3f70cdb1.88645463@newsgroups.bellsouth.net> <thmcb.128342$834.98699@twister.austin.rr.com> <3F721832.8060904@biz.ness> <Zbpcb.90755$z32.51358@twister.austin.rr.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 112d1e,4a531e8bd9cad7b2 X-Google-Attributes: gid112d1e,public X-Google-Thread: 113866,4a531e8bd9cad7b2 X-Google-Attributes: gid113866,public X-Google-ArrivalTime: 2003-09-24 15:58:20 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!wn14feed!worldnet.att.net!216.166.71.14!border3.nntp.aus1.giganews.com!intern1.nntp.aus1.giganews.com!nntp.giganews.com!news.giganews.com.POSTED!not-for-mail NNTP-Posting-Date: Wed, 24 Sep 2003 17:58:18 -0500 From: Not Me <notme@springmail.com> Newsgroups: sci.electronics.design,austin.internet Subject: Re: Worm and Virus attack Date: Wed, 24 Sep 2003 18:05:04 -0500 Message-ID: <4m84nvo3229lorktic6p3ojq7ol96sjjli@4ax.com> References: <3f4939c.0309190951.5ee61d08@posting.google.com> <3f70cdb1.88645463@newsgroups.bellsouth.net> <thmcb.128342$834.98699@twister.austin.rr.com> <3F721832.8060904@biz.ness> <Zbpcb.90755$z32.51358@twister.austin.rr.com> X-Newsreader: Forte Agent 1.8/32.548 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 38 X-Trace: sv3-Bqy8HRxhw5isgiNjdhHkZXN7rmmk2JbuZhQzsnvV2CtuktzQPeTSA0EH9s8gp+UEsbtss1RcVYPgYKE!5jSw1iLpj7zMttDiKrR3kPLp0sRlmaBQbmLXmcaAMYiGjEmzhVjYcLMlanwpm/ogYOvv X-Complaints-To: abuse@giganews.com X-DMCA-Notifications: http://www.giganews.com/info/dmca.html X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1