🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.electronics.design
Article #2631

Re: Worm and Virus attack

#2631
From: Spehro Pefhany
Date: Fri, 19 Sep 2003 20:13
54 lines
3269 bytes
On Fri, 19 Sep 2003 12:47:34 -0700, the renowned John Larkin
<jjlarkin@highSNIPlandTHIStechPLEASEnology.com> wrote:

>On Fri, 19 Sep 2003 12:22:00 -0700, Jim Thompson
><Jim-T@golana-will-get-you.com> wrote:
>
>>On 19 Sep 2003 12:02:11 -0700, Winfield Hill <whill@picovolt.com>
>>wrote:
>>
>>>Don Pearce wrote...
>>>>
>>>> On 19 Sep 2003 10:51:14 -0700, Aubrey >McIntosh wrote:
>>>>
>>>>> I have received almost 700 copies of worm or virus mail
>>>>> to this account [snipped] in the past 24 hours.
>>>>>
>>>>> This has been the GIBE virus, the new "returned mail" item.
>>>>>
>>>>> Anyone else?
>>>>
>>>> Everyone. At 700 you have come off lightly.
>>>
>>> I got over 1000 at home this morning, over 450 of them
>>> arriving in a single 5 minute period at about 0640 EST.
>>> Strangely, I got almost none at my work email.
>>>
>>> Thanks,
>>>    - Win
>>
>>Those of us running Eudora got NONE ;-)
>>
>>                                        ...Jim Thompson
>
>Netscape, none, but I don't see how one's email client affects this.
>At least with Netscape, unopened mail doesn't execute.
>
>What do the virus messages look like?

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html

A lot of them look like the "Microsoft" message that starts about
halfway down the above page. Or a fake bounced e-mail message. 

I've gotten about 1500 of them (at 140K+ each) in the last 30 hours.
8-(   Of course I'm not about to execute an unknown file, but it's
clogging things up like a mailbomb attack- and some incoming mails got
bounced overnight. 

Best regards, 
Spehro Pefhany
-- 
"it's the network..."                          "The Journey is the reward"
speff@interlog.com             Info for manufacturers: http://www.trexon.com
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Technical Details
Message-ID: <6qommvk7uajvg9t295na295c2d3rbh3ns0@4ax.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!newshub.sdsu.edu!elnk-nf2-pas!newsfeed.earthlink.net!sjc70.webusenet.com!news.webusenet.com!cyclone01.bloor.is.net.cable.rogers.com!news04.bloor.is.net.cable.rogers.com.POSTED!not-for-mail
References: <3f4939c.0309190951.5ee61d08@posting.google.com> <5pgmmv03dmmae8nlsdni4bkio3erd9h4gq@4ax.com> <bkfjrj02ee@drn.newsguy.com> <3qlmmv8utg4kia66g7eiu67ajosko6dj3e@4ax.com> <3emmmvksd41k7k3eh003q1cq8af34ej9k9@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 112d1e,4a531e8bd9cad7b2
X-Google-Attributes: gid112d1e,public
X-Google-Thread: 113866,4a531e8bd9cad7b2
X-Google-Attributes: gid113866,public
X-Google-ArrivalTime: 2003-09-19 13:13:47 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!newshub.sdsu.edu!elnk-nf2-pas!newsfeed.earthlink.net!sjc70.webusenet.com!news.webusenet.com!cyclone01.bloor.is.net.cable.rogers.com!news04.bloor.is.net.cable.rogers.com.POSTED!not-for-mail
From: Spehro Pefhany <speff@interlog.com>
Newsgroups: sci.electronics.design,austin.internet
Subject: Re: Worm and Virus attack
Organization: Rather
Message-ID: <6qommvk7uajvg9t295na295c2d3rbh3ns0@4ax.com>
References: <3f4939c.0309190951.5ee61d08@posting.google.com> <5pgmmv03dmmae8nlsdni4bkio3erd9h4gq@4ax.com> <bkfjrj02ee@drn.newsguy.com> <3qlmmv8utg4kia66g7eiu67ajosko6dj3e@4ax.com> <3emmmvksd41k7k3eh003q1cq8af34ej9k9@4ax.com>
X-Newsreader: Forte Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 54
Date: Fri, 19 Sep 2003 20:13:27 GMT
NNTP-Posting-Host: 24.42.27.249
X-Complaints-To: abuse@rogers.com
X-Trace: news04.bloor.is.net.cable.rogers.com 1064002407 24.42.27.249 (Fri, 19 Sep 2003 16:13:27 EDT)
NNTP-Posting-Date: Fri, 19 Sep 2003 16:13:27 EDT