Article View: sci.electronics.design
Article #2631Re: Worm and Virus attack
From: Spehro Pefhany
Date: Fri, 19 Sep 2003 20:13
Date: Fri, 19 Sep 2003 20:13
54 lines
3269 bytes
3269 bytes
On Fri, 19 Sep 2003 12:47:34 -0700, the renowned John Larkin <jjlarkin@highSNIPlandTHIStechPLEASEnology.com> wrote: >On Fri, 19 Sep 2003 12:22:00 -0700, Jim Thompson ><Jim-T@golana-will-get-you.com> wrote: > >>On 19 Sep 2003 12:02:11 -0700, Winfield Hill <whill@picovolt.com> >>wrote: >> >>>Don Pearce wrote... >>>> >>>> On 19 Sep 2003 10:51:14 -0700, Aubrey >McIntosh wrote: >>>> >>>>> I have received almost 700 copies of worm or virus mail >>>>> to this account [snipped] in the past 24 hours. >>>>> >>>>> This has been the GIBE virus, the new "returned mail" item. >>>>> >>>>> Anyone else? >>>> >>>> Everyone. At 700 you have come off lightly. >>> >>> I got over 1000 at home this morning, over 450 of them >>> arriving in a single 5 minute period at about 0640 EST. >>> Strangely, I got almost none at my work email. >>> >>> Thanks, >>> - Win >> >>Those of us running Eudora got NONE ;-) >> >> ...Jim Thompson > >Netscape, none, but I don't see how one's email client affects this. >At least with Netscape, unopened mail doesn't execute. > >What do the virus messages look like? http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html A lot of them look like the "Microsoft" message that starts about halfway down the above page. Or a fake bounced e-mail message. I've gotten about 1500 of them (at 140K+ each) in the last 30 hours. 8-( Of course I'm not about to execute an unknown file, but it's clogging things up like a mailbomb attack- and some incoming mails got bounced overnight. Best regards, Spehro Pefhany -- "it's the network..." "The Journey is the reward" speff@interlog.com Info for manufacturers: http://www.trexon.com Embedded software/hardware/analog Info for designers: http://www.speff.com
Technical Details
Message-ID:
<6qommvk7uajvg9t295na295c2d3rbh3ns0@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!newshub.sdsu.edu!elnk-nf2-pas!newsfeed.earthlink.net!sjc70.webusenet.com!news.webusenet.com!cyclone01.bloor.is.net.cable.rogers.com!news04.bloor.is.net.cable.rogers.com.POSTED!not-for-mailReferences:
<3f4939c.0309190951.5ee61d08@posting.google.com> <5pgmmv03dmmae8nlsdni4bkio3erd9h4gq@4ax.com> <bkfjrj02ee@drn.newsguy.com> <3qlmmv8utg4kia66g7eiu67ajosko6dj3e@4ax.com> <3emmmvksd41k7k3eh003q1cq8af34ej9k9@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 112d1e,4a531e8bd9cad7b2 X-Google-Attributes: gid112d1e,public X-Google-Thread: 113866,4a531e8bd9cad7b2 X-Google-Attributes: gid113866,public X-Google-ArrivalTime: 2003-09-19 13:13:47 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!newshub.sdsu.edu!elnk-nf2-pas!newsfeed.earthlink.net!sjc70.webusenet.com!news.webusenet.com!cyclone01.bloor.is.net.cable.rogers.com!news04.bloor.is.net.cable.rogers.com.POSTED!not-for-mail From: Spehro Pefhany <speff@interlog.com> Newsgroups: sci.electronics.design,austin.internet Subject: Re: Worm and Virus attack Organization: Rather Message-ID: <6qommvk7uajvg9t295na295c2d3rbh3ns0@4ax.com> References: <3f4939c.0309190951.5ee61d08@posting.google.com> <5pgmmv03dmmae8nlsdni4bkio3erd9h4gq@4ax.com> <bkfjrj02ee@drn.newsguy.com> <3qlmmv8utg4kia66g7eiu67ajosko6dj3e@4ax.com> <3emmmvksd41k7k3eh003q1cq8af34ej9k9@4ax.com> X-Newsreader: Forte Agent 1.93/32.576 English (American) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 54 Date: Fri, 19 Sep 2003 20:13:27 GMT NNTP-Posting-Host: 24.42.27.249 X-Complaints-To: abuse@rogers.com X-Trace: news04.bloor.is.net.cable.rogers.com 1064002407 24.42.27.249 (Fri, 19 Sep 2003 16:13:27 EDT) NNTP-Posting-Date: Fri, 19 Sep 2003 16:13:27 EDT