OT: SWEN worm

Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
come in on an account used only in this group.

Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your
systems, please?

Thanks!

On Sat, 20 Sep 2003 13:59:23 GMT, richard <r.mcclary@insightbb.com> wrote:

>Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
>come in on an account used only in this group.
>
>Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your
>systems, please?

I've been hit with at least 500 copies of the worm since Thursday.

I think anyone who's posted anything to usenet is getting hit by it. I know of several people
scattered all over, all using different newsgroups, who are having to deal with it. I get
10-20 an hour. Since I use Agent and the attachments are never opened, it's no big deal.
They're just deleted.

________________________________

-= ®atzofratzo =-

"richard" <r.mcclary@insightbb.com> wrote in message
news:Xns93FC5B6D18DEDrmcclaryinsight...204.127.199.17...
> Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
> come in on an account used only in this group.
>
> Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your
> systems, please?

Me too. That'll teach us to obfuscate our email addresses before posting to usenet...

Shayne Wissler

"-= ®atzofratzo =-" <ratzofratzo@tampabay.rr.com> wrote in message
news:9doomvsh42c9oq3plakn868crf0c1aig4k@4ax.com...
> On Sat, 20 Sep 2003 13:59:23 GMT, richard <r.mcclary@insightbb.com> wrote:
>
> >Greetings! I've been hit by about 200 or so copies of the SWEN worm
since
> >THU 18-SEP. They've all come in on an account used only in this group.
> >
> >Am I the only one getting clobbered by this thing? Uh, could y'all
kindly
> >check your systems, please?
>
> I've been hit with at least 500 copies of the worm since Thursday.
>
> I think anyone who's posted anything to usenet is getting hit by it. I know of several people
> scattered all over, all using different newsgroups, who are having to deal with it. I get 10-20 an
> hour. Since I use Agent and the attachments are never opened, it's no big deal. They're just
> deleted.
>
>

I just spent the morning getting rid of the Gibe B worm.

--
Robin Hubert <cv2572@earthlink.net

In article <Xns93FC5B6D18DEDrmcclaryinsightbbcom@204.127.199.17>, richard
<r.mcclary@insightbb.com> wrote:

> Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
> come in on an account used only in this group.
>
> Am I the only one getting clobbered by this thing?

Nah, I've gotten about 3,000 infected e-mails in the past 48 hours although not all of them are this
particular pest. Fortunately my ISPs virus quarantine system has caught them all, although the worm
doesn't trouble my OS directly. But at least my mailbox hasn't been clogged up with this ****.

> Uh, could y'all kindly check your systems, please?

A complete scan from / on up showed no virii or worms in 78,000+ files, so that was nice to know.
Too bad Virex is so damned slow and took 4:50 to run the scan...

Thank you Microsoft for creating so *many* opportunities for creative software writers.

On Sat, 20 Sep 2003 11:08:03 -0500, Tim McNamara <timmcn@bitstream.net> wrote:

>Thank you Microsoft for creating so *many* opportunities for creative software writers.

If the tables were turned and the predominant OS and computer was made by Apple for the last several
years, you'd be blaming them instead of
MS. The dickheads that write bugs write them to infect the greatest number of computers at one
time, hence Windows attacks.

Blame the dickheads that write the bugs, not the dickheads at Microsoft.

________________________________

-= ®atzofratzo =-

In article <Xns93FC5B6D18DEDrmcclaryinsightbbcom@204.127.199.17>, richard
<r.mcclary@insightbb.com> writes:

>Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
>come in on an account used only in this group.
>
>Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your
>systems, please?

I don't know what I've been getting, I've not let any of the e-mails from unknown sources into my
system, especially if they have something embedded in the text and an attachment. I'm getting about
2 per hour.

Does that sound like the SWEN worm?

Thanks

Tom Gibb <TBGibb@aol.com

In article <20030920194721.05539.00000902@mb-m16.aol.com>, tbgibb@aol.com (TBGibb) wrote:

> In article <Xns93FC5B6D18DEDrmcclaryinsightbbcom@204.127.199.17>, richard
> <r.mcclary@insightbb.com> writes:
>
> >Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
> >come in on an account used only in this group.
> >
> >Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your systems,
> >please?
>
> I don't know what I've been getting, I've not let any of the e-mails from unknown sources into my
> system, especially if they have something embedded in the text and an attachment. I'm getting
> about 2 per hour.

Wow, I'm jealous. At peak I was getting about 2 per minute (that includes not just the SWEN worm but
also a couple other executables as well as loads of HTML e-mail with malicious HTML code of some
sort, all of which are far more common that usual since 18 Sept). But then I post a lot in a number
of different newsgroups.

In article <Hm_ab.531393$uu5.88518@sccrnsc04>, "Shayne Wissler" <thalesNOSPAM000@yahoo.com> wrote:

> "richard" <r.mcclary@insightbb.com> wrote in message
> news:Xns93FC5B6D18DEDrmcclaryinsight...204.127.199.17...
> > Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've
> > all come in on an account used only in this group.
> >
> > Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your systems,
> > please?
>
> Me too. That'll teach us to obfuscate our email addresses before posting to usenet...

Unfortunately, the better harvester programs can strip out things like your obvious NOSPAM stuck in
an e-mail address.

In article <jbapmvcll78660hheof5jokbrnqf5l96jd@4ax.com>,
-= ®atzofratzo =- <ratzofratzo@tampabay.rr.com> wrote:

> On Sat, 20 Sep 2003 11:08:03 -0500, Tim McNamara <timmcn@bitstream.net> wrote:
>
> >Thank you Microsoft for creating so *many* opportunities for creative software writers.
>
> If the tables were turned and the predominant OS and computer was made by Apple for the last
> several years, you'd be blaming them instead of MS. The dickheads that write bugs write them to
> infect the greatest number of computers at one time, hence Windows attacks.
>
> Blame the dickheads that write the bugs, not the dickheads at Microsoft.

Unfortunately it is a team effort between the various dickheads. Microsoft creates the climate in
which the vermin can flourish.

On Sat, 20 Sep 2003 13:59:23 GMT, richard <r.mcclary@insightbb.com> wrote:

>Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
>come in on an account used only in this group.
>
>Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your
>systems, please?
>
>Thanks!
I only wish Yahoo would get off their duff and block all of these incoming things from my yahoo
email account.

On Sat, 20 Sep 2003 14:21:31 GMT, -= ®atzofratzo =- <ratzofratzo@tampabay.rr.com> wrote:

<On Sat, 20 Sep 2003 13:59:23 GMT, richard <r.mcclary@insightbb.com> <wrote: < <>Greetings! I've
been hit by about 200 or so copies of the SWEN worm since <>THU 18-SEP. They've all come in on an
account used only in this group. <> <>Am I the only one getting clobbered by this thing? Uh, could
y'all kindly <>check your systems, please? < <I've been hit with at least 500 copies of the worm
since Thursday. < <I think anyone who's posted anything to usenet is getting hit by it.

It's NOT true that a usenet post = swen worm.

<I know of several people scattered all over, all using different <newsgroups, who are having to
deal with it. I get 10-20 an hour. <Since I use Agent and the attachments are never opened, it's no
big <deal. They're just deleted. < < < < <________________________________ < <-= ®atzofratzo =-

On Sat, 20 Sep 2003 19:27:00 GMT, -= ®atzofratzo =- <ratzofratzo@tampabay.rr.com> wrote:

<On Sat, 20 Sep 2003 11:08:03 -0500, Tim McNamara <<timmcn@bitstream.net> wrote: < < <>Thank you
Microsoft for creating so *many* opportunities for creative <>software writers. < <If the tables
were turned and the predominant OS and computer was made <by Apple for the last several years, you'd
be blaming them instead of
<MS. The dickheads that write bugs write them to infect the greatest <number of computers at one
time, hence Windows attacks.

No basis for this opinion. Just as likely is that MS paid little heed to security at the outset and
now the retrofit is either cost prohibitive or impossible without a starting from scratch.

<Blame the dickheads that write the bugs, not the dickheads at <Microsoft.

LOL. < <-= ®atzofratzo =-

"-= ®atzofratzo =-" <ratzofratzo@tampabay.rr.com> wrote in message

> Since I use Agent and the attachments are never opened, it's no big deal. They're just deleted.

It is a big deal. I only check my email a couple of times a day, and my isp mailbox has been full
each time (rejecting valid messages) for the last day or so.

Regards,

Suzy

In article <cv3qmv009p7d8eqpfbfb9kq9tt30ku1jpu@4ax.com>, Steven Woo <swoospam@earthlink.net> wrote:

> On Sat, 20 Sep 2003 13:59:23 GMT, richard <r.mcclary@insightbb.com> wrote:
>
> >Greetings! I've been hit by about 200 or so copies of the SWEN worm since THU 18-SEP. They've all
> >come in on an account used only in this group.
> >
> >Am I the only one getting clobbered by this thing? Uh, could y'all kindly check your systems,
> >please?
> >
> >Thanks!
>
> I only wish Yahoo would get off their duff and block all of these incoming things from my yahoo
> email account.

How much do you pay for that account?