Tech Support > Computers & Technology > Virus & Worms > Re: Still not slowing
Re: Still not slowing
Posted by David Emerling on September 24th, 2003



"Bill" <blevins@access-4-free.com> wrote in message
news:9p12nvkupq871gdqu475nudg3e6fqptguh@4ax.com...
* * *

I did the same thing. Same result as you. The hits just keep on coming!

I'm really surprised that it has received no media attention.

I'm beginning to think that WE, as newsgroup posters, are the sole victims.
Most people who use the internet don't post in newsgroups. We're all saying
that the sky is falling and everybody else in the country is letting out a
collective yawn.

--
David Emerling - Memphis, TN
demerlin@(REMOVE_THIS)midsouth.rr.com
If you want to email me - edit the above email address appropriately.



Posted by Jeremiah McAuliffe on September 24th, 2003


On Wed, 24 Sep 2003 05:21:44 GMT, "David Emerling"
<demerlin@(REMOVE_THIS)midsouth.rr.com> wrote:

I've been getting close to 1,000 every 24 hours for a few days now.

I'm definitely surprised there hasn't been more attention to this.



Jeremiah McAuliffe alimhaq@SPAMBLOCKcity-net.com
http://speed.city-net.com/~alimhaq/mcauliffe/
Heavy Music
http://www.ampcast.com/jeremiah

Posted by Offbreed on September 24th, 2003


"David Emerling" <demerlin@(REMOVE_THIS)midsouth.rr.com> wrote in message news:<IR9cb.857$oC5.86@clmboh1-nws5.columbus.rr.com>...
One post on usenet with this ID and the box is full.

None of the other ID's has a single attempt, and I have never used
them for newsgroups.

I think you have a point.

Posted by Chuck on September 24th, 2003


On Wed, 24 Sep 2003 05:21:44 GMT, "David Emerling"
<demerlin@(REMOVE_THIS)midsouth.rr.com> wrote:

I don't think newsgroup posting is the sole vector in the spread of
this crap.

I took a look at my four most active mailboxes, and did a google
groups search for references to each of the four, to see how badly I
have exposed myself on the web. Then tried to correlate my exposure
to the flood I am seeing. Here's a description of my 4 mailboxes.

MB1: Web based, used for hobby and frivolous email. Has 4 references
in google group searching. Has received NO Swen email.

MB2: Web based, used for professional and serious email. Has 36
references in google group searching. Has received NO Swen email.

MB3: ISP based, used only for analysing and reporting spam. Has 11
references in google group searches. Has received hundreds of Swen
email.

MB4: Web based, my spamtrap mailbox. Has 546 references in google
searches. Has received maybe 19 Swen emails (only 15 have attachments
so its hard to be sure).

I did a brief random comparison between the google results, and my
newsgroup postings as a whole. I doubt that there are any additional
postings that google didn't detect, but could have been picked up by a
spammer or infected computer. The 51 google postings (MB1-3 totaled)
all reflect stupid mistakes I have made when posting, and neglected to
munge my email address. So I can't see an obvious connection between
my newsgroup postings, and my receipt of the crap.

What I am wondering is how we end this? Is the infection going to die
on its own? Or is there a random assortment of computer owners, ISPs,
and Swen recipients (like us) identifying and trying to notify the
owners of the infected computers? Has the flood at least stabilised,
so the ISPs that we have to send reports to might have the time to
read the reports, and identify and contact the owners of the infected
computers?



Chuck Croll
cacrollthespam@yahoo.com
Spam sucks - PLEASE get rid of the spam before emailing me!

Posted by Adam Russell on September 24th, 2003



"Chuck" <cacrollthespam@yahoo.com> wrote in message
news:ttl3nv445j16m7esm6jk9g2a5uap1kj19v@4ax.com...
I would think that it is hurting the isp's more than us. Doesn't it cost
them to move that much crap? They throw in email service for free, and I
would assume that is because most people dont normally get 100mb of emails a
day. Should be some good incentive for them to add a server side filter
that would automatically delete (or not accept) it.



Posted by Chuck on September 25th, 2003


On Wed, 24 Sep 2003 11:16:51 -0700, "Adam Russell"
<dontspamme_adamrussell@sbcglobal.net> wrote:

Some ISPs are trying to filter it. The problem there, just as
filtering commercial spam, is false positives - how do you ensure that
you don't drop something that the customer actually wanted to see?

The bottom line is that the consumer has to be ultimately responsible
for deciding what he wants in his mailbox. And has to take the
responsibility for what leaves his computer.

I've noted recently several notices that "...this email sent to me did
(previously) contain a virus...", sent by an ISP who apparently was
scanning outgoing email. Did they also notify their customer? The
notice didn't say so. They removed the virus, and sent me the email
anyway. All this did was prevent the virus from being transmitted -
it didn't cut down on the email in my mailbox.

The best the ISP on outgoing email can do is scan for infections; if
found, remove the infection and notify the "sender". The best an ISP
on incoming email can do is quarantine the email, and notify the
"recepient".

I, personally, report all spam that hits my mailbox. That's a
laborious process. Reporting Swen email is going to be even more
laborious - to me, and to the ISPs who are no doubt being inundated by
the complaints from everybody.

I keep thinking about the cleanup from this effort. It makes me
wonder if the originator of Swen didn't maybe intend it as a denial of
service attack against all the ISP abuse desks who have to deal with
normal commercial spam complaints - how better to eliminate the
possibility that next month, when someone starts sending commercial
spam, that his ISP will have the resources to research the complaints
from the recepients of his shit?


Chuck Croll
cacrollthespam@yahoo.com
I hate spam - Please get rid of the spam if you want to email me!!
Trusted Computing? Right! http://www.againsttcpa.com/

Posted by Adam Russell on September 25th, 2003



"Chuck" <cacrollthespam@sonic.net> wrote in message
news:tgg4nvgld9cm2ut1g5assf65eh3md5cs7q@4ax.com...
Give the customer the tools and let them decide how best to filter. In my
case I would set the serverside filter to delete anything that doesnt
actually have my email address or my name in the From field. There is such
a function in Yahoo and it would work fine except that instead of deleting
the offending email, it sends it to the trash folder which still counts
against my total allowed storage. They should modify their website to allow
me to delete it instead of just hide it. Instead, what I am forced to do is
to leave OE run 24 hours and have it delete the spam as it comes in.
Somewhat inconvenient for me and probably more load on their server than it
needs to be. My alternative would be to throw out my email address and
start over with a new one. I dont want to do that. Hopefully they will get
tired of it before I will and go ahead and make the modification to the
server filter.




Posted by Offbreed on September 25th, 2003


Chuck <cacrollthespam@yahoo.com> wrote in message news:<ttl3nv445j16m7esm6jk9g2a5uap1kj19v@4ax.com>. ..

Time correlations? Were the posts relativly recent?

Posted by peter on September 26th, 2003


On Thu, 25 Sep 2003 01:37:18 GMT, Chuck <cacrollthespam@sonic.net>
wrote:



The thought crossed my mind that someone sees this as a joke
about Microsoot.

The term "Microsoft Security Patch" is a joke in itself.
Everytime they create a security fix, they create three more security
problems. These are people who would try to fix a leaky roof with an
icepick. Someone decided not only to show how foolish this game is,
but to rub people's noses in it by using it as a subject line for the
offending e-mails.

If I didn't have to deal with it, I might even think the joke
is funny.

Peter


Posted by the shadow on September 26th, 2003


On Wed, 24 Sep 2003 12:54:10 -0500, Chuck wrote
(in message <ttl3nv445j16m7esm6jk9g2a5uap1kj19v@4ax.com>):

Maybe it depends on what newsgroup you posted to. Maybe posters to
alt.politics.democrats aren't bothered and posters to
alt.politics.republicans are? I have two email accounts. One I have made the
mistake of posting with a correct address. I am getting about seventy bogus
e-mails a day. this is also an account that I have made the mistake of
hitting the "please remove me from your mailing list" button. The other
account I never use for posting and I have not recieved any "microsoft
updates". Perhaps the people who post to Alt.sex get the most messages. I can
see somebody trying to punish the people who look at pictures of naked
women,etc. etc.

The shadow knows.


Posted by Chuck on September 27th, 2003


On Thu, 25 Sep 2003 23:42:39 GMT, peter <peterstjREMOVE@earthlink.net>
wrote:

Actually, it is kinda funny. Imagine sending a program to a dozen
computers - telling them to send the program to a dozen computers -
and so on and so on. It's a feeling of power. For someone who has no
life - and no ethics.

NOT FUNNY

KILL

Chuck
cacrollthespam@yahoo.com
Spam sucks - PLEASE get rid of the spam before emailing me!


Similar Posts