*** ATTENTION MICROSOFT ****

  • Thread starter Thread starter One Handed Man [ OHM ]
  • Start date Start date
O

One Handed Man [ OHM ]

Please do something about these spam mails from people purporting to be you.
Please track this person down and nail him.

See the post below from 'Michael'

In the header, the followinh details can be found

From: "Michael" <[email protected]>
Subject: Taste this pack from M$ Corporation
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="uvjfwqeazuc"
Message-ID: <[email protected]>
Newsgroups:
microsoft.public.dotnet.framework.wmi,microsoft.public.dotnet.general,micros
oft.public.dotnet.languages.csharp,microsoft.public.dotnet.languages.jscript
,microsoft.public.dotnet.languages.vb,microsoft.public.dotnet.languages.vb.c
ontrols
Date: Sun, 28 Sep 2003 20:38:17 -0700
NNTP-Posting-Host: c211-28-189-233.eburwd3.vic.optusnet.com.au
211.28.189.233
Path: TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
Lines: 1
Xref: TK2MSFTNGP08.phx.gbl microsoft.public.dotnet.general:111861
microsoft.public.dotnet.languages.csharp:189017
microsoft.public.dotnet.languages.jscript:5920
microsoft.public.dotnet.languages.vb:143436
microsoft.public.dotnet.languages.vb.controls:2822
microsoft.public.dotnet.framework.wmi:131
 
This is a virus (the Swen virus), not spam. The virus propogates itself
through e-mail and newsgroup postings. (Note how the virus posts originate
from many different IP addresses.) If you manage to identify "Michael"
(i.e., the person from whose computer this was sent), you'll just find some
clueless user whose computer is infected -- not someone who is deliberately
spreading the virus.

http://www.europe.f-secure.com/v-descs/swen.shtml
 
We know that... =)

We just want someone to filter it. =)

Oh, but then Verisign had to jump in with there brilliant idea of making
every single domain name conceivable "resolveable"

Once again... who thought *THIS* was a good idea....
 
I'm getting sick and tired of the damn emails that I have been receiving.
They are *obviously* linked to this newsgroup that is the most annoying
thing. I game my address but on a convoluted way and still I got spammed.

I must have had in excess of 20 virus emails sent to me over the past few
days. Anyone else experiencing this?

Nick.

--
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
"No matter. Whatever the outcome, you are changed."

Fergus - September 5th 2003
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
 
20! Lucky Bugger! (For the Brits up in here)

I get roughly 200 a day... my mail provider is a little pissed especially
since we use IMAP. =)
 
Hi Nick,

20 over the last fews days, huh? Man, that's a Major Bummer!!

Here's some stats that I've been keeping:


Total Batch When Cleared Mins/Mails = MM:SS per message
65 65 received in Inbox
207 142 deleted by MailWasher - Thanks to the guy who told me :-)
380 173 deleted by MailWasher Mon evening
409 29 deleted by MailWasher Tue morning
526 117 Tue evening 7:40pm 720/117 = 6:10
572 48 Tue evening 11:10pm 210/48 = 4:22
619 47 Tue night 2:10am 180/47 = 3:50
675 56 Wed morning 9:00am 410/56 = 7:20
757 82 Wed evening 8:25pm 685/78 = 8:45
880 123 Thu evening 7:30pm 1385/123 = 11:15
939 53 Fri morning 9:35am 845/59 = 14:20
983 44 Fri evening 9:40pm 725/44 = 16:30
1013 36 Sat morning 10:40am 780/36 = 21:40
1050 37 Sat evening 8:30pm 590/37 = 16:00
1093 43 Sun morning 7:40am 570/43 = 15:35
1130 37 Sun evening 9:45pm 845/37 = 22:50
1160 30 Mon morning 9:55am 730/30 = 24:20
1212 52 Tue morning 4:30am 1115/52 = 21:25

As you can see, it's not as ferocious as a week ago, but its still pretty
heavy.

Hope you don't get another couple, Nick - that'll really piss you off!!
;-)

Flying Frank,
Big Top, CA
 
I had about 100 last friday and in the end I had to terminate my mailbox, it
was just to annoying.

I hope the catch the b*st%rd who wrote this virus, and lock the person up
for it.

OHM
 
Hi there,
This is a virus (the Swen virus), not spam. The virus propogates itself
through e-mail and newsgroup postings. (Note how the virus posts originate
from many different IP addresses.) If you manage to identify "Michael"
(i.e., the person from whose computer this was sent), you'll just find some
clueless user whose computer is infected -- not someone who is deliberately
spreading the virus.

LOL I got several copies from a traceable email address, I obtained the
phone number and it emminated from the conservative party!!!

Thus and so I gave them a call and let me feelings be known...

"Buy a virus checker, it only costs £30!!!!"

Nick.

--
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
"No matter. Whatever the outcome, you are changed."

Fergus - September 5th 2003
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
 
Hi "Flying Frank",

Sounds like you've been hit big time, the most annoying thing is that
it's a damn person obtaining the email addresses, I wrote my email address
in such a way that I shouldn't have been able to have been picked up by an
automated system, maybe they are more clever than I first thought?

Interesting name by the way....

Nick.

--
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
"No matter. Whatever the outcome, you are changed."

Fergus - September 5th 2003
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
 
Hi Nick,

Perhaps a friend or associate of yours has the virus and you got plucked
out of their address book. It may even be random - maybe the virus tries
various name combinations with every mail server it gets hold of. I don't
think you're getting enough to be a newsgroup victim.

You like my name, huh? I didn't choose it, a friend foisted it upon me. I
was out for a walk one evening wearing my "Harry Enfield" jacket - the one my
girlfriend says I look "a right Dork" in - and I got beaten up by some guys.
Anyway my jaw got swollen and it would only move up and down very stiffly
(mind you, it made my belches sound really impressive). So this friend of
mine, Monty, came round and when he saw how my jaw was working, he just burst
out laughing and kept pointing up at the ceiling and saying "Flying Frank". I
still don't know what he was going on about. When I ask him he just shakes his
head from side to side in a wierd way and bursts out laughing again..

But I've kept the name because I've always wanted to be a trapeze artist.
Maybe one day I'll take lessons - there's a Circus School near where I live.
8=D

Later Dude.

Flying Frank,
Big Top, CA
 
Hi Frank,
Perhaps a friend or associate of yours has the virus and you got plucked
out of their address book.

Quite possible, I hadn't thought of that one. I can think of 1 person
it might be, he is pretty useless with computers so the chance of him
getting the virus is quite large, what with him being northern as well! The
phrase "past associate" springs to mind, and so does "twat", though I can't
think why :-\
You like my name, huh? I didn't choose it, a friend foisted it upon me. I
was out for a walk one evening wearing my "Harry Enfield" jacket - the one my
girlfriend says I look "a right Dork" in - and I got beaten up by some guys.
Anyway my jaw got swollen and it would only move up and down very stiffly
(mind you, it made my belches sound really impressive). So this friend of
mine, Monty, came round and when he saw how my jaw was working, he just burst
out laughing and kept pointing up at the ceiling and saying "Flying Frank". I
still don't know what he was going on about. When I ask him he just shakes his
head from side to side in a wierd way and bursts out laughing again..

LOL! That's an unfortunate spell of events! The only reason I said
anything is because I made a program called "Flying Frank Circus", it just
reminded me...

http://members.lycos.co.uk/nickpatemanpwp/soft-ffc.htm

Quite strange that, my "Flying Frank Circus" idea was first thought of
when messing about with this "past associate" that I spoke of. Oh, well,
I'm just quite thankful that he is a "past associate", probably the most
self righteous bastard in the world too!

Nick.

--
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
"No matter. Whatever the outcome, you are changed."

Fergus - September 5th 2003
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
 
Back
Top