Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

Question about this new "Swen" Virus/Worm

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » The DU Lounge Donate to DU
 
quispquake Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 11:31 AM
Original message
Question about this new "Swen" Virus/Worm
Hi all...

Perhaps I'm being paranoid...but this is really beginning to freak me out...

I have a site www.perkypat.com that I stream music, but also put up political rants as I seem fit...my email address to that site has been perkypat23@perkypat.com

Well, since Thursday, every 10 minutes (that's EVERY 10 MINUTES), someone has been sending me this worm over and over again. I've switched over to my perkypat@perkypat.com email in the meantime. My paranoia is thinking someone doesn't like my rants, but it could be someone whose machine is completely compromised that's nailing me...I've contacted all my friends and let them know about it, but noone has it (also, it's 24 hours, and all my friends have dial-up).

Any ideas about this from some of our tech folks (and I'm a tech folk, so this one is really freaking me out!).
Printer Friendly | Permalink |  | Top
Fridays Child Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 11:48 AM
Response to Original message
1. I don't know about your virus email problems but...
...I had fun looking through your site--especially the Fourth of July page.

:hi:
Printer Friendly | Permalink |  | Top
 
quispquake Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 11:53 AM
Response to Reply #1
3. Thanks!!!
Glad ya liked it...that was an amazing parade (4th of July!!!).
pp23
Printer Friendly | Permalink |  | Top
 
elifino Donating Member (331 posts) Send PM | Profile | Ignore Mon Sep-22-03 11:51 AM
Response to Original message
2. swen worm
Printer Friendly | Permalink |  | Top
 
newyawker99 Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 01:53 PM
Response to Reply #2
9. Hi elifino!!
Welcome to DU!! :toast:
Printer Friendly | Permalink |  | Top
 
TrogL Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 12:11 PM
Response to Original message
4. Put your parnoia at ease
You cannot control this virus. Someone is infected and doesn't know it.

If it's the same person, and your email account permits it, block them.
Printer Friendly | Permalink |  | Top
 
quispquake Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 12:41 PM
Response to Reply #4
5. Thanks...
...I felt I was being paranoid...but four days later???

Problem is, the header for the email is NOT showing where it originates...so, I can't block it as I don't know what address it's coming from...

pp23
Printer Friendly | Permalink |  | Top
 
TreasonousBastard Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 12:58 PM
Response to Original message
6. I can see why you might be paranoid...
I got hundreds of them, many from the same person, but I gave up on checking the headers a few days ago and just delete them with the spam. Damn things keep changing, though, so it's tough to set up filters.

Every ten minutes from the same person since Thursday, though? It is tough to believe that could be kept up so long without someone noticing, and a lame attempt at mailbombing comes to mind. But, anything's possible with a hundred million machines out there.

Did you complain to whoever owns the alleged originating smtp server? I've done that, and it sometimes works alerting them that one of their customers has a virus, or their server is being hijacked. Suggesting that it may be a deliberate attack might get their attention. As you probably already know, ISP's really, really hate mailbombers-- screws up their own operation. Spamming and mailbombing are spelled out as VERY big no-nos in both my ISP's TOS.







Printer Friendly | Permalink |  | Top
 
Don_G Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 01:01 PM
Response to Reply #6
7. Someone Might Be On Broadband
And unaware that their computer is infected or possibly on vacation.
Printer Friendly | Permalink |  | Top
 
quispquake Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 01:48 PM
Response to Reply #6
8. Yes...
I did indeed email the ISP with the originating headers, but no response (some Australian company)...aarrgghh!
Printer Friendly | Permalink |  | Top
 
TreasonousBastard Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 02:24 PM
Response to Reply #8
10. Yeah,...
I got a few from Australia and the UK, but the latest batch is from around here somewhere, except for the very odd two that I got from Russia telling me they found the virus and isolated it, and with no attachments.(???)

It does seem to be slowing down a bit.

And, yeah, the ISP's almost never answer. Rarely even an autoreply, but some say they act on this stuff so it's worthwhile to complain, I suppose.



Printer Friendly | Permalink |  | Top
 
quispquake Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-22-03 02:35 PM
Response to Reply #10
11. No attachments...
Yeah, I get like one 15K file, then I get two files that show attachments, but under 1K in size??? Every one of them sets off my Symantec...

Figured I'd disable the account for a couple of days 'til this dies down...

Thanks a LOT for all the help!
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Thu Oct 23rd 2014, 12:25 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » The DU Lounge Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC