Question about this new "Swen" Virus/Worm

[quispquake]

Hi all...

Perhaps I'm being paranoid...but this is really beginning to freak me out...

I have a site www.perkypat.com that I stream music, but also put up political rants as I seem fit...my email address to that site has been [e-mail]

Well, since Thursday, every 10 minutes (that's EVERY 10 MINUTES), someone has been sending me this worm over and over again. I've switched over to my [e-mail] email in the meantime. My paranoia is thinking someone doesn't like my rants, but it could be someone whose machine is completely compromised that's nailing me...I've contacted all my friends and let them know about it, but noone has it (also, it's 24 hours, and all my friends have dial-up).

Any ideas about this from some of our tech folks (and I'm a tech folk, so this one is really freaking me out!).

[Fridays Child]

1. I don't know about your virus email problems but...

...I had fun looking through your site--especially the Fourth of July page.

[quispquake]

3. Thanks!!!

Glad ya liked it...that was an amazing parade (4th of July!!!).
pp23

[elifino]

2. swen worm

http://us.mcafee.com/virusInfo/default.asp?id=descripti...

This might be of help.

[newyawker99]

9. Hi elifino!!

Welcome to DU!!

[TrogL]

4. Put your parnoia at ease

You cannot control this virus. Someone is infected and doesn't know it.

If it's the same person, and your email account permits it, block them.

[quispquake]

5. Thanks...

...I felt I was being paranoid...but four days later???

Problem is, the header for the email is NOT showing where it originates...so, I can't block it as I don't know what address it's coming from...

pp23

[TreasonousBastard]

6. I can see why you might be paranoid...

I got hundreds of them, many from the same person, but I gave up on checking the headers a few days ago and just delete them with the spam. Damn things keep changing, though, so it's tough to set up filters.

Every ten minutes from the same person since Thursday, though? It is tough to believe that could be kept up so long without someone noticing, and a lame attempt at mailbombing comes to mind. But, anything's possible with a hundred million machines out there.

Did you complain to whoever owns the alleged originating smtp server? I've done that, and it sometimes works alerting them that one of their customers has a virus, or their server is being hijacked. Suggesting that it may be a deliberate attack might get their attention. As you probably already know, ISP's really, really hate mailbombers-- screws up their own operation. Spamming and mailbombing are spelled out as VERY big no-nos in both my ISP's TOS.

[Don_G]

7. Someone Might Be On Broadband

And unaware that their computer is infected or possibly on vacation.

[quispquake]

8. Yes...

I did indeed email the ISP with the originating headers, but no response (some Australian company)...aarrgghh!

[TreasonousBastard]

10. Yeah,...

I got a few from Australia and the UK, but the latest batch is from around here somewhere, except for the very odd two that I got from Russia telling me they found the virus and isolated it, and with no attachments.(???)

It does seem to be slowing down a bit.

And, yeah, the ISP's almost never answer. Rarely even an autoreply, but some say they act on this stuff so it's worthwhile to complain, I suppose.

[quispquake]

11. No attachments...

Yeah, I get like one 15K file, then I get two files that show attachments, but under 1K in size??? Every one of them sets off my Symantec...

Figured I'd disable the account for a couple of days 'til this dies down...

Thanks a LOT for all the help!