RXDOCYou want what? MVM join:2002-03-13 Pawtucket, RI |
RXDOC
MVM
2003-Sep-19 7:32 am
Post your Swen CountI have never seen a virus spread and try to redistribute itself like this one before.
I am now up to 45 received since this bad boy was unleashed on the net.
Just for a general BBR hit rate I thought it would be interesting to see how many you have been hit by. I just looked in my backup section of NAV. |
actions · 2003-Sep-19 7:32 am · (locked) |
kpatzMY HEAD A SPLODE Premium Member join:2003-06-13 Manchester, NH |
kpatz
Premium Member
2003-Sep-19 8:29 am
Only one so far, in my Yahoo mail. Coming from Australia.
Perhaps when counting, you should check the headers to see if they're all coming from the same sender, or multiple senders. It looks like the return-path header contains the real sender's address, much like with Klez (and unlike Sobig.F!).
KJP |
actions · 2003-Sep-19 8:29 am · (locked) |
|
to RXDOC
One........from the U.K.!! |
actions · 2003-Sep-19 8:44 am · (locked) |
|
dp MVM join:2000-12-08 Greensburg, PA |
dp to RXDOC
MVM
2003-Sep-19 8:55 am
to RXDOC
Zero |
actions · 2003-Sep-19 8:55 am · (locked) |
jansson_markMarkus Jansson Premium Member join:2001-08-05 Finland |
to RXDOC
Zero...after setting hushmail spam settings tight. Before that I got some 30-50 of those bastards... No danger, but I hate it when they fill me email box... |
actions · 2003-Sep-19 9:11 am · (locked) |
Buddel5 Premium Member join:2003-08-12 Germany |
to RXDOC
0 - and I hope that won't change. |
actions · 2003-Sep-19 9:13 am · (locked) |
brandonSome truth included in this post. Premium Member join:2003-03-31 Ocean Springs, MS |
to RXDOC
none so far... |
actions · 2003-Sep-19 9:21 am · (locked) |
John2gQui Tacet Consentit Premium Member join:2001-08-10 England |
to RXDOC
None. |
actions · 2003-Sep-19 9:25 am · (locked) |
RXDOCYou want what? MVM join:2002-03-13 Pawtucket, RI |
RXDOC
MVM
2003-Sep-19 9:30 am
I am now at 53! |
actions · 2003-Sep-19 9:30 am · (locked) |
kpatzMY HEAD A SPLODE Premium Member join:2003-06-13 Manchester, NH |
kpatz
Premium Member
2003-Sep-19 9:31 am
said by RXDOC: I am now at 53!
All from the same sender, or different senders? Check the headers, if you still have the emails... |
actions · 2003-Sep-19 9:31 am · (locked) |
RXDOCYou want what? MVM join:2002-03-13 Pawtucket, RI |
RXDOC
MVM
2003-Sep-19 9:39 am
no two senders are the same.... |
actions · 2003-Sep-19 9:39 am · (locked) |
kpatzMY HEAD A SPLODE Premium Member join:2003-06-13 Manchester, NH |
kpatz
Premium Member
2003-Sep-19 9:42 am
said by RXDOC: no two senders are the same....
Did you check the return-path, and the last Received: lines? Those will be more accurate (esp. the Received: line) than the From: line. They could be coming from one IP address. |
actions · 2003-Sep-19 9:42 am · (locked) |
bcool Premium Member join:2000-08-25 |
to RXDOC
more than 20 so far but on my web freebee account
nothing via local ISP
At this pace, my web account limit will likely max out soon unless I visit often to clean up:( |
actions · 2003-Sep-19 9:43 am · (locked) |
markwp2001Spreadhead Premium Member join:2002-05-25 Long Beach, MS |
to RXDOC
2 that were caught by my ISP before delivery to my home email account.
About 15 in my work account this morning - already deleted.
My wife had a bunch in her work account this morning also. |
actions · 2003-Sep-19 9:47 am · (locked) |
|
to RXDOC
None here either. I only had 2 SoBig-F's in my e-mail that Norton kindly deleted for me. I never seen any signs of the msblaster either. |
actions · 2003-Sep-19 9:54 am · (locked) |
TaKun2Caliban Premium Member join:2003-09-04 Hancock, MD |
to RXDOC
None here DOC, but then I don't have any friends. Unless you count the ones that send viagra pitches. |
actions · 2003-Sep-19 9:58 am · (locked) |
Sweet WitchBe the flame, not the moth. MVM join:2003-07-15 Gallifrey |
to RXDOC
I got one and my mother has received about 5. She emailed asking if she should install the attachments and thankfully I've been reading here (and have common sense) so hopefully I've been able to stop her. Thankfully her training in not opening and installing whatever is mailed to her is coming along nicely |
actions · 2003-Sep-19 10:18 am · (locked) |
gkweb join:2003-06-09 Fort Worth, TX |
to RXDOC
55 since yesteday |
actions · 2003-Sep-19 10:43 am · (locked) |
Lucky5 Premium Member join:2002-07-24 Desert Floor |
to RXDOC
The big zero (so far) |
actions · 2003-Sep-19 10:45 am · (locked) |
Randy Bell Premium Member join:2002-02-24 Santa Clara, CA |
Nada, nothing, zilch .. here. |
actions · 2003-Sep-19 10:52 am · (locked) |
Doctor FourMy other vehicle is a TARDIS Premium Member join:2000-09-05 Dallas, TX |
to RXDOC
These things are filling up my Sneakemail bandwidth on the address there I use for Usenet postings. So far, they've used 10 MB of my 75 MB monthly bandwidth allotment. But there's no other harm done as I have this address set to bounce everything except a few whitelisted senders. If it gets really full (which it probably could due to the way in which Swen is spreading), I may be forced to discard this address as a last resort. |
actions · 2003-Sep-19 11:08 am · (locked) |
|
to RXDOC
I'm up at around 20. I'm one of those who usually never get hit during major virus outbreaks, so this one must be pretty effective. |
actions · 2003-Sep-19 11:51 am · (locked) |
jmorlanHmm... That's funny. MVM join:2001-02-05 Pacifica, CA |
to RXDOC
Only two so far today from my work account along with two Klez there today. None in two spamtrap accounts, none in my Yahoo account and none in two unused accounts. |
actions · 2003-Sep-19 12:35 pm · (locked) |
|
Ron in Japan to RXDOC
Anon
2003-Sep-19 12:46 pm
to RXDOC
I'm up to about 15-20 per hour since Thursday morning. It's driving me nuts. I've never had any problems like this before and can only assume some recent newsgroup postings got my e-mail address chosen. I'm not running any AV software; I just delete these things (always about 140-150 KB each) from the ISP's server before DLing to my machine, but it's such a waste of time. Would running XP's built-in firewall help? My ISP isn't doing anything to stop them either. Any ideas how to stop them without me having to change my e-mail address? Thanks. |
actions · 2003-Sep-19 12:46 pm · (locked) |
StraitShootWho Loves Ya Baby? - Theo Kojak Premium Member join:2003-02-08 Clinton, MA |
to RXDOC
5 to 10 an hour, only company related email..though.. nothing from my ISP provider e mail accounts.. |
actions · 2003-Sep-19 1:03 pm · (locked) |
onsitedeHot Hot Hot join:2000-11-24 Simsbury, CT |
to RXDOC
2 so far, both squished by Panda. |
actions · 2003-Sep-19 1:07 pm · (locked) |
|
to RXDOC
None, yet.... |
actions · 2003-Sep-19 1:09 pm · (locked) |
RXDOCYou want what? MVM join:2002-03-13 Pawtucket, RI |
RXDOC
MVM
2003-Sep-19 1:57 pm
I guess I'm just lucky...now at 83! |
actions · 2003-Sep-19 1:57 pm · (locked) |
kpatzMY HEAD A SPLODE Premium Member join:2003-06-13 Manchester, NH |
kpatz
Premium Member
2003-Sep-19 2:09 pm
Update: just got 2 more, in my Yahoo mail. Both were from the same sender. So my total is 3 emails from 2 senders, so far.
What's odd is these last 2 had the infected attachment stripped out. It must have hit a smtp server with a virus stripper on it. They came from a cox.net IP, fwiw.
KJP |
actions · 2003-Sep-19 2:09 pm · (locked) |
|
I just figured out that all of mine were from an email alias I use only on usenet. Deleted that one and hopefully I won't get getting any more. |
actions · 2003-Sep-19 2:15 pm · (locked) |