dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
8065

RXDOC
You want what?
MVM
join:2002-03-13
Pawtucket, RI

RXDOC

MVM

Post your Swen Count

I have never seen a virus spread and try to redistribute itself like this one before.

I am now up to 45 received since this bad boy was unleashed on the net.

Just for a general BBR hit rate I thought it would be interesting to see how many you have been hit by. I just looked in my backup section of NAV.
kpatz
MY HEAD A SPLODE
Premium Member
join:2003-06-13
Manchester, NH

kpatz

Premium Member

Only one so far, in my Yahoo mail. Coming from Australia.

Perhaps when counting, you should check the headers to see if they're all coming from the same sender, or multiple senders. It looks like the return-path header contains the real sender's address, much like with Klez (and unlike Sobig.F!).

KJP

tons of fun
join:2002-10-11
Rochester, NY

tons of fun to RXDOC

Member

to RXDOC
One........from the U.K.!!

dp
MVM
join:2000-12-08
Greensburg, PA

dp to RXDOC

MVM

to RXDOC
Zero

jansson_mark
Markus Jansson
Premium Member
join:2001-08-05
Finland

jansson_mark to RXDOC

Premium Member

to RXDOC
Zero...after setting hushmail spam settings tight. Before that I got some 30-50 of those bastards... No danger, but I hate it when they fill me email box...
Buddel5
Premium Member
join:2003-08-12
Germany

Buddel5 to RXDOC

Premium Member

to RXDOC
0 - and I hope that won't change.

brandon
Some truth included in this post.
Premium Member
join:2003-03-31
Ocean Springs, MS

brandon to RXDOC

Premium Member

to RXDOC
none so far...

John2g
Qui Tacet Consentit
Premium Member
join:2001-08-10
England

John2g to RXDOC

Premium Member

to RXDOC
None.

RXDOC
You want what?
MVM
join:2002-03-13
Pawtucket, RI

RXDOC

MVM

I am now at 53!
kpatz
MY HEAD A SPLODE
Premium Member
join:2003-06-13
Manchester, NH

kpatz

Premium Member

said by RXDOC:
I am now at 53!
All from the same sender, or different senders? Check the headers, if you still have the emails...

RXDOC
You want what?
MVM
join:2002-03-13
Pawtucket, RI

RXDOC

MVM

no two senders are the same....
kpatz
MY HEAD A SPLODE
Premium Member
join:2003-06-13
Manchester, NH

kpatz

Premium Member

said by RXDOC:
no two senders are the same....
Did you check the return-path, and the last Received: lines? Those will be more accurate (esp. the Received: line) than the From: line. They could be coming from one IP address.

bcool
Premium Member
join:2000-08-25

bcool to RXDOC

Premium Member

to RXDOC
more than 20 so far but on my web freebee account

nothing via local ISP

At this pace, my web account limit will likely max out soon unless I visit often to clean up:(

markwp2001
Spreadhead
Premium Member
join:2002-05-25
Long Beach, MS

markwp2001 to RXDOC

Premium Member

to RXDOC
2 that were caught by my ISP before delivery to my home email account.

About 15 in my work account this morning - already deleted.

My wife had a bunch in her work account this morning also.

GotGhosts
Premium Member
join:2002-07-16
boo

GotGhosts to RXDOC

Premium Member

to RXDOC
None here either. I only had 2 SoBig-F's in my e-mail that Norton kindly deleted for me. I never seen any signs of the msblaster either.

TaKun2
Caliban
Premium Member
join:2003-09-04
Hancock, MD

TaKun2 to RXDOC

Premium Member

to RXDOC
None here DOC, but then I don't have any friends. Unless you count the ones that send viagra pitches.

Sweet Witch
Be the flame, not the moth.
MVM
join:2003-07-15
Gallifrey

Sweet Witch to RXDOC

MVM

to RXDOC
I got one and my mother has received about 5. She emailed asking if she should install the attachments and thankfully I've been reading here (and have common sense) so hopefully I've been able to stop her. Thankfully her training in not opening and installing whatever is mailed to her is coming along nicely

gkweb
join:2003-06-09
Fort Worth, TX

gkweb to RXDOC

Member

to RXDOC
55 since yesteday

Lucky5
Premium Member
join:2002-07-24
Desert Floor

Lucky5 to RXDOC

Premium Member

to RXDOC
The big zero (so far)

Randy Bell
Premium Member
join:2002-02-24
Santa Clara, CA

Randy Bell

Premium Member

Nada, nothing, zilch .. here.

Doctor Four
My other vehicle is a TARDIS
Premium Member
join:2000-09-05
Dallas, TX

Doctor Four to RXDOC

Premium Member

to RXDOC
These things are filling up my Sneakemail bandwidth on the
address there I use for Usenet postings. So far, they've
used 10 MB of my 75 MB monthly bandwidth allotment. But
there's no other harm done as I have this address set to
bounce everything except a few whitelisted senders. If it
gets really full (which it probably could due to the way
in which Swen is spreading), I may be forced to discard
this address as a last resort.

Lex Luthor
Mod
join:2000-09-17
Hicksville, NY

Lex Luthor to RXDOC

Mod

to RXDOC
I'm up at around 20. I'm one of those who usually never get hit during major virus outbreaks, so this one must be pretty effective.

jmorlan
Hmm... That's funny.
MVM
join:2001-02-05
Pacifica, CA

jmorlan to RXDOC

MVM

to RXDOC
Only two so far today from my work account along with two Klez there today. None in two spamtrap accounts, none in my Yahoo account and none in two unused accounts.

Ron in Japan
@dion.ne.jp

Ron in Japan to RXDOC

Anon

to RXDOC
I'm up to about 15-20 per hour since Thursday morning. It's driving me nuts. I've never had any problems like this before and can only assume some recent newsgroup postings got my e-mail address chosen. I'm not running any AV software; I just delete these things (always about 140-150 KB each) from the ISP's server before DLing to my machine, but it's such a waste of time. Would running XP's built-in firewall help? My ISP isn't doing anything to stop them either. Any ideas how to stop them without me having to change my e-mail address? Thanks.

StraitShoot
Who Loves Ya Baby? - Theo Kojak
Premium Member
join:2003-02-08
Clinton, MA

StraitShoot to RXDOC

Premium Member

to RXDOC
5 to 10 an hour, only company related email..though.. nothing from my ISP provider e mail accounts..

onsitede
Hot Hot Hot
join:2000-11-24
Simsbury, CT

onsitede to RXDOC

Member

to RXDOC
2 so far, both squished by Panda.

LoPhatPhuud
MVM
join:2002-01-06
Albuquerque, NM

LoPhatPhuud to RXDOC

MVM

to RXDOC
None, yet....

RXDOC
You want what?
MVM
join:2002-03-13
Pawtucket, RI

RXDOC

MVM

I guess I'm just lucky...now at 83!
kpatz
MY HEAD A SPLODE
Premium Member
join:2003-06-13
Manchester, NH

kpatz

Premium Member

Update: just got 2 more, in my Yahoo mail. Both were from the same sender. So my total is 3 emails from 2 senders, so far.

What's odd is these last 2 had the infected attachment stripped out. It must have hit a smtp server with a virus stripper on it. They came from a cox.net IP, fwiw.

KJP

Lex Luthor
Mod
join:2000-09-17
Hicksville, NY

Lex Luthor

Mod

I just figured out that all of mine were from an email alias I use only on usenet. Deleted that one and hopefully I won't get getting any more.