Some one on this group is submitting my email address to some BS microsoft
security patch THING, by the end of the week this account will probably be
60 emails a day, all of which are crap!

If I piss you off, please! tell me so! don't do this spam thing, it is
BRUTAL!!!

in article BB94A15C.986B%tuneraider2k3@yahoo.ca, TuneRaider2k3 at
tuneraider2k3@yahoo.ca wrote on 22/9/03 7:53 pm:

> Some one on this group is submitting my email address to some BS microsoft
> security patch THING, by the end of the week this account will probably be
> 60 emails a day, all of which are crap!
> 
> If I piss you off, please! tell me so! don't do this spam thing, it is
> BRUTAL!!!
> 
It's a virus. Probably someone you correspond with is infected.

Chris

My account got polluted so I've made a new one, 2 days ago, I use this new
one ONLY hear at this NG, it is already starting to get ugly. U say virus,
can a virus actully be spamming me?


in article BB950622.22AE%chrisSPAMMO@envoicer.com, Chris at
chrisSPAMMO@envoicer.com wrote on 22/09/2003 1:03pm:

> in article BB94A15C.986B%tuneraider2k3@yahoo.ca, TuneRaider2k3 at
> tuneraider2k3@yahoo.ca wrote on 22/9/03 7:53 pm:
> 
>> Some one on this group is submitting my email address to some BS microsoft
>> security patch THING, by the end of the week this account will probably be
>> 60 emails a day, all of which are crap!
>> 
>> If I piss you off, please! tell me so! don't do this spam thing, it is
>> BRUTAL!!!
>> 
> It's a virus. Probably someone you correspond with is infected.
> 
> Chris
> 

There are plenty of spiders hunting through all newsgroups looking for 
email addresses.  That's why you'll find most of us posting with fake 
email addresses.

TuneRaider2k3 wrote:
> My account got polluted so I've made a new one, 2 days ago, I use this new
> one ONLY hear at this NG, it is already starting to get ugly. U say virus,
> can a virus actully be spamming me?
> 
> 
> in article BB950622.22AE%chrisSPAMMO@envoicer.com, Chris at
> chrisSPAMMO@envoicer.com wrote on 22/09/2003 1:03pm:
> 
> 
>>in article BB94A15C.986B%tuneraider2k3@yahoo.ca, TuneRaider2k3 at
>>tuneraider2k3@yahoo.ca wrote on 22/9/03 7:53 pm:
>>
>>
>>>Some one on this group is submitting my email address to some BS microsoft
>>>security patch THING, by the end of the week this account will probably be
>>>60 emails a day, all of which are crap!
>>>
>>>If I piss you off, please! tell me so! don't do this spam thing, it is
>>>BRUTAL!!!
>>>
>>
>>It's a virus. Probably someone you correspond with is infected.
>>
>>Chris
>>
> 
> 

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Howard Schlossberg              (818) 883-2846
FM Pro Solutions       Los Angeles, California
Associate Member, FileMaker Solutions Alliance

TuneRaider2k3 wrote:
> 
> My account got polluted so I've made a new one, 2 days ago, I use this new
> one ONLY hear at this NG, it is already starting to get ugly. U say virus,
> can a virus actully be spamming me?

Yes, but it isn't spam, it's a bomb.
You aren't necessarily infected with a virus, you are the victim of
someone else's infection by a worm (that exploits a two-year old hole in
IE. So thank the people who haven't updated their IE).
It's called Swen, and it's been running rampant since last Wednesday. It
seems to harvest recipient email addresses from newsgroups and sends the
bogus microsoft email OR an email saying something like "qmail could not
deliver your message".
Symantec describes it quite well:
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html

If you think you might be infected, just try running msconfig or regedit
on the system in question. If they run, you don't have it.
Supposedly, it doesn't affect DOS, Linux, Macintosh, Microsoft IIS,
OS/2, UNIX, or Windows 3.x.

The best advice you can receive is to update your virus definitions, set
up filters in your mail reader to auto delete the microsoft and qmail
messages, and munge your email address when posting to usenet.
Good luck.
 
> in article BB950622.22AE%chrisSPAMMO@envoicer.com, Chris at
> chrisSPAMMO@envoicer.com wrote on 22/09/2003 1:03pm:
> 
> > in article BB94A15C.986B%tuneraider2k3@yahoo.ca, TuneRaider2k3 at
> > tuneraider2k3@yahoo.ca wrote on 22/9/03 7:53 pm:
> >
> >> Some one on this group is submitting my email address to some BS microsoft
> >> security patch THING, by the end of the week this account will probably be
> >> 60 emails a day, all of which are crap!
> >>
> >> If I piss you off, please! tell me so! don't do this spam thing, it is
> >> BRUTAL!!!
> >>
> > It's a virus. Probably someone you correspond with is infected.
> >
> > Chris
> >

I am getting the same thing.  It has almost crippled my email account as it
fills up so fast I have to empty it hourly.  I am trying the block sender
approach to see if that will work.  I think our email addresses are just
being mined from this group and others.  I don't think someone here is
actually submitting our email address.

PL
"TuneRaider2k3" <tuneraider2k3@yahoo.ca> wrote in message
news:BB94A15C.986B%tuneraider2k3@yahoo.ca...
> Some one on this group is submitting my email address to some BS microsoft
> security patch THING, by the end of the week this account will probably be
> 60 emails a day, all of which are crap!
>
> If I piss you off, please! tell me so! don't do this spam thing, it is
> BRUTAL!!!
>

TuneRaider2k3 wrote:
> 
> Some one on this group is submitting my email address to some BS microsoft
> security patch THING, by the end of the week this account will probably be
> 60 emails a day, all of which are crap!
> 
> If I piss you off, please! tell me so! don't do this spam thing, it is
> BRUTAL!!!

This thing is very widespread, and probably getting more so by the hour.
it is the Swen worm. perhaps it will overload and cripple the whole
internet in a little while. Sure hope the ISPs and other Internet
honchos are working on a fix.

The e-mail in the From line of this message is intentionally altererd,
now that my actual address got spammed. Locking the barn door after the
horse is gone, etc.

On 9/22/03 2:53 PM, in article BB94A15C.986B%tuneraider2k3@yahoo.ca,
"TuneRaider2k3" <tuneraider2k3@yahoo.ca> wrote:

> Some one on this group is submitting my email address to some BS microsoft
> security patch THING, by the end of the week this account will probably be
> 60 emails a day, all of which are crap!
> 
> If I piss you off, please! tell me so! don't do this spam thing, it is
> BRUTAL!!!
> 

I HAD THIS HAPPEN TO ME TOO. I made the mistake of posting from an earthlink
address for the first and only post I've ever made from that account. Within
1 hour my mailbox was overrun by this MS Worm. I consider the mailbox dead
and unusable now. 

It happened that fast. I normally use this address to post from but I though
with a new ISP I had to use my real address.
Boy was that dumb!

Jeff

Thank-you all for the joint responses.

My email accounts are totally crippled, at least now I know why.
My sincerest gratitude to you all.

This reply to address will work once '_nospam' is deleted



in article BB94D8AB.A3CC%jefferisp7@hotmail.com, Jefferis NoSpamme at
jefferisp7@hotmail.com wrote on 22/09/2003 2:49pm:

> On 9/22/03 2:53 PM, in article BB94A15C.986B%tuneraider2k3@yahoo.ca,
> "TuneRaider2k3" <tuneraider2k3@yahoo.ca> wrote:
> 
>> Some one on this group is submitting my email address to some BS microsoft
>> security patch THING, by the end of the week this account will probably be
>> 60 emails a day, all of which are crap!
>> 
>> If I piss you off, please! tell me so! don't do this spam thing, it is
>> BRUTAL!!!
>> 
> 
> I HAD THIS HAPPEN TO ME TOO. I made the mistake of posting from an earthlink
> address for the first and only post I've ever made from that account. Within
> 1 hour my mailbox was overrun by this MS Worm. I consider the mailbox dead
> and unusable now.
> 
> It happened that fast. I normally use this address to post from but I though
> with a new ISP I had to use my real address.
> Boy was that dumb!
> 
> Jeff
> 

spam sux wrote:
> 
> Thank-you all for the joint responses.
> 
> My email accounts are totally crippled, at least now I know why.

Hmmm - define totally crippled. My mail account is currently running
at c 1000 junk mails per day and still works just fine. Takes a little
longer than I would like to get my mail, but still works.

> My sincerest gratitude to you all.
> 
> This reply to address will work once '_nospam' is deleted

If you have to munge your address, please do it properly...
spam sux <tuneraider2k4_nospam@yahoo.ca> is not good, as the
server name is still valid, meaning that the mail makes it to 
Yahoo.ca and then gets returned as undeliverable, whereas
tuneraider2k4@yahoo.ca.invalid would never get sent from the
orginating mail server, as the domain does not exist.

Cheers

Webko

Well buddy,

On my planet your email account is what I would consider even more
'crippled' then mine.

I stop my work to see what mail I got, and it usually turns out to be
garbage. So in effect my email has become nothing more then an 'interrupt'
of my work flow. Not crippled means that MOST of the time when my email flag
is raised, it is real mail that I've been anticipating etc.


in article 3F6F7494.2E3EC55C@usyd.edu.au, Tim Booth at tbooth@usyd.edu.au
wrote on 22/09/2003 4:15pm:

> 
> 
> spam sux wrote:
>> 
>> Thank-you all for the joint responses.
>> 
>> My email accounts are totally crippled, at least now I know why.
> 
> Hmmm - define totally crippled. My mail account is currently running
> at c 1000 junk mails per day and still works just fine. Takes a little
> longer than I would like to get my mail, but still works.
> 
>> My sincerest gratitude to you all.
>> 
>> This reply to address will work once '_nospam' is deleted
> 
> If you have to munge your address, please do it properly...
> spam sux <tuneraider2k4_nospam@yahoo.ca> is not good, as the
> server name is still valid, meaning that the mail makes it to
> Yahoo.ca and then gets returned as undeliverable, whereas
> tuneraider2k4@yahoo.ca.invalid would never get sent from the
> orginating mail server, as the domain does not exist.
> 
> Cheers
> 
> Webko

This reply to address will work once '_nospam' is deleted

This expains a lot, I am now trying this mosting account to avoid the
problem. Is there any way to go back and remove past messages. Or is my
original account just screwed?

Matt


- - - - - -- - - -


On 9/22/03 11:53 AM, in article BB94A15C.986B%tuneraider2k3@yahoo.ca,
"TuneRaider2k3" <tuneraider2k3@yahoo.ca> wrote:

> Some one on this group is submitting my email address to some BS microsoft
> security patch THING, by the end of the week this account will probably be
> 60 emails a day, all of which are crap!
> 
> If I piss you off, please! tell me so! don't do this spam thing, it is
> BRUTAL!!!
> 

Check out this program at
http://www.softwaredevelopment.net.au/pge_steven.htm
I received over 700 emails from the Swen virus yesterday, after 
installing "Steven" I received less then 10 today. The program is free 
with a $29.00 registration fee for additional functionality.
It's easy to setup, runs resident and does not require any user 
interaction. It just does its job and stays out of the way.

Michael Myett

Matt Revenaugh wrote:
> This expains a lot, I am now trying this mosting account to avoid the
> problem. Is there any way to go back and remove past messages. Or is my
> original account just screwed?
> 
> Matt
> 
> 
> - - - - - -- - - -
> 
> 
> On 9/22/03 11:53 AM, in article BB94A15C.986B%tuneraider2k3@yahoo.ca,
> "TuneRaider2k3" <tuneraider2k3@yahoo.ca> wrote:
> 
> 
>>Some one on this group is submitting my email address to some BS microsoft
>>security patch THING, by the end of the week this account will probably be
>>60 emails a day, all of which are crap!
>>
>>If I piss you off, please! tell me so! don't do this spam thing, it is
>>BRUTAL!!!
>>
> 
> 

Matt Revenaugh wrote:
> 
> This expains a lot, I am now trying this mosting account to avoid the
> problem. Is there any way to go back and remove past messages. Or is my
> original account just screwed?

Most news servers will no longer honour cancels, so your
messages are very difficult to remove. Also, you're almost
certainly now in Deja/Google, where your posts will be 
archived for an exceedingly long time - that is, the 67
you appear to have made so far.

And so it depends on what you mean by 'screwed'... Personally,
given I made a decision not to munge my email address a
long time ago, I've always run good filters to trap and
delete spam, fully aware I was likely to get an awful lot
of it due to posting to Usenet ;-|

Cheers

Webko

On 9/22/03 8:12 PM, in article wdMbb.7475$hL1.6978@nwrdny01.gnilink.net,
"Michael Myett" <michael.myett@verizon.net> wrote:

> Check out this program at
> http://www.softwaredevelopment.net.au/pge_steven.htm
> I received over 700 emails from the Swen virus yesterday, after
> installing "Steven" I received less then 10 today. The program is free
> with a $29.00 registration fee for additional functionality.
> It's easy to setup, runs resident and does not require any user
> interaction. It just does its job and stays out of the way.
> 
> Michael Myett

Someone should tell Earthlink to install it!   I can't get tech support to
do anything except tell me that it isn't coming from their network ... A
DUH!    Yet now I can't use my mailbox... It is toast. 

In reply to BB952A85.A463%jefferisp7@hotmail.com on 9/22/03 7:39 PM by
Jefferis NoSpamme jefferisp7@hotmail.com:

Sounds nice, but it is for window only :(

> On 9/22/03 8:12 PM, in article wdMbb.7475$hL1.6978@nwrdny01.gnilink.net,
> "Michael Myett" <michael.myett@verizon.net> wrote:
> 
>> Check out this program at
>> http://www.softwaredevelopment.net.au/pge_steven.htm
>> I received over 700 emails from the Swen virus yesterday, after
>> installing "Steven" I received less then 10 today. The program is free
>> with a $29.00 registration fee for additional functionality.
>> It's easy to setup, runs resident and does not require any user
>> interaction. It just does its job and stays out of the way.
>> 
>> Michael Myett
> 
> Someone should tell Earthlink to install it!   I can't get tech support to
> do anything except tell me that it isn't coming from their network ... A
> DUH!    Yet now I can't use my mailbox... It is toast.
> 

Yes,
I have the same problem, but I don't have any reason to believe that it is
from anybody in this newsgroup.   I travel to many other newsgroups, and I
have no idea where it came from.

Charlie

On 9/24/03 8:56 AM, in article bwgcb.8759$KJ4.4901@news1.central.cox.net,
"markris@markris.com" <markris@markris.com> wrote:

> Yes,
> I have the same problem, but I don't have any reason to believe that it is
> from anybody in this newsgroup.   I travel to many other newsgroups, and I
> have no idea where it came from.
> 
> Charlie


I KNOW it was from this newsgroup. My first EVER use of my earthlink email
was to this group, and within 1 hour, I was overrun by SWEN virus. Plus the
bozo's at Earthlink can't seem to do a thing about it, saying it isn't
coming from their servers... Well duh!  It made my mailbox worthless. It's
10 megs are filled up every few hours with exe files and fake MS internet
security patches and bounces.

Jeff

It is actually from EVERY newsgroup.  I recently did a test where I created
a new email address for testing of the SWEN virus,  a different email
address for each newsgroup, and all but 1 resulted in new SPAMM, which is
actually caused by the Swen virus.

Tim

"Jefferis NoSpamme" <jefferisp7@hotmail.com> wrote in message
news:BB9887AB.A794%jefferisp7@hotmail.com...
> On 9/24/03 8:56 AM, in article bwgcb.8759$KJ4.4901@news1.central.cox.net,
> "markris@markris.com" <markris@markris.com> wrote:
>
> > Yes,
> > I have the same problem, but I don't have any reason to believe that it
is
> > from anybody in this newsgroup.   I travel to many other newsgroups, and
I
> > have no idea where it came from.
> >
> > Charlie
>
>
> I KNOW it was from this newsgroup. My first EVER use of my earthlink email
> was to this group, and within 1 hour, I was overrun by SWEN virus. Plus
the
> bozo's at Earthlink can't seem to do a thing about it, saying it isn't
> coming from their servers... Well duh!  It made my mailbox worthless. It's
> 10 megs are filled up every few hours with exe files and fake MS internet
> security patches and bounces.
>
> Jeff
>

And I'm still getting them. . . . . 

markris@markris.com wrote:
> 
> And I'm still getting them. . . . .

Well, all you need to do is find every infected machine in the
world and either clean them or turn them off. There's not
a lot any of us can do about the extra messages you (and
millions of other people) are receiving due to virus
infections.

Webko

Posting with your email address on usenet is like saying, "hello spam me for
the rest of my life".

Use a fake email address. Even the tricks of replacing @ with at or adding
nospam to your address don't work. Newsgroup email harvesters get around
those.

It's a problem i've had too many times now. Fake email address always the
way.


"Tim Booth" <tbooth@usyd.edu.au> wrote in message
news:3F7394B0.7FE26D0D@usyd.edu.au...
>
>
> markris@markris.com wrote:
> >
> > And I'm still getting them. . . . .
>
> Well, all you need to do is find every infected machine in the
> world and either clean them or turn them off. There's not
> a lot any of us can do about the extra messages you (and
> millions of other people) are receiving due to virus
> infections.
>
> Webko