Re: Why such volume with W32/Swen@MM?
On Sat, Sep 20, 2003 at 06:49:18PM -0700, Bill Moseley wrote:
> >From the descriptions I've read of W32/Swen@MM it mails itself to
> "recipients extracted from the victim machine", yet I'm seeing so many
> of these to my personal email address alone that I can't believe my
> address is listed on that many machines. Today I got about 300 alone
> send to just one address. Other's I've talked with about this (non-geek
> internet users) are not seeing so much of the virus, if at all.
I think it's scanning Usenet via people's cache files. Debian-user is
echoed as a Usenet newsgroup.
I got over 1200 this weekend, and I'm a big poster to Usenet. People I know
got like a dozen, and universally they are not.
--
Carl Fink carl@fink.to
Jabootu's Minister of Proofreading
http://www.jabootu.com
Reply to: