Re: The Internet worm 'Swen' rides again

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/29/05


Date: Wed, 28 Sep 2005 23:19:12 -0400

From: "Phil Weldon" <notdiscosed@example.com>

| 'David H. Lipman' wrote:
|> I take it it was a non-Microsoft News Group.
| _____
|
| Yes; the message was crossposted to eight or so groups, three non-existent.
| The infective attachment has approximately the same length, perhaps with
| just trivial, worm generated changes like the date. Evidently Usenet can be
| used as a vector that gets around ISP virus checking at the moment.
|
| Phil Weldon

Always has been. Swen is not the only infector with a NNTP engine or has used News Group.
The Torvil works similarly to the Swen in how it propogates. The W32/Ska (aka; Happy99) was
intially first propogated by being posted to UseNet.

W32/Ska@M -- http://vil.nai.com/vil/content/v_10144.htm
W32/Ska2K.worm -- http://vil.nai.com/vil/content/v_10543.htm
W32/Torvil.b@MM -- http://vil.nai.com/vil/content/v_100800.htm
W32/Duksten@MM -- http://vil.nai.com/vil/content/v_99878.htm

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Hacked email?
    ... questions or resolve problems than ... Usenet) so you don't miss an easy or obvious answer. ... Here is a handy link to search previous Usenet posts so you don't get ... Send responses to the relevant news group rather than to me, ...
    (comp.sys.mac.apps)
  • [FAQ] rec.games.miniatures.warhammer weekly mini-FAQ
    ... RGMW Mini-FAQ or how to avoid being flamed. ... Learn to use the Usenet Archive. ... If you want to have a discussion do it on the news group, ...
    (rec.games.miniatures.warhammer)
  • [FAQ] rec.games.miniatures.warhammer weekly mini-FAQ
    ... RGMW Mini-FAQ or how to avoid being flamed. ... Learn to use the Usenet Archive. ... If you want to have a discussion do it on the news group, ...
    (rec.games.miniatures.warhammer)
  • [FAQ] rec.games.miniatures.warhammer weekly mini-FAQ
    ... RGMW Mini-FAQ or how to avoid being flamed. ... Learn to use the Usenet Archive. ... If you want to have a discussion do it on the news group, ...
    (rec.games.miniatures.warhammer)
  • [FAQ] rec.games.miniatures.warhammer weekly mini-FAQ
    ... RGMW Mini-FAQ or how to avoid being flamed. ... Learn to use the Usenet Archive. ... If you want to have a discussion do it on the news group, ...
    (rec.games.miniatures.warhammer)