Re: Current "Swen" worm attack

[Preben Randhol <randhol+abuse@pvv.org>]

On 2003-09-22, Stephane Richard <stephane.richard@verizon.net> wrote:
> To me a mind (hacker's mind that is) that seems to be limited to the fact
> that they "think" they gain power by attempting to destroy other's systems
> and server is nothing more than a "VERY primitive mind indeed".  Dont know
> what they are trying to prove, and to whom, but they only prove their
> stupidity and ignorance to me, nothing else.

Note that the worm grabs e.mail address from USENET groups such as thi
groups. I got 3 copies of each virus as it had managed to find three
addresses from the news groups. However I managed to put a stop to it by
grepping (at the ISP) for a patterns in the base64 encoding of the exe files
and sending the mails containing them into /dev/null.

First day I got about 200-300 Mb of this virus.

Preben