[Meteor-Scatter] All: The current worm

[N1BUG]

No kidding! I sure wish more people would take this stuff 
seriously and keep their computers from becoming infected.

This one got so bad with more than 1000 copies of this worm 
hitting my inbox every day for the past week, my computer 
was almost constantly retrieving them from the server. I 
even had to leave it online all night so the clog wouldn't 
be so bad in the morning that I would not be able to use 
the system the next day! Not to mention a hundred or so 
bounces every day due to the worm on someone else's 
infected computer using my email as a return address.

The email addresses affected were ones that I had used on my 
web site. (I will never, ever put an email address on my 
web site again!) Whether people had saved HTML pages and 
the worm is harvesting the address from them, or people had 
put it in their address books for future reference, the 
result is the same. I do not run a Microsoft operating 
system, so my computers cannot become infected by this 
worm; but the extreme load on my email from thousands of 
copies of it inbound hogged nearly 100% of my internet 
connection bandwidth 24 hours a day!

As a last resort in dealing with the problem, my web site is 
now OFFLINE and the email addresses that were used on it 
have been permanently disabled (mail is automatically and 
unconditionally deleted at the server).

PLEASE take this seriously and make an effort to keep your 
computers from being infected by any of these things. Thank 
you!

73,
Paul, N1BUG


On Friday 29 August 2003 09:34 am, Shelby Ennis, W8WN wrote:
> As most of you already know, the Win32/Sobig.F@mm worm is
> crawling all over the Internet.
> I have received over 60 infected messages already this
> morning and they're still coming!
>
> Also, I am now receiving bounced messages from people not
> on my mailing list, indicating that my address is being
> used as the return address by the worm - as is many of
> your addresses, since I've also received infected
> messages "supposedly" from a number of people whom I know
> keep their virus protection up to date,
> So it is impossible to tell at a glance whether an
> individual computer is spewing out these messages, or if
> that return address is simply being used by the worm to
> make it look like you are doing it.  And this particular
> virus apparently doesn't do any harm to the computers -
> just clogs up the Internet.
>
> Moral of this story - If someone tells you that your
> computer is infected, it may or may not be.
> But a *whole bunch are* infected!  If you haven't updated
> your virus protection this week, it may be too late for
> you! Good luck!
> 73, Shelby, W8WN