Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?


--
Kate B

PS 'elvira' is spamtrapped - please reply to 'elviraspam' at cockaigne if you want
to reply personally

Kate Brown wrote:
Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?


That's one hell of a lot of e-mails. I had the individual.net + sober
virus last week, probably about 100, however, that's all stopped now,
and funnily enough that was via a demon.co.uk account, not any others.
Sounds to be like you are getting SPAM which may have been harvested via
a spy ware trogan or something, hence using names that you are familiar
with.
Do you use 'Search & Destroy' and 'AdAware' on top of your virus
software (Norton or AVG)?

Keith (Southend)
http://www.southendweather.net


--
Keith (Southend)

'Weather Home & Abroad'
http://www.southendweather.net

Kate Brown wrote:
Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?


That's one hell of a lot of e-mails. I had the individual.net + sober
virus last week, probably about 100, however, that's all stopped now,
and funnily enough that was via a demon.co.uk account, not any others.
Sounds to be like you are getting SPAM which may have been harvested via
a spy ware trogan or something, hence using names that you are familiar
with.
Do you use 'Search & Destroy' and 'AdAware' on top of your virus
software (Norton or AVG)?

Keith (Southend)
http://www.southendweather.net


--
Keith (Southend)

'Weather Home & Abroad'
http://www.southendweather.net

Kate Brown wrote:
Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?


That's one hell of a lot of e-mails. I had the individual.net + sober
virus last week, probably about 100, however, that's all stopped now,
and funnily enough that was via a demon.co.uk account, not any others.
Sounds to be like you are getting SPAM which may have been harvested via
a spy ware trogan or something, hence using names that you are familiar
with.
Do you use 'Search & Destroy' and 'AdAware' on top of your virus
software (Norton or AVG)?

Keith (Southend)
http://www.southendweather.net


--
Keith (Southend)

'Weather Home & Abroad'
http://www.southendweather.net

In article , dated Sun, 15 May
2005, "Keith (Southend)" wrote
Kate Brown wrote:
Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from
rubbishnames (ie something like 8DJsNICFwn) at another domain, often
another demon one, but always a domain belonging to a contributor to
uk.sci.weather. I've had hundreds from something purporting to be
Mike Tullett, for example, and one of today's batches comes from
coyney.demon.co.uk.
I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?

That's one hell of a lot of e-mails. I had the individual.net + sober
virus last week, probably about 100, however, that's all stopped now,
and funnily enough that was via a demon.co.uk account, not any others.
Sounds to be like you are getting SPAM which may have been harvested
via a spy ware trogan or something, hence using names that you are
familiar with.
Do you use 'Search & Destroy' and 'AdAware' on top of your virus
software (Norton or AVG)?


yes, both of them, every week, and Etrust antivirus updated every day.
I don't think it's me that's infected , or the pattern would be
different in addition, I ran everything yesterday, so this morning's
infestation is not likely to have come from me). It may be some
infernal combination of the newsgroups I subscribe to plus the fact I've
been in newsgroups for years, but I still think there's a connection
with the Berlin server somewhere.

--
Kate B

PS 'elvira' is spamtrapped - please reply to 'elviraspam' at cockaigne if you want
to reply personally

In article , dated Sun, 15 May
2005, "Keith (Southend)" wrote
Kate Brown wrote:
Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from
rubbishnames (ie something like 8DJsNICFwn) at another domain, often
another demon one, but always a domain belonging to a contributor to
uk.sci.weather. I've had hundreds from something purporting to be
Mike Tullett, for example, and one of today's batches comes from
coyney.demon.co.uk.
I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?

That's one hell of a lot of e-mails. I had the individual.net + sober
virus last week, probably about 100, however, that's all stopped now,
and funnily enough that was via a demon.co.uk account, not any others.
Sounds to be like you are getting SPAM which may have been harvested
via a spy ware trogan or something, hence using names that you are
familiar with.
Do you use 'Search & Destroy' and 'AdAware' on top of your virus
software (Norton or AVG)?


yes, both of them, every week, and Etrust antivirus updated every day.
I don't think it's me that's infected , or the pattern would be
different in addition, I ran everything yesterday, so this morning's
infestation is not likely to have come from me). It may be some
infernal combination of the newsgroups I subscribe to plus the fact I've
been in newsgroups for years, but I still think there's a connection
with the Berlin server somewhere.

--
Kate B

PS 'elvira' is spamtrapped - please reply to 'elviraspam' at cockaigne if you want
to reply personally

In article , dated Sun, 15 May
2005, "Keith (Southend)" wrote
Kate Brown wrote:
Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from
rubbishnames (ie something like 8DJsNICFwn) at another domain, often
another demon one, but always a domain belonging to a contributor to
uk.sci.weather. I've had hundreds from something purporting to be
Mike Tullett, for example, and one of today's batches comes from
coyney.demon.co.uk.
I'm not accusing anybody of spam attacks! Other batches come from
giganews and individual.net, so in fact, it looks as if there's a
problem in Germany somewhere. Turnpike bounces everything
automatically, so I haven't actually looked at any of them - some of
last week's carried viruses, but today's batch are just URL carriers.
Has anyone else had anything like this?

That's one hell of a lot of e-mails. I had the individual.net + sober
virus last week, probably about 100, however, that's all stopped now,
and funnily enough that was via a demon.co.uk account, not any others.
Sounds to be like you are getting SPAM which may have been harvested
via a spy ware trogan or something, hence using names that you are
familiar with.
Do you use 'Search & Destroy' and 'AdAware' on top of your virus
software (Norton or AVG)?


yes, both of them, every week, and Etrust antivirus updated every day.
I don't think it's me that's infected , or the pattern would be
different in addition, I ran everything yesterday, so this morning's
infestation is not likely to have come from me). It may be some
infernal combination of the newsgroups I subscribe to plus the fact I've
been in newsgroups for years, but I still think there's a connection
with the Berlin server somewhere.

--
Kate B

PS 'elvira' is spamtrapped - please reply to 'elviraspam' at cockaigne if you want
to reply personally

On Sun, 15 May 2005 12:39:57 +0100, Kate Brown wrote in


Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

It sounds to me as if someone who reads/subscribes to this newsgroup has an
infected PC and the virus/trojan is sending those emails, picking adresses
up from their own PC. My main PC has only just been turned back on - 1st
time since early Friday. Over the weekend I was using my laptop with my
mobile phone as the modem in the far NW of Co.Donegal.

The headers of such emails *may* help locating the source. It is very
difficult to hide the sending IP address, for example.

--
Mike 55.13°N 6.69°W Coleraine posted to uk.sci.weather 15/05/2005 14:43:14 UTC

On Sun, 15 May 2005 12:39:57 +0100, Kate Brown wrote in


Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

It sounds to me as if someone who reads/subscribes to this newsgroup has an
infected PC and the virus/trojan is sending those emails, picking adresses
up from their own PC. My main PC has only just been turned back on - 1st
time since early Friday. Over the weekend I was using my laptop with my
mobile phone as the modem in the far NW of Co.Donegal.

The headers of such emails *may* help locating the source. It is very
difficult to hide the sending IP address, for example.

--
Mike 55.13°N 6.69°W Coleraine posted to uk.sci.weather 15/05/2005 14:43:14 UTC

On Sun, 15 May 2005 12:39:57 +0100, Kate Brown wrote in


Is it just me, or is anyone else getting major email attacks? I had
over 3000 about ten days ago and it seems to be beginning again. The
pattern is consistent: they are all addressed to
and they all come from rubbishnames
(ie something like 8DJsNICFwn) at another domain, often another demon
one, but always a domain belonging to a contributor to uk.sci.weather.
I've had hundreds from something purporting to be Mike Tullett, for
example, and one of today's batches comes from coyney.demon.co.uk.

It sounds to me as if someone who reads/subscribes to this newsgroup has an
infected PC and the virus/trojan is sending those emails, picking adresses
up from their own PC. My main PC has only just been turned back on - 1st
time since early Friday. Over the weekend I was using my laptop with my
mobile phone as the modem in the far NW of Co.Donegal.

The headers of such emails *may* help locating the source. It is very
difficult to hide the sending IP address, for example.

--
Mike 55.13°N 6.69°W Coleraine posted to uk.sci.weather 15/05/2005 14:43:14 UTC