New virus making its rounds (Swen)
-
- Site Admin
- Posts: 1388
- Joined: Sun Mar 14, 1999 11:13 am
- Location: Jeffersonville, IN
- Contact:
New virus making its rounds (Swen)
I've already received a couple hundred of these:
http://www.washingtonpost.com/wp-srv/te ... 091903.htm
http://www.washingtonpost.com/wp-srv/te ... 091903.htm
Last edited by gmiller on Mon Dec 01, 2003 1:27 pm, edited 1 time in total.
-
- Uranium
- Posts: 266
- Joined: Mon Apr 12, 1999 3:52 am
- Location: NW England
- Contact:
Re: New virus making its rounds (Swen)
I have loads of this to but ther eis no way notto view it with outlook express and there is another sort that follows in apair i think which automatically trys to open an .exe filegmiller wrote:I've already received a couple hundred of these:
http://www.washingtonpost.com/wp-srv/te ... 091903.htm
one email today caused media player to run
-
- Posts: 360
- Joined: Mon Sep 22, 2003 3:48 pm
It's a bit of a pain to enter (try using the copy function to speed
things up), but for those with Outlook Express, I've found that this
collection of expressions is pretty effective at blocking the current
email virus:
Where the From line contains MS
Delete it from server
If the subject contains Microsoft
Delete it from server
Where the From line contains Inet
Delete it from server
If the subject contain Service
Delete it from server
If the message body contains to have to inform you
Delete it from server
If the message body contains qmail program
Delete it from server
If the message body contains undeliverable
Delete it from server
If the message body contains microsoft customer
Delete it from server
If the message body contains all known security vulnerabilities
Delete it from server
Where the message size is more than 156 KB
Stop processing more rules
Where the message size is more than 155 KB
Delete it from server
Where the message size is more than 144 KB
Stop processing more rules
Where the message size is more than 143 KB
Delete it from server
things up), but for those with Outlook Express, I've found that this
collection of expressions is pretty effective at blocking the current
email virus:
Where the From line contains MS
Delete it from server
If the subject contains Microsoft
Delete it from server
Where the From line contains Inet
Delete it from server
If the subject contain Service
Delete it from server
If the message body contains to have to inform you
Delete it from server
If the message body contains qmail program
Delete it from server
If the message body contains undeliverable
Delete it from server
If the message body contains microsoft customer
Delete it from server
If the message body contains all known security vulnerabilities
Delete it from server
Where the message size is more than 156 KB
Stop processing more rules
Where the message size is more than 155 KB
Delete it from server
Where the message size is more than 144 KB
Stop processing more rules
Where the message size is more than 143 KB
Delete it from server
I messed up
Ok, I got one of these and ran the attachment. I've been fooled. Now how do I get rid of it?
Tim
Tim
-
- Site Admin
- Posts: 1388
- Joined: Sun Mar 14, 1999 11:13 am
- Location: Jeffersonville, IN
- Contact:
Here's some info on how to remove it:
http://www.pchell.com/virus/swen.shtml
I haven't actually read it, but it looks like it says how to get rid of it.
I believe this emoticon is appropriate:
http://www.pchell.com/virus/swen.shtml
I haven't actually read it, but it looks like it says how to get rid of it.
I believe this emoticon is appropriate:
Spazz man....
Yeah, go ahead and roll your eyes. I could make excuses about what I was doing at the time and just plain spazzing it, but I won't bother with that.....
Anyway, I did find a little program that removes it on the Symantic site, so all is well again.
Tim
Anyway, I did find a little program that removes it on the Symantic site, so all is well again.
Tim
Re: New virus making its rounds (Swen)
gmiller wrote:I've already received a couple hundred of these:
http://www.washingtonpost.com/wp-srv/te ... 091903.htm
I hate hackers. I have received many such emails from "Microsoft", and I keep receiving every few minutes.
-
- Uranium
- Posts: 266
- Joined: Mon Apr 12, 1999 3:52 am
- Location: NW England
- Contact:
-
- Uranium
- Posts: 266
- Joined: Mon Apr 12, 1999 3:52 am
- Location: NW England
- Contact:
Swen was the one in the emailkatchum wrote:Hey keith, I installed AVG and when i started the computer it says there is a troyan virus on the computer, I thought it was Swen not a troyan virus?
And why did my norton 2002 virus scanner not see this virus?
the trojan was already there i imagine
as for norton picking it up well depends when the data files were last updated my current data file for AVG is 5 days old i intend to keep it uptodate but tend to forget
all Virus checking programs ideally should be checked for updates weekly or fortnightly as new virui crop up all the time
Eudora
Just a thought....
Many of these worms are designed to attack flaws in Outlook Express and Outlook. Using Eudora as your email client can significantly reduce these vulnerabilities. Just a thought.
Tim
Many of these worms are designed to attack flaws in Outlook Express and Outlook. Using Eudora as your email client can significantly reduce these vulnerabilities. Just a thought.
Tim
-
- Posts: 360
- Joined: Mon Sep 22, 2003 3:48 pm
Through work and home, I have had a lot of experience with Eudora.
It's a fine program, certainly if your are receving hundreds of mails each day, and especially if you need the attachments saved separatly.
But if you handle security measures as well with outlook as with Eudora, (not opening every received executable file for example) then there is nothing wrong with both of them.
One thing you can do, is open windows explorer, goto the menu extra/mapoptions and in the second tab, deselect the hide known extensions.
This way, if someone sends a file.txt.exe you will still see it's an executable, and not a txt file, as you will see the notepad icon which wrongly indicates the file type. (At least this used to be so in prior windows versions)
It's a fine program, certainly if your are receving hundreds of mails each day, and especially if you need the attachments saved separatly.
But if you handle security measures as well with outlook as with Eudora, (not opening every received executable file for example) then there is nothing wrong with both of them.
One thing you can do, is open windows explorer, goto the menu extra/mapoptions and in the second tab, deselect the hide known extensions.
This way, if someone sends a file.txt.exe you will still see it's an executable, and not a txt file, as you will see the notepad icon which wrongly indicates the file type. (At least this used to be so in prior windows versions)
-
- Uranium
- Posts: 266
- Joined: Mon Apr 12, 1999 3:52 am
- Location: NW England
- Contact:
you can'tkatchum wrote:I downloaded AVG and ran the program found 3 viruses.
But still I get emails from Microsoft Internet Service with 142 Kb and microsoft protection service...
How do I stop this?
those emails are from other infected pc's provided you dont open them you are fine just delete them
the major problem with these modern virui is the massive number that get sent crashing mail networks
-
- Uranium
- Posts: 266
- Joined: Mon Apr 12, 1999 3:52 am
- Location: NW England
- Contact:
why change email addresskatchum wrote:This is serious then.
The problem is that I can't change e-mail-address.
i had this problem when the virus first hit the world and i was getting a few dozen mails a day but after a while they slowed down and finally stopped
admittedly the odd one or two has arived this week but no major onslaught
-
- Posts: 360
- Joined: Mon Sep 22, 2003 3:48 pm
Your problem is somebody with your email address in their address book has the virus on their computer, maybe more then one system is invovled. Check with your contacts to see if they have patched their system and ran an up to date virus scan.tellymetwise wrote:Lucky you keith, I still receive dozens and dozens a day.
I wonder what would happen if I didn't check my mail for a day or two.
-
- Posts: 360
- Joined: Mon Sep 22, 2003 3:48 pm
It's an email address I use to post in newsgroups. Quite a lot of people can accidently reply to sender (and add an email address to there addressbook) instead of reply to newsgroup.
That would give me quite a few unknown contacts.
I've already solved it with filters, so those message don't even get downloaded.
The only thing that get's in my INBOX are wanted messages. Anything else goes directly in the trashbin.
At the moment just 5 or 10 spams a day.
That would give me quite a few unknown contacts.
I've already solved it with filters, so those message don't even get downloaded.
The only thing that get's in my INBOX are wanted messages. Anything else goes directly in the trashbin.
At the moment just 5 or 10 spams a day.