New virus making its rounds (Swen)

Post by **gmiller** » Mon Sep 22, 2003 12:03 pm

I've already received a couple hundred of these:
http://www.washingtonpost.com/wp-srv/te ... 091903.htm

keithstuart · Post by **keithstuart** » Mon Sep 22, 2003 1:32 pm

gmiller wrote:I've already received a couple hundred of these:
http://www.washingtonpost.com/wp-srv/te ... 091903.htm

I have loads of this to but ther eis no way notto view it with outlook express and there is another sort that follows in apair i think which automatically trys to open an .exe file

one email today caused media player to run

tellymetwise · Post by **tellymetwise** » Mon Sep 22, 2003 3:53 pm

It's a bit of a pain to enter (try using the copy function to speed
things up), but for those with Outlook Express, I've found that this
collection of expressions is pretty effective at blocking the current
email virus:

Where the From line contains MS
Delete it from server

If the subject contains Microsoft
Delete it from server

Where the From line contains Inet
Delete it from server

If the subject contain Service
Delete it from server

If the message body contains to have to inform you
Delete it from server

If the message body contains qmail program
Delete it from server

If the message body contains undeliverable
Delete it from server

If the message body contains microsoft customer
Delete it from server

If the message body contains all known security vulnerabilities
Delete it from server

Where the message size is more than 156 KB
Stop processing more rules

Where the message size is more than 155 KB
Delete it from server

Where the message size is more than 144 KB
Stop processing more rules

Where the message size is more than 143 KB
Delete it from server

hamot · Post by **hamot** » Mon Sep 22, 2003 4:56 pm

Ok, I got one of these and ran the attachment. I've been fooled. Now how do I get rid of it?

Tim

Post by **gmiller** » Mon Sep 22, 2003 5:34 pm

Here's some info on how to remove it:
http://www.pchell.com/virus/swen.shtml

I haven't actually read it, but it looks like it says how to get rid of it.

I believe this emoticon is appropriate:

hamot · Post by **hamot** » Mon Sep 22, 2003 5:40 pm

Yeah, go ahead and roll your eyes. I could make excuses about what I was doing at the time and just plain spazzing it, but I won't bother with that.....

Anyway, I did find a little program that removes it on the Symantic site, so all is well again.

Tim

vkramnik · Post by **vkramnik** » Mon Sep 22, 2003 6:30 pm

gmiller wrote:I've already received a couple hundred of these:
http://www.washingtonpost.com/wp-srv/te ... 091903.htm

I hate hackers. I have received many such emails from "Microsoft", and I keep receiving every few minutes.

keithstuart · Post by **keithstuart** » Wed Nov 19, 2003 12:23 pm

as this is still doing the rounds i'll sticky it for a while

feel free to add any more new virui to it

katchum · Post by **katchum** » Wed Nov 19, 2003 5:16 pm

Hey keith, I installed AVG and when i started the computer it says there is a troyan virus on the computer, I thought it was Swen not a troyan virus?

And why did my norton 2002 virus scanner not see this virus?

keithstuart · Post by **keithstuart** » Wed Nov 19, 2003 5:34 pm

katchum wrote:Hey keith, I installed AVG and when i started the computer it says there is a troyan virus on the computer, I thought it was Swen not a troyan virus?

And why did my norton 2002 virus scanner not see this virus?

Swen was the one in the email

the trojan was already there i imagine

as for norton picking it up well depends when the data files were last updated my current data file for AVG is 5 days old i intend to keep it uptodate but tend to forget

all Virus checking programs ideally should be checked for updates weekly or fortnightly as new virui crop up all the time

hamot · Post by **hamot** » Wed Nov 19, 2003 9:48 pm

Just a thought....

Many of these worms are designed to attack flaws in Outlook Express and Outlook. Using Eudora as your email client can significantly reduce these vulnerabilities. Just a thought.

Tim

tellymetwise · Post by **tellymetwise** » Wed Nov 19, 2003 10:49 pm

Through work and home, I have had a lot of experience with Eudora.
It's a fine program, certainly if your are receving hundreds of mails each day, and especially if you need the attachments saved separatly.

But if you handle security measures as well with outlook as with Eudora, (not opening every received executable file for example) then there is nothing wrong with both of them.

One thing you can do, is open windows explorer, goto the menu extra/mapoptions and in the second tab, deselect the hide known extensions.
This way, if someone sends a file.txt.exe you will still see it's an executable, and not a txt file, as you will see the notepad icon which wrongly indicates the file type. (At least this used to be so in prior windows versions)

katchum · Post by **katchum** » Thu Nov 20, 2003 7:23 am

I downloaded AVG and ran the program found 3 viruses.

But still I get emails from Microsoft Internet Service with 142 Kb and microsoft protection service...

How do I stop this?

keithstuart · Post by **keithstuart** » Thu Nov 20, 2003 1:30 pm

katchum wrote:I downloaded AVG and ran the program found 3 viruses.

But still I get emails from Microsoft Internet Service with 142 Kb and microsoft protection service...

How do I stop this?

you can't

those emails are from other infected pc's provided you dont open them you are fine just delete them

the major problem with these modern virui is the massive number that get sent crashing mail networks

katchum · Post by **katchum** » Thu Nov 20, 2003 1:34 pm

This is serious then.

The problem is that I can't change e-mail-address.

keithstuart · Post by **keithstuart** » Thu Nov 20, 2003 3:46 pm

katchum wrote:This is serious then.

The problem is that I can't change e-mail-address.

why change email address

i had this problem when the virus first hit the world and i was getting a few dozen mails a day but after a while they slowed down and finally stopped

admittedly the odd one or two has arived this week but no major onslaught

tellymetwise · Post by **tellymetwise** » Thu Nov 20, 2003 4:59 pm

Lucky you keith, I still receive dozens and dozens a day.
I wonder what would happen if I didn't check my mail for a day or two.

ghorn · Post by **ghorn** » Thu Nov 20, 2003 7:24 pm

tellymetwise wrote:Lucky you keith, I still receive dozens and dozens a day.
I wonder what would happen if I didn't check my mail for a day or two.

Your problem is somebody with your email address in their address book has the virus on their computer, maybe more then one system is invovled. Check with your contacts to see if they have patched their system and ran an up to date virus scan.

tellymetwise · Post by **tellymetwise** » Fri Nov 21, 2003 7:14 am

It's an email address I use to post in newsgroups. Quite a lot of people can accidently reply to sender (and add an email address to there addressbook) instead of reply to newsgroup.

That would give me quite a few unknown contacts.

I've already solved it with filters, so those message don't even get downloaded.
The only thing that get's in my INBOX are wanted messages. Anything else goes directly in the trashbin.
At the moment just 5 or 10 spams a day.

Net-Chess.Comhttps://www.net-chess.com/phpBB2/

New virus making its rounds (Swen)

New virus making its rounds (Swen)

Re: New virus making its rounds (Swen)

I messed up

Spazz man....

Re: New virus making its rounds (Swen)

Eudora