Re: Swem virus

From: Phil Weldon (pweldon_at_mindspring.com)
Date: 09/30/03


Date: Tue, 30 Sep 2003 14:57:03 GMT


When you post a message, you are posting to a Usenet newsgroup, NOT to a
Microsoft forum.

The vast majority of the replies here are from users who have no connection
with Microsoft, but who are volunteering their help.

You may be having trouble phoning Microsoft because of the rapid spread of
this worm.

At any rate, the advice Earthlink gave you is useless.

The only way this flood of infected e-mail messages can be stopped is for
ISP's (like Earthlink) to begin scanning all e-mail for viruses. Evidently
Earthlink has not acknowledged their responsibility. You can protect your
system from infection, BUT ABSOLUTELY NOTHING you do will stop the flood of
infected e-mail you receive. That e-mail is generated by the worm, and your
e-mail address was harvested from an infected system or network; if you are
getting these infected e-mail messages, it also means that the worm is
putting YOUR e-mail address on infected messages as the sender. All this
happens outside your control because it is happening on another computer.

>From your post it is not exactly clear what you have experienced. Nevermind
what the Earthlink message said. What did your antivirus program report?

You can either post a lot more specific information about your incident, or
you can go to
http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
and read about the 'swen' worm .

Most importantly, make sure you have a good antivirus program running on
your system and that the virus definitions are updated daily. Also make
sure you have all the necessary Microsoft security patches and Service Packs
installed (for Windows and for MS Offices.)

Phil Weldon, pweldon@mindspring.com

"Frances Burlock" <burlockjf@earthlink.net> wrote in message
news:16fc01c38744$80d78640$a401280a@phx.gbl...
> This virus name was identified by Earthlink. I opened
> it because it looked like a true Microsoft message. The
> virus is sending hundreds of email messages. Earthlink
> deleted the pending messages and advised me to call you.
>
> I hope you will instruct me how to remove this virus via
> telephone, fax or this message board, because I am
> reluctant to open my email.
>
> Your tech service which is supposed to give help by phone
> is allegedly open from 5:00 AM to 6:00 PM. At 7:00 AM no
> representative was available.
>
> Frances Phone 757-868-6500 Fax 757-868-0991
>



Relevant Pages

  • Swen Overloads Email Inbox Limits
    ... Again, Earthlink support says, "It's not our problem, ... >infected with the virus and, ... >I received a batch of infected e-mail today. ...
    (microsoft.public.security.virus)
  • Swen Overloads Email Inbox Limits
    ... With EarthLink, ... to their support page and follow the instructions to ... infected with the virus and, ... I received a batch of infected e-mail today. ...
    (microsoft.public.security.virus)
  • Re: Swem virus
    ... OEM --you can call Microsoft for free ... > This virus name was identified by Earthlink. ... > virus is sending hundreds of email messages. ...
    (microsoft.public.security.virus)
  • Error in XP professional
    ... option to send the error to microsoft or not. ... Earthlink ... told me this error has to do with a virus. ... anymore, and the problem seems to happen when i start ...
    (microsoft.public.windowsxp.perform_maintain)
  • Blank Pages on Virus & Window Patches Pages
    ... In Norman Virus Control the following message comes us. ... Dear Windows Support ... From: Microsoft Australia Product Support ... please use the System Configuration Utility. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)