From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 11/10/03

Date: Mon, 10 Nov 2003 12:09:54 -0500

Microsoft did NOT send you the Swen worm !

There are several email messages masquerading as Microsoft patches. The top three infectors
are; Swen, Dumaru and Gibe.

Microsoft *never* sends unsolicited patches via email.

You should also know the Swen worm in particular and spammers in general harvest email
addresses from UseNet News Groups. The Swen worm ('swen' spelled backwards is 'news' !) has
its own News Client built-in such that an infected platform can post itself to UseNet News

I suggest you read the following post:
Answers to frequently asked questions - 10NOV03


"Art Chakalis" <> wrote in message
| I tried to e-mail and/or phone Microsoft without success.
| These boys really don't want to hear from anyone except on
| their terms. Microsoft, don't phone/email me on this one
| as I will treat you in kind and ignore you (I REALLY need
| to begin to take Linux seriously)!
| My Internet provider's server stripped the virus but I
| would guess that there will be a lot of very angry people
| out in cyberspace. The note was addressed from Microsoft
| Corporation Network Security
| Department '' and shows a sent to
| of ''.
| The notice at the bottom of the note was as follows:
| --------------- Virus Warning Message ------------
| Xtra's anti-virus email filter found a virus in an
| attachment to
| this mail message. The action taken by the filter depends
| on
| whether the attachment could be cleaned and is shown at
| the bottom
| of this message.
| For more information regarding Xtra's anti-virus email
| filter please
| visit
| Found virus WORM_SWEN.A in file q737786.exe
| The uncleanable file is deleted.