Re: W32.SwenA@mm virus is so dammed annoying.

From: Veronica Loell (lista_at_nakawe.se)
Date: 11/12/03


Date: Wed, 12 Nov 2003 11:47:14 +0100

Joe M wrote / skrev:

> Thanks Phil, but this MMM3 seems to work only for an Outlook/Outlook Express
> client . It does not work for Exchange server or Lotus Domino Server . It
> happens that I've got a Lotus Domino Mail Server that replicates with an ISP
> Lotus Domino Mail Server and it is during this replication that all W32.Swen
> emails get through...

Typically one would run it alongside an enduser client. But it is a
standalone program all that it needs is a POP3-server to communicate
with. If however your mailserver is directly connected to the internet
you need to institute this in the server directly. As it seems you do
have a server that you actually talk to. This being the case you shold
be able to run a filter to delete from the original server before doing
the replication?

If you can institute a filter in the domino-server that looks at the
first 25 lines just add:

*Content-Type: audio/x-wav*
*Content-Type: audio/x-midi*
*Content-Type: application/x-msdownload*
*"* *, Cumulative Patch" update which fixes*
*"* *, Cumulative Patch" update which resolves*
*"* *, Cumulative Patch" update which updates*
*"* *, Cumulative Patch" update which eliminates*

and you should be able to catch the swen-infected emails.

- Veronica Loell


Quantcast