Re: Is this for real??

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/30/03


Date: Tue, 30 Dec 2003 10:41:21 -0500

Not only is this true boys and girls but because Toni wants this emailed to her and she has
posted her TRUE email address, not munged, Toni has invited the receipt of the Swen worm.

The Swen is news spelled backwards. The reason it is called this is because the Swen worm
harvests email addresses from UseNet News Groups. It has an engine tat allows it to post
itself to UseNet News Groups and well as it has its own email engine. From the list of
email addresses that it has harvested, it then well itself via email to those addresses.
Read the following URL for information and removal instructions

W32/Swen@MM - http://vil.nai.com/vil/content/v_100662.htm

W32/Dumaru.a@MM - http://vil.nai.com/vil/content/v_100560.htm

McAfee worm removal Tool, Stinger - http://vil.nai.com/vil/stinger/

There are several Internet worms that masquerade as patches from Microsoft. The most
common
are; Swen, Dumaru, Gibe and Torvil. All AV companies and Microsoft are fully aware of
this
problem.

All you can do is...

1. Keep your AV package up-to-date
2. Create email "rules" to auto-delete the offending messages
3. Petition your ISP to install AV software on their respective email servers.
4. Install *all* MS Critical Updates via the Windows Update web site.
5. If all else fails, Change your email address.

Dave

"Toni Day" <anonymous@discussions.microsoft.com> wrote in message
news:04b301c3cee9$a94f8a90$a001280a@phx.gbl...
| Hello,
| I just received this email today (12/30/03) and I am not
| sure if I should open the attachment or not. I am afraid
| it is a hoax that will give my pc a virus! Does it look
| familiar to any of you in the group? Please email me at
| bear82502@earthlink.net if you can give me any
| suggestions as to what I need to do to find out if it is
| and authentic email from Microsoft.
|
| Thank You,
| Toni Day (email I received is below)
|
| ALERT! VIRUS DETECTED! Symantec CarrierScan Server virus
| protection service detected one or more infected files in
| this email.
|
| The following attachments were infected with a virus and
| have been repaired:
| No attachments are in this category.
|
| The following infected attachments were deleted because
| the files were infected with a virus and could not be
| cleaned:
| 1. patch.exe: W32.Dumaru@mm
|
|
| -The Marketscore Network
| ------------ Original message text follows ------------
|
|
| Dear friend , use this Internet Explorer patch now!
| There are dangerous virus in the Internet now!
| More than 500.000 already infected!
|



Relevant Pages

  • Re: Is this for real??
    ... | Not only is this true boys and girls but because Toni wants ... from Microsoft. ... VIRUS DETECTED! ... | | No attachments are in this category. ...
    (microsoft.public.security.virus)
  • Re: Please advise
    ... It could be spyware and / or malware and not just a virus. ... > then Format/HTML, the message would display. ... Because of this tendency of attachments to infect, Microsoft has now set OE to block all attachments. ... If you choose to adjust OE to allow attachments, make sure you save the attachment to disk first and then scan it with your antivirus software. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Locking up
    ... Most computer infections are the result of the user opening email attachments. ... The attachment usually contains a virus or worm or trojan that infects the system when it is opened. ... If you choose to adjust OE to allow attachments, make sure you save the attachment to disk first and then scan it with your antivirus software. ... Note that dbx files are hidden in Windows 2000 and Windows XP. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • CERT Advisory CA-2004-02 Email-borne Viruses
    ... CERT Advisory CA-2004-02 Email-borne Viruses ... Source: CERT/CC ... Unsolicited email messages containing attachments are sent ... A virus infection can have significant consquences on your computer ...
    (Cert)
  • CERT Advisory CA-2004-02 Email-borne Viruses
    ... CERT Advisory CA-2004-02 Email-borne Viruses ... Source: CERT/CC ... Unsolicited email messages containing attachments are sent ... A virus infection can have significant consquences on your computer ...
    (Cert)