Re: Is this for real??

From: Pam (pfloresatcharterdotnet)
Date: 12/31/03


Date: Tue, 30 Dec 2003 15:50:39 -0800


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
message news:efEKWquzDHA.2056@TK2MSFTNGP10.phx.gbl...
| Not only is this true boys and girls but because Toni wants
this emailed to her and she has
| posted her TRUE email address, not munged, Toni has invited
the receipt of the Swen worm.
|
| The Swen is news spelled backwards. The reason it is called
this is because the Swen worm
| harvests email addresses from UseNet News Groups. It has an
engine tat allows it to post
| itself to UseNet News Groups and well as it has its own
email engine. From the list of
| email addresses that it has harvested, it then well itself
via email to those addresses.
| Read the following URL for information and removal
instructions
|
| W32/Swen@MM - http://vil.nai.com/vil/content/v_100662.htm
|
| W32/Dumaru.a@MM -
http://vil.nai.com/vil/content/v_100560.htm
|
| McAfee worm removal Tool, Stinger -
http://vil.nai.com/vil/stinger/
|
| There are several Internet worms that masquerade as patches
from Microsoft. The most
| common
| are; Swen, Dumaru, Gibe and Torvil. All AV companies and
Microsoft are fully aware of
| this
| problem.
|
| All you can do is...
|
| 1. Keep your AV package up-to-date
| 2. Create email "rules" to auto-delete the offending
messages
| 3. Petition your ISP to install AV software on their
respective email servers.
| 4. Install *all* MS Critical Updates via the Windows
Update web site.
| 5. If all else fails, Change your email address.
|
| Dave
|
|
|
|
|
|
|
|
| "Toni Day" <anonymous@discussions.microsoft.com> wrote in
message
| news:04b301c3cee9$a94f8a90$a001280a@phx.gbl...
| | Hello,
| | I just received this email today (12/30/03) and I am not
| | sure if I should open the attachment or not. I am afraid
| | it is a hoax that will give my pc a virus! Does it look
| | familiar to any of you in the group? Please email me at
| | bear82502@earthlink.net if you can give me any
| | suggestions as to what I need to do to find out if it is
| | and authentic email from Microsoft.
| |
| | Thank You,
| | Toni Day (email I received is below)
| |
| | ALERT! VIRUS DETECTED! Symantec CarrierScan Server virus
| | protection service detected one or more infected files in
| | this email.
| |
| | The following attachments were infected with a virus and
| | have been repaired:
| | No attachments are in this category.
| |
| | The following infected attachments were deleted because
| | the files were infected with a virus and could not be
| | cleaned:
| | 1. patch.exe: W32.Dumaru@mm
| |
| |
| | -The Marketscore Network
| | ------------ Original message text follows ------------
| |
| |
| | Dear friend , use this Internet Explorer patch now!
| | There are dangerous virus in the Internet now!
| | More than 500.000 already infected!
| |
|
| Toni: This is a virus, and Microsoft never emails patches
to it's customers EVER. As David mentioned you posted your
real email address in the post so now you may see more of
these very emails you are writing about (see David's
explanation why) Read the following link which explains how
to munged you email, and never post a real email address to a
newsgroup unless you want to receive more of these fake MS
emails. Make sure your antiviral is up to date, you have a
properly configured firewall, and all critical MS patches
http://v4.windowsupdate.microsoft.com/en/default.asp
http://www.mailmsg.com/SPAM_munging.htm

Good Luck,

Pam



Relevant Pages

  • Re: Is this for real??
    ... Not only is this true boys and girls but because Toni wants this emailed to her and she has ... posted her TRUE email address, not munged, Toni has invited the receipt of the Swen worm. ... VIRUS DETECTED! ... | No attachments are in this category. ...
    (microsoft.public.security.virus)
  • Re: how to remove this virus??
    ... Toni wrote: ... finally i've got one virus installed in my ... > the annoying files are secure.html and hosts file. ... But what is your anti-virus program saying about it? ...
    (microsoft.public.security.virus)
  • Re: how to remove this virus??
    ... "Toni" wrote in message ... > Hello folks, ... finally i've got one virus installed in my ... > the annoying files are secure.html and hosts file. ...
    (microsoft.public.security.virus)
  • Re: DBXtend extracted attachment query
    ... >messages from a folder, one of the extracted attachments has ... Symantec information about the virus to a colleague. ... VBS.KakWorm spreads using Microsoft Outlook Express. ... If you have a patched version of Outlook Express, this worm will ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: virus from Microsoft
    ... It IS a hoax and it IS a virus and it is NOT from ... Microsoft never sends attachments via unsolicited email. ...
    (microsoft.public.security.virus)