Re: The Internet worm 'Swen' rides again

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/29/05 

Date: Wed, 28 Sep 2005 20:21:18 -0400

From: "Phil Weldon" <notdiscosed@example.com>

| I haven't seen a wild example of 'Swen' in the last year. Today, September
| 28 2005 I came across a 'Swen' generated post to a newsgroup. The subject
| line is 'See this internet patch from MS'. The text message posted has been
| updated to read September 2005 (probably an automatic update since in the
| past the would change month by month to match the posting month. The
| posting domain seems to be skynet.be , the signatures seem to be the same as
| ever was, at least Symantec identifies it as W32.Swen.A@mm .
|
| Phil Weldon
|

I take it it was a non-Microsoft News Group. 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm