Re: W32.Swen.A@mm worm



It's been circulating for a couple of years or so.

Tom

"Nate" <Nate@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:16F76E5C-FEB9-457C-B5F3-D22B141D8D21@xxxxxxxxxxxxxxxx
Just a warning that the e-mail circulating about a "Microsoft Update" that
is
clearly from a spoofed email contains this virus.
The subject header is "Current Net Patch"

The file contained is Install.exe (104k)





X-Originating-IP: [193.252.22.25]

Return-Path: <euromonteil.j@xxxxxxxxxx>
Authentication-Results: mta251.mail.re2.yahoo.com domainkeys=fail (bad
syntax)
Received: from 193.252.22.25 (EHLO smtp6.wanadoo.fr) (193.252.22.25) by
mta251.mail.re2.yahoo.com with SMTP; Tue, 02 May 2006 02:12:26 -0700
Received: from smtp6.wanadoo.fr (mwinf0603 [172.22.137.25]) by
mwinf0610.wanadoo.fr (SMTP Server) with ESMTP id 88AA980481A for
<divinewind_0587@xxxxxxxxx>; Tue, 2 May 2006 11:12:25 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1]) by
mwinf0603.wanadoo.fr (SMTP Server) with ESMTP id CE8121C00232 for
<divinewind_0587@xxxxxxxxx>; Tue, 2 May 2006 11:12:24 +0200 (CEST)
Received: from veouybe (Mix-Clermont-F-103-1-134.w193-250.abo.wanadoo.fr
[193.250.93.134]) by mwinf0603.wanadoo.fr (SMTP Server) with SMTP id
4C1F01C0023B; Tue, 2 May 2006 11:11:50 +0200 (CEST)


.