Re: W32.Swen.A@mm worm



It's been circulating for a couple of years or so.

Tom

"Nate" <Nate@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:16F76E5C-FEB9-457C-B5F3-D22B141D8D21@xxxxxxxxxxxxxxxx
Just a warning that the e-mail circulating about a "Microsoft Update" that
is
clearly from a spoofed email contains this virus.
The subject header is "Current Net Patch"

The file contained is Install.exe (104k)





X-Originating-IP: [193.252.22.25]

Return-Path: <euromonteil.j@xxxxxxxxxx>
Authentication-Results: mta251.mail.re2.yahoo.com domainkeys=fail (bad
syntax)
Received: from 193.252.22.25 (EHLO smtp6.wanadoo.fr) (193.252.22.25) by
mta251.mail.re2.yahoo.com with SMTP; Tue, 02 May 2006 02:12:26 -0700
Received: from smtp6.wanadoo.fr (mwinf0603 [172.22.137.25]) by
mwinf0610.wanadoo.fr (SMTP Server) with ESMTP id 88AA980481A for
<divinewind_0587@xxxxxxxxx>; Tue, 2 May 2006 11:12:25 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1]) by
mwinf0603.wanadoo.fr (SMTP Server) with ESMTP id CE8121C00232 for
<divinewind_0587@xxxxxxxxx>; Tue, 2 May 2006 11:12:24 +0200 (CEST)
Received: from veouybe (Mix-Clermont-F-103-1-134.w193-250.abo.wanadoo.fr
[193.250.93.134]) by mwinf0603.wanadoo.fr (SMTP Server) with SMTP id
4C1F01C0023B; Tue, 2 May 2006 11:11:50 +0200 (CEST)


.



Relevant Pages

  • Re: [SLE] Fetchmail Daemon Problem
    ... The mail server was rejecting this mails with the header filter, ... > case, to fetchmail, otherwise, to whatever is at the other side. ... Blocking backscatter mail from virus scanners Jun ...
    (SuSE)
  • exim+clamd not deny virus email -- how?
    ... After a lot of tweaking with Amavis-new, I almost got what we want. ... So now I am trying another method, that is, I only use exim ACLs to link ... An email can still get spam-score marked even it contains virus. ... I can not manage clamd to insert a header for a virus email. ...
    (comp.os.linux.misc)
  • Re: Lynn at garlic.com
    ... please not that the only part of the e-mail I am receiving is from my ISP telling me that a virus has been deleted. ... it is probably somebody impersonating "lynn@xxxxxxxxxx" (that ... header information (many don't bother since ...
    (bit.listserv.ibm-main)
  • Re: Autocomplete nk2 file editor
    ... As for the sender information from the header, ... At least try to be honest in your advertising - I don't care if you promote ... the (insert latest virus name here) virus, all mail sent to my personal ...
    (microsoft.public.outlook.general)
  • Re: Autocomplete nk2 file editor
    ... As for the sender information from the header, ... At least try to be honest in your advertising - I don't care if you promote ... the (insert latest virus name here) virus, all mail sent to my personal ...
    (microsoft.public.outlook)