[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [New Search]

[T3] Virus/worm going around


Listees,

Please don't respond to this message on the list. If you wish to reply, do so 
directly to me.  

For the last week I've been getting a LOT of email messages containing the 
W32/Swen.A@MM internet worm. With Greg's help, I've managed to limit the 
inconvenience and I've not been infected myself. Since this worm infects 
Windows PCs and harvests email addresses that it finds there, it is quite 
possible that there are one or more people on this list whose PCs have this 
virus and are now sending out infected messages to everyone else. The PCs that 
seem to be emailing me appear to be online 24/7, so if you just run a few hours 
a day, you're probably not one of them.  

I don't want to start a "type 3" thread on this subject, but just out of 
curiosity, I'd like to ask that you email me personally if you're getting a LOT 
of these messages. Keep in mind that 10, 20, or even 50 of these messages a day 
is NOT a lot. Please don't respond to the list.  

If you've gotten such a message, apparently from Microsoft, that claims to be a 
security upgrade, and you installed this upgrade, then it is very likely that 
you are infected. If you received one of these messages and opened it, but said 
"No" to installing it, you may still be infected if you use Outlook or Outlook 
Express. MicroSoft NEVER sends out email messages with upgrades. They always 
require that you come to their web site and download the upgrade directly from 
them. Note that the email messages contain spoofed headers, so that the real 
sender can't be identified, so some of you may even have gotten security 
upgrade messages that appear to be from me, but aren't.  

If you think you might be infected, or just want more information, go to the 
Symantec web site and check out their description. Here's the URL to their 
discussion of the Swen.A virus:  

http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.html  

Symantec has a removal tool for this virus, but it is somewhat difficult to 
carry out all the steps. You'll have to print out the instructions for YOUR 
operating system and then follow them carefully.   

thanks,  

-- 
Jim Adney
jadney@vwtype3.org
Madison, WI 53711-3054
USA

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
List info at http://www.vwtype3.org/list | mailto:gregm@vwtype3.org


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [New Search]