Re: Swen Internet Worm(W32.Swen.A@Worm)

• Previous message: Dan: "Re: Swen Internet Worm(W32.Swen.A@Worm)"
• In reply to: Dan: "Re: Swen Internet Worm(W32.Swen.A@Worm)"
• Messages sorted by: [ date ] [ thread ]

Date: Mon, 23 Feb 2004 15:24:57 -0500

Nope...

All you can do is...

1. Keep your AV package up-to-date
2. Create email "rules" to auto-delete the offending messages
3. Petition your ISP to install AV software on their respective email servers.
4. Install *all* MS Critical Updates via the Windows Update web site.
5. Always munge your email address when posting to UseNet
6. If all else fails, Change your email address.

Eventually the umbers of receipts will drop.

Dave

"Dan" <gamemasterk67@hotmail.com> wrote in message
news:uRgx46j%23DHA.488@TK2MSFTNGP12.phx.gbl...
| Ok so I did do it once... Does it stop sending itself?
| Thanks David,
|
| Bye, Dan
| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:#AwwKDy9DHA.4020@TK2MSFTNGP09.phx.gbl...
| > If you post to UseNet with your TRUE, not a munged, email address then you
| have invited the
| > swen Internet worm [aka; W32/Gibe-F] to visit you.
| >
| > The Swen is news spelled backwards. The reason it is called this is
| because the Swen worm
| > harvests email addresses from UseNet News Groups. It has an engine that
| allows it to post
| > itself to UseNet News Groups and well as it has its own email engine.
| From the list of
| > email addresses that it has harvested, it will then email itself to those
| addresses.
| >
| > W32/Swen@MM - http://vil.nai.com/vil/content/v_100662.htm
| >
| > W32.Swen.A@mm -
| http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
| >
| >
| > There are several Internet worms that masquerade as patches from
| Microsoft. The most
| > common
| > are; Swen, Dumaru, Gibe and Torvil. All AV companies and Microsoft are
| fully aware of
| > this
| > problem.
| >
| > All you can do is...
| >
| > 1. Keep your AV package up-to-date
| > 2. Create email "rules" to auto-delete the offending messages
| > 3. Petition your ISP to install AV software on their respective email
| servers.
| > 4. Install *all* MS Critical Updates via the Windows Update web site.
| > 5. Always munge your email address when posting to UseNet
| > 6. If all else fails, Change your email address.
| >
| > Dave
| >
| >
| >
| >
| > "Dan" <gamemasterk67@hotmail.com> wrote in message
| > news:uYF%23ZBy9DHA.1816@TK2MSFTNGP12.phx.gbl...
| > | i got the Swen Worm but i deleted it.
| > | It came as microsoft storage server s.
| > |
| > | Why?
| > |
| > | Bye, Dan
| > |
| > |
| >
| >
|
|

• Previous message: Dan: "Re: Swen Internet Worm(W32.Swen.A@Worm)"
• In reply to: Dan: "Re: Swen Internet Worm(W32.Swen.A@Worm)"
• Messages sorted by: [ date ] [ thread ]