Email Virus

[MiltWV]

Hi All,

I don't know what is going on, but in the last 5 days I have had close to 20 emails sent to me containing a virus. All of them have had an attachment with an .exe file which of course I did not open. In each case, AVG caught it and the file was deleted. Several have been what looked to be Microsoft Security updates that wanted you to install their attached patch immediately. I do receive Security Bulletins from Microsoft because I subscribed to them, but they never send any attachments. Besides, if you look at properties for the sender, you find it is an AOL or Yahoo address. At least that is what I have been seeing. Also been getting a number addressed to Administrator. Has anyone else been getting these? I have gotten to the point that I run both AVG and Norton virus checks daily, besides scanning all incoming and outgoing email with AVG. Better paranoid and safe than lax and sorry.

[ZEUS_GB]

I think most people have had e-mails like that, the e-mails are infected with the w32/gibe-f worm also known as w32/swen-a.

sophos report - w32/gibe-f (http://www.sophos.com/virusinfo/analyses/w32gibef.html)
symantec report - w32/Swen-a (http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.html)

If AVG has been finding the worm then it's running as it should. If you are still worried then I suggest you run the fix swen utility from symantec. You can find it here (http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.tool.html)

[Ranger Bob]

About a month ago I went through a period of getting those emails but have not received any lately. As you say MS does not send out patches as an attachment so anytime you receive anything like this just delete the email.

[MiltWV]

Thanks Zeus. Swen.A, that's the one I have been receiving. I will check out that Symantec link too.

[ZEUS_GB]

Glad I could help! :)

[MiltWV]

Here is one of the emails I have been receiving minus the attachment for Install.exe.


Microsoft All Products | Support | Search | Microsoft.com Guide
Microsoft Home


MS Client

this is the latest version of security update, the "November 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express. Install now to maintain the security of your computer from these vulnerabilities, the most serious of which could allow an attacker to run code on your system. This update includes the functionality of all previously released patches.


System requirements Windows 95/98/Me/2000/NT/XP
This update applies to MS Internet Explorer, version 4.01 and later
MS Outlook, version 8.00 and later
MS Outlook Express, version 4.01 and later
Recommendation Customers should install the patch at the earliest opportunity.
How to install Run attached file. Choose Yes on displayed dialog box.
How to use You don't need to do anything after installing this item.

Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact Us.

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies.

--------------------------------------------------------------------------------
The names of the actual companies and products mentioned herein are the trademarks of their respective owners.

Contact Us | Legal | TRUSTe
©2003 Microsoft Corporation. All rights reserved. Terms of Use | Privacy Statement | Accessibility

[Nightsweet]

MiltWV
I have Mailwasher on my computer, and set my filter not to accept anything that contains a virus when it comes in, and it never downloads them, so that way I never get e-mail that contain a virus. I did until I set my filter to stop them, but not bothered with them now. Nightsweet.

[Kathie]

this is the one I got today,I didn't look at it.

From
MS Security Division / Security Pack (This had a paper clip next to it)

[MiltWV]

Originally posted by Kathie@Nov 11 2003, 03:15 AM
this is the one I got today,I didn't look at it.

      From
MS Security Division  /  Security Pack  (This had a paper clip next to it)
I received 2 of those today and 3 others with the Swen.A virus. AVG detected the Swen.A and deleted them. I never used to get this kind of stuff, but in the past two weeks I have received at least 30 or more. I used to use Mailwasher and stopped. I think I will start using it again just to prevent this type of stuff from even getting to my computer. Obviously, my ISP [PeoplePC.com] does not screen emails for virii on the server. ;)

[Lobbie]

I was just wondering can you have Norton's & AVG on the same computer ??? Do they conflict at all ???

thanks Lobbie

[Ranger Bob]

They would if you had them both running in real time. For example if you have auto detect turned on in Norton then you could not do the same thing in AVG with out running the possibility of conflicts.