(Swen) New Virus

Printable View

September 18th, 2003, 12:19 PM
+Daemon+

(Swen) New Virus

ReadMore here
http://[email protected]

Quote:

W32.Swen.A@mm is a mass-mailing worm that also attempts to spread through file-sharing networks, such as KaZaA, and IRC, and will attempt to kill antivirus and personal firewall software running on the computer.

The worm will also attempt send itself out to addresses found in the Microsoft Outlook address book. The email in which W32.Swen.A@mm arrives within can vary. Some examples include emails that claim to be patches for Microsoft Internet Explorer, or as delivery failure notices from qmail.
September 18th, 2003, 04:23 PM
ChipCreep

KaZaa & IRC

If I catch anyone with KaZaa on my network, forget the worm, I'll be mass-mailing them out in itty-bitty pieces. :mad:
September 18th, 2003, 05:37 PM
FatalException0E

Quote:

Originally Posted by ChipCreep

If I catch anyone with KaZaa on my network, forget the worm, I'll be mass-mailing them out in itty-bitty pieces. :mad:

Dude, that's awesome. I'll have to remember that. :grin:
September 19th, 2003, 05:50 PM
Orangeman

Why do people make these things? Don't they have better things to do with their time? :uke:
September 22nd, 2003, 11:58 AM
Stalemate

Got one last week in an e-mail titled "Last (or final?) Security Update" straight from Microsoft.

Yeah, right. :rolleyes:
September 22nd, 2003, 12:37 PM
Gollo

I've been getting them for several days now. AVG has been catching all of them.
September 22nd, 2003, 01:10 PM
flackt

Quote:

Originally Posted by a d e p t

Got one last week in an e-mail titled "Last (or final?) Security Update" straight from Microsoft.

Yeah, right. :rolleyes:

Could you imagine if Microsoft did email every registered customer, every time they issued a Patch!

That would be alot of e-mail! :thumbs2:
September 22nd, 2003, 02:57 PM
Stalemate

Quote:

Originally Posted by flackt

Could you imagine if Microsoft did email every registered customer, every time they issued a Patch!

That would be alot of e-mail! :thumbs2:

Well, it did try to copy the look of the MS Security Updates I'm subscribed to, but McAfee saw something wrong with a GIF inside, so it got more attention from me after that. :redeyes:
September 29th, 2003, 04:24 PM
Stalemate

Follow up

As much as I would like for there to be dire and much terminal consequences for virus writing/distributing, I must admit that there's a lot of work going into the social engineering aspect.

Check out this pic:

http://www3.sympatico.ca/sboisvert/images/swen.jpg

And McAfee responded dutifully when I received it:

Quote:

****************** McAfee VirusScan ************************
******* Alert generated at: Mon, 29 Sep 2003 16:59:27 -0500 *********
************************************************** *******************
McAfee VirusScan has detected a potential threat in this e-mail
sent by Security Department <[email protected]>.
The following actions were attempted on each suspicious part.
We strongly recommend that you report this virus-related activity
to Security Department <[email protected]>.

The attachment "Installer.exe" is infected with the W32/Swen@MM Virus(es).
This attachment has been cleaned.