(Swen) New Virus
Results 1 to 9 of 9

Thread: (Swen) New Virus

  1. #1
    Registered User +Daemon+'s Avatar
    Join Date
    Jan 2002
    Location
    RC, Ca
    Posts
    3,406

    (Swen) New Virus

    ReadMore here
    http://[email protected]

    W32.Swen.A@mm is a mass-mailing worm that also attempts to spread through file-sharing networks, such as KaZaA, and IRC, and will attempt to kill antivirus and personal firewall software running on the computer.

    The worm will also attempt send itself out to addresses found in the Microsoft Outlook address book. The email in which W32.Swen.A@mm arrives within can vary. Some examples include emails that claim to be patches for Microsoft Internet Explorer, or as delivery failure notices from qmail.

  2. #2
    Registered User ChipCreep's Avatar
    Join Date
    Dec 2001
    Posts
    425

    KaZaa & IRC

    If I catch anyone with KaZaa on my network, forget the worm, I'll be mass-mailing them out in itty-bitty pieces.

  3. #3
    Registered User FatalException0E's Avatar
    Join Date
    Sep 2000
    Location
    New Braunfels, TX, USA
    Posts
    2,154
    Quote Originally Posted by ChipCreep
    If I catch anyone with KaZaa on my network, forget the worm, I'll be mass-mailing them out in itty-bitty pieces.
    Dude, that's awesome. I'll have to remember that.

  4. #4
    Registered User Orangeman's Avatar
    Join Date
    Aug 2001
    Location
    Sunny Tacoma, WA
    Posts
    3,536
    Why do people make these things? Don't they have better things to do with their time?

  5. #5
    Registered User Stalemate's Avatar
    Join Date
    May 2001
    Location
    d4-e5
    Posts
    15,120
    Got one last week in an e-mail titled "Last (or final?) Security Update" straight from Microsoft.

    Yeah, right.

  6. #6
    Registered User Gollo's Avatar
    Join Date
    Sep 2001
    Location
    Grand Rapids, Michigan US of A
    Posts
    2,383
    I've been getting them for several days now. AVG has been catching all of them.

  7. #7
    Registered User flackt's Avatar
    Join Date
    Jan 2001
    Location
    Shumway,IL,USA
    Posts
    66
    Quote Originally Posted by a d e p t
    Got one last week in an e-mail titled "Last (or final?) Security Update" straight from Microsoft.

    Yeah, right.
    Could you imagine if Microsoft did email every registered customer, every time they issued a Patch!

    That would be alot of e-mail!

  8. #8
    Registered User Stalemate's Avatar
    Join Date
    May 2001
    Location
    d4-e5
    Posts
    15,120
    Quote Originally Posted by flackt
    Could you imagine if Microsoft did email every registered customer, every time they issued a Patch!

    That would be alot of e-mail!
    Well, it did try to copy the look of the MS Security Updates I'm subscribed to, but McAfee saw something wrong with a GIF inside, so it got more attention from me after that.

  9. #9
    Registered User Stalemate's Avatar
    Join Date
    May 2001
    Location
    d4-e5
    Posts
    15,120

    Follow up

    As much as I would like for there to be dire and much terminal consequences for virus writing/distributing, I must admit that there's a lot of work going into the social engineering aspect.

    Check out this pic:



    And McAfee responded dutifully when I received it:

    ****************** McAfee VirusScan ************************
    ******* Alert generated at: Mon, 29 Sep 2003 16:59:27 -0500 *********
    ************************************************** *******************
    McAfee VirusScan has detected a potential threat in this e-mail
    sent by Security Department <[email protected]>.
    The following actions were attempted on each suspicious part.
    We strongly recommend that you report this virus-related activity
    to Security Department <[email protected]>.

    The attachment "Installer.exe" is infected with the W32/Swen@MM Virus(es).
    This attachment has been cleaned.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •