Printable View
I get at least 10 to 15 emails everyday which are infected with the SWEN worm. Luckily my virus protection program picks them up. I have tried to block the senders in OE, but this does not help with the new ones. They all look like they are coming from the same address, but obviously not. Is there a way to stop this or do I have to just let the mass mailings die down. It's been happening since Sept 19.
Thanks for any suggestions
Set Up A Filter. Make the filter block the subject and key words in the message. Also Try Blacking attachments if possible. That Should help.
The way the SWEN virus works means that you are getting these viruses from people you know, after all - you are in their address book..... The fact that the sender's address is unfamiliar is irrelevant..... The virus is coming from a machine owned by someone who knows you......
So.... You have two choices:-
1. Educate your friends
2. Change your friends
If 1 doesn't work, 2 will probably do it...... ;)
That's a good theory Tiger.
Might have to start applying that. I recently downloaded a file from a friend.
And once i had unzipped it, i sat back dumfounded realising that my hard disk was being erased in from of my eyes.
sorry people i just had to say that.
Back to the Topic At hand.
I wish I could help you find a way to stop the madness. However, the current madness is actually just the normal state. Tomorrow there will be a new madness. And, a new one the day after that ...
Didn't you know? The inmates are running the asylum!
Ha!
"OE" must be Outlook Express, with its patent VTP technology?
VTP = "Virus Transfer Protocol" :D
Sorry, could not resist that one
There is a product called MailControl...............it only works with SMTP, but asks you if you really want to send an e-mail........handy to block MM type worms?
Good Luck
"The inmates are running the asylum" (good quote)
My question is this............There are 100 million computer users. And only 1 million ISP's.
Why don't the ISP's add AV to their SMTP servers ? (yeah yeah yeah......some do for a fee)
You're on your own gals & guys....
Stop the Maddness? NEVA!!!!
You can never stop me!.. MUAHAHAHahahahahahahahahaha
*xmaddness runs around in circles and then dissapears in a puff of smoke
Has anyone gotten or heard of an email form MailScanner <[email protected]>
I just received an email from this person which read:
It also had an enclosed attachment which my virus protection software did not read as a virus.Quote:
A message you recently received from "<[email protected]>" with the
subject "Current Microsoft Critical Pack"
contained one or more viruses that could be disinfected.
The viruses have been removed, and the disinfected files are attached
to this message.
--
MailScanner
Email Virus Scanner
NO, I did not open it..... just wondering
Another stupid question: Can a virus infect ones computer if you just open an email, without opening the enclosed attachment?
Spools is correct. In fact, since I cannot seem to educate my friends as Tiger has suggested, I resorted to creating mail filters in OE.
Here is what you do:
1) Hit any of the major antivirus sites and get the complete list of subjects the worm uses.
2) In OE, go to Tools>Message Rules>Mail
3) Click "New"
4) Name your rule
5) Check off, "Where subject line contains specific words
6) Add all of the subjects in
7) Check Delete as the action
8) Save your rule and exit
9) Relax knowing that all instances of the worm e-mail are now being placed in the trash.
:)
--TH13
Hi Arken,
Just look at the top of the AO page under "Security News".......second item. It might be this one or a variant? There have been several scams of this nature MICROSOFT DO NOT SEND UPDATES.....................delete anything that claims to be such.
I would delete it and make sure that your AV is up to date. I wouldn't trust the disinfection claim, and can assure you that the files are worthless carriers for the virus.
YES you can get a virus from just opening an e-mail. That is why you should have "message preview" disabled in your mail client. If the e-mail is an executable or contains a self executing one, it will run, and you are infected.
Do a Google search for ScripTrap, and go here
http://www.softlookup.com/preview/dis10514.html and Get "MoOutlookSecurity" Not sure if it works on XP? but it does with all other WIN flavours. They both attempt to stop scripts running from where they shouldn't........like your e-mail.
Hope this helps
Cheers
Just a little note to say thanks to all for all the advice.
Luckily I'm not infected, and hopefully using all the help I got here I won't be... and hopefully will be able to stop these emails.
So Thanks Again
You should change your email if possible. If they don't know your email they cannot send you a worm.
You should also notify your email provider
Poopdigger,
What you suggest is not needed. If you are in business you want to keep your e-mail address, because it is too much hassle to inform everyone that it has changed. This is the swen worm, not a personal attack.
When you are in business, you will be on the address books of all your suppliers, customers and so on. When a mass mailing worm gets lose in their system, it will read the "Corporate Address Book", which has the e-mail addresses of all the people they communicate with. One of their employees releases the worm and you get mailed, then another one of their PCs gets infected, and you get another mail, and so on.
Because people in the same line of business tend to deal with eachother you can get caught in a "crossfire" because you are ALL in EACHOTHER'S Corporate address books.
The situation gets even more complex with malware that uses its own mailing client and "spoofs" (forges) the names and addresses.......you really have no idea where it came from.
As for the ISP/Mail provider, either they scan for viruses or they don't. Those who do, usually charge you extra for the service, so you have to balance the cost benefit of such a service.
Cheers
TH13,
Thats exactly what I did. I keep getting all those "See the Attachement!" emails. I have no idea where they are coming from, because the e-mail they are going to is not one of my widly used e-mails.
So as he said. just set up rules for your mail that will dump those virii emails right into the trash. Thats what I did, problem solved.
xmaddness
Yet again...... This whole mass mailing virus thing can be stopped in it's tracks on a corporate level in one easy step. Consider the two scenarios below:-
1. Small corporation who's ISP provides email.
2. Large corporation who provides it's own email.
Solution for scenario 1: Block all outbound SMTP connections except those directed at the ISP's mail server.
Solution for scenario 2: Block all outbound SMTP connections except those originating at your corporate mail server.
Don't have the timerity to tell me that people aren't firewalled - that just proves people don't care. So, if you have a firewall of any use whatsoever you can block ports. Since all these shiny new viruses carry their own SMTP engine they just start firing away to the different mail servers per the addresses in the address books. But they can't if they are not authorised to send an SMTP communication to the destination of their choice.
I know I've said this all about 10 times but I sometimes get the feeling I'm not being heard...... :eek:
dont worry i heard u i just didnt understand u
What didn't you understand?