Swen worm. Does anybody know to answer me?

[Fogar]

Hi,
I'd like to know because in "Attach" of my Eudora I have many infected
attachments fo Swen worm and any antivirus see them.
They have these extensions:
aanhz.exe.safe, amnhcnoj.exe.safe, bpzjxglk.exe.safe, hvfys.exe.safe,
Upgrade.exe.safe, upgrade95.exe.safe and many, many others infected
files.
I also used an online scan with PC-cillin.
Why? What have I to do now?
Thanks

bye Fogar

 

[Michael Cecil]

Hi,
I'd like to know because in "Attach" of my Eudora I have many infected
attachments fo Swen worm and any antivirus see them.
They have these extensions:
aanhz.exe.safe, amnhcnoj.exe.safe, bpzjxglk.exe.safe, hvfys.exe.safe,
Upgrade.exe.safe, upgrade95.exe.safe and many, many others infected
files.
I also used an online scan with PC-cillin.
Why? What have I to do now?

You received swen emails. The virus files were decoded into your
attachment folder. Delete the emails. Delete the virus files.

(Don't execute them - better to just send to jail for life.)

 

[Bill]

You received swen emails. The virus files were decoded into your
attachment folder. Delete the emails. Delete the virus files.

Michael, he's been told already and it's not likely that he's going to
comprehend the instructions to just delete them. Besides that, his
anti-virus would have elimnated them during a scan of his system.

As I said, he's been told what to do more than once. I suspect he's
trolling, which is why I killfiled him.

I guess I I don't suffer fools very well.

 

[Fogar]

I'm sorry bu I think my bad english doesn't make sense.
I'm afraid that the antivirus doesn't those infected files because it
is transformed.

 

[Azmodan]

rofl funny shit, just go to ur DOS prompt and type Format c: /v:VirusFree

 

[h2so4]

I guess I I don't suffer fools very well.

Avoid mirrors at all costs. In the meantime do continue to grace this group
with your helpful and friendly presence.

 

[Alastair Smeaton]

Avoid mirrors at all costs. In the meantime do continue to grace this group
with your helpful and friendly presence.

lol

I just dropped in here to see what the swen worm was doing. Found Bill
and a couple of others who seem to delight in putting others down - in
this case, someone whose English is obviously impeding his ability to
help himself and take the good advice given to him.

I can just imagine Bill, on that rare day when everyone posts
knowledgable questions and conforms to his high standards - he would
be sitting at his PC with smoke coming out of his ears, as criticising
people obviously represents a deep-seated need for him.

Someone else helpfully suggested that regulars here either put up with
him or killfile him - took me 20 mins reading to make my choice

 

[Rick Simon]

Hi,
I'd like to know because in "Attach" of my Eudora I have many infected
attachments fo Swen worm and any antivirus see them.
They have these extensions:
aanhz.exe.safe, amnhcnoj.exe.safe, bpzjxglk.exe.safe, hvfys.exe.safe,
Upgrade.exe.safe, upgrade95.exe.safe and many, many others infected
files.

Sounds like you are running Outpost firewall and letting it's Attachment
Plugin filter rename executables to *.safe. Either that or you are
running some other attachments filter somewhere that is adding the
".safe" onto the end of the file names.

Your antivirus program is probably set to only scan known file types
which do not include the *.safe extensions. If true, then it will not
find the *.safe files in your Attachments folder. Go into your antivirus
program and temporarily set it to scan all files, then rescan your
attachments folder. It should then find the virus infected files.

 

[Fogar]

Sounds like you are running Outpost firewall and letting it's Attachment

Plugin filter rename executables to *.safe.

Hi,
sure! I have Outpost firewall.
Have I to configure it in other way?

Go into your antivirus
program and temporarily set it to scan all files, then rescan your
attachments folder. It should then find the virus infected files.

My AVG Pro v.7 has setted to scan all files by default.
Today I have realized however that the whole files that I believe are
infected they have 0 byte.
What does it mean?
Thanks again



bye Fogar

 

[Rick Simon]

Hi,
sure! I have Outpost firewall.
Have I to configure it in other way?

No. It is working properly.

My AVG Pro v.7 has setted to scan all files by default.
Today I have realized however that the whole files that I believe are
infected they have 0 byte.
What does it mean?

If the files are 0 bytes in size, then AVG has already found and removed
the worm from them. Those files are no longer infected. You can delete
them if you wish.

 

[optikl]

I'm sorry bu I think my bad english doesn't make sense.
I'm afraid that the antivirus doesn't those infected files because it
is transformed.

Look, if your AV "finds" infected files, it's working. Sometimes, it's a
"good" thing to NOT have your AV delete things, automatically. No, actually
ALL the time it's a good thing. YOU want to make that decision for YOURSELF.
The bad people who create these things want to scare you. But, the good
people here will help you. Well, except for Bill because he can't tolerate
you, but don't worry, Bill won't mail you any viruses.

 

[Wayne]

He he he thanks my 3 yo granddaughter will love it.

 

[Wayne]

Oops replied to wrong thread he he he

He he he thanks my 3 yo granddaughter will love it.

 

[Oh Well]

Why not call your 3 yo granddaughter and ask her to help? : )

| Oops replied to wrong thread he he he
| | > He he he thanks my 3 yo granddaughter will love it.
| >
| > | > > Hi,
| > > I'd like to know because in "Attach" of my Eudora I have many infected
| > > attachments fo Swen worm and any antivirus see them.
| > > They have these extensions:
| > > aanhz.exe.safe, amnhcnoj.exe.safe, bpzjxglk.exe.safe, hvfys.exe.safe,
| > > Upgrade.exe.safe, upgrade95.exe.safe and many, many others infected
| > > files.
| > > I also used an online scan with PC-cillin.
| > > Why? What have I to do now?
| > > Thanks
| > >
| > > bye Fogar
| >
| >
|
|

 

[FromTheRafters]

rofl funny shit, just go to ur DOS prompt and type Format c: /v:VirusFree

Just in case you were considering following this advice ~ don't.

 

[Elly Byrne]

Is it possible that one of your virus programs renamed the files and
added the .safe extension? All you have to do is delete them.

Hi,
I'd like to know because in "Attach" of my Eudora I have many infected
attachments fo Swen worm and any antivirus see them.
They have these extensions:
aanhz.exe.safe, amnhcnoj.exe.safe, bpzjxglk.exe.safe, hvfys.exe.safe,
Upgrade.exe.safe, upgrade95.exe.safe and many, many others infected
files.
I also used an online scan with PC-cillin.
Why? What have I to do now?
Thanks

bye Fogar

Tinnitus is a pain in the neck
Elly's Tinnitus Resources
http://www.eebee.net/
http://www.tinnitusrelief.net/

For email: elly at eebee.cjb.net