Worm.Automat.AHB

[Bryan]

What is going on? I have received literally dozens of e-mails in the last 3
days from unknown senders with the Worm.Automat.AHB virus attached.

Anyone else getting this activity?

Bryan

 

[Dan Shackelford]

On Mon, 22 Sep 2003 03:26:31 +0000, Bryan wrote:

No, the several hundred posts on this exact same problem in the last
couple of days, posted here, are merely figments of imagination.

Please, read the postings before posting questions. It is also called the
SWEN virus.

 

[FromTheRafters]

What is going on? I have received literally dozens of e-mails in the last 3
days from unknown senders with the Worm.Automat.AHB virus attached.

Anyone else getting this activity?

Bryan

<sarcasm>

Nope, you're the only one.

</sarcasm>

Another name for this one is swen.a
...and many (too many) posts about it, can be found.

 

[mac]

yes same problem from a microsoft security upgrade

 

[Steve M (remove wax for reply)]

It's not a real security upgrade from Microsoft. It's the Swen virus,
and it sends an email that looks very much like some web pages at
Microsoft.com. The virus was misidentified as "Automat.AHB" by Norton
last week, but that will change soon.


http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

"The definitions that Symantec's Digital Immune System automatically
created previously detected W32.Swen@mm as Worm.Automat.AHB.

"W32.Swen.A@mm is a mass-mailing worm that uses its own SMTP engine to
spread itself. It attempts to spread through file-sharing networks,
such as KaZaA and IRC, and attempts to kill antivirus and personal
firewall programs running on a computer.

"The subject, body, and From: address of the email may vary. Some
examples claim to be patches for Microsoft Internet Explorer, or
delivery failure notices from qmail."