Latest Worm (W32.Swen.A@mm)

  • Thread starter Thread starter Bruce
  • Start date Start date
B

Bruce

I've gotten about 60 fake Microsoft Patches or delivery failure notices at
my parcxman email account in the last two days. (I use this account as my
public email address to avoid the obvious on my private account.)

If I understand the process correctly, a worm with it's own SMTP engine can
only send emails to addresses it has somewhere on the local (or maybe
networked) hard drive. The emails that I've gotten have been addressed to
tens of people, and the phony return address looks like the typical spammer
address with lots of alpha and numeric characters. How is it that the
sending machine has my email and all of these others? Could it be that
lots of spammers have the worm residing on their machines?

Just curious.

Sincerely,
Bruce
 
If you are infected by the w32.swen.@mm worm, follow this link for removal
instructions.

https://www.europe.f-secure.com/v-descs/swen.shtml

For more information Visit:

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/swen.asp

Information on Bogus Microsoft Security Bulletin E-mails:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/patch_hoax.asp


--
Pavan
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions.
Please use these newsgroups to let me know if the suggestions resolved the
issue.
 
Back
Top