Win 32 Swen.A@mm help

[Chuck]

I am very confused- my computer, Windows ME, was acting funny-
all my event sounds have disappeared, the inbox/sent mail has
all disappeared from Outlook express. My scanner, AVG Pro did
not find anything, but the BitDefender on-line scanner found
Win 32 Swen.A@mm in two Outlook Express files in the
Windows\Application Data\Identities\randon numbers\Microsoft\Outlook
Express folder.

I have run the bitdefender, the Norton, the AVG and McAfee removal tool
but none of them find an infection to heal.

Do I have a virus/worm or not? If so, how do I remove it?

Thanks for any help.

Chuck

 

[GSV Three Minds in a Can]

I am very confused- my computer, Windows ME, was acting funny-
all my event sounds have disappeared, the inbox/sent mail has
all disappeared from Outlook express. My scanner, AVG Pro did
not find anything, but the BitDefender on-line scanner found
Win 32 Swen.A@mm in two Outlook Express files in the
Windows\Application Data\Identities\randon numbers\Microsoft\Outlook
Express folder.

Where in the folder? The .dbx files in there are where OE stores
newsgroup messages, incoming emails etc.

I have run the bitdefender, the Norton, the AVG and McAfee removal tool
but none of them find an infection to heal.

Do I have a virus/worm or not? If so, how do I remove it?

Impossible to tell from here but it is quite possible for infected NG
messages to have been downloaded and for you to have not read or
activated the attachment. That'll leave them sitting there but you will
not be infected.

Not all scanners look inside all .dbx files anyway. Removal tools, in
particular, are unlikely to look inside the .dbx files for things which
are malware but not 'infecting you' yet.

 

[Jules]

I am very confused- my computer, Windows ME, was acting funny-
all my event sounds have disappeared, the inbox/sent mail has
all disappeared from Outlook express. My scanner, AVG Pro did
not find anything, but the BitDefender on-line scanner found
Win 32 Swen.A@mm in two Outlook Express files in the
Windows\Application Data\Identities\randon numbers\Microsoft\Outlook
Express folder.

I have run the bitdefender, the Norton, the AVG and McAfee removal tool
but none of them find an infection to heal.

Do I have a virus/worm or not? If so, how do I remove it?

Thanks for any help.

Chuck

Hi Chuck,
Here is a link to check out
http://www.symantec.com/avcenter/venc/data/[email protected]
not sure if you already have been there, use the symantec removal tool
follow instructions on that link which is from Norton. If you have any
problems email me back
Jules

 

[Chuck]

Thanks GSVC.It is in the .dbx folder. It is probably "malware" as you
state...it is in message 498, but I dont know how to delete just that
message as, the OE shows NO messages in any folder and I had to reinput
my connection data ( ie.smtp, etc.). The other strange behavior is that
I have no more system sounds, the events sounds folder is empty ( so I
cant associate windows sounds with events ) and when I go to add/remove
windows set up I get an error message that rundll32 has caused an error
in setupx.dll. Should I just delete the whole .dbx folder?

Thnaks
Chuck

 

[GSV Three Minds in a Can]

You still didn't tell us WHICH .dbx folder .. you should have inbox.dbx,
offline.dbx, folders.dbx, outbox.dbx, and then one for each usenet group
you have read (e.g. alt.comp.antivirus.dbx). Generally you can delete
the newsgroup ones (but you'll lose the messages, obviously), and if you
delete the folders.dbx file you'll need to re-collect the newsgroup list
from your ISP's news server. Deleting others can lose to loss of emails.
8>.

It does sound as if you have a problem with your system - whether a
virus, or just general sickness of some kind is hard to diagnose from
here.

 

[Shane]

Are you sure you're looking in the correct OE folder? If there's more than
one sub-folder of Identities, check the no. in Tools | Options | Maintenance
| Store Folder against the no. of the folder the infected .dbx files are in.



Shane

 

[Chuck]

Here is the message from the virus scanner:

File C:\WINDOWS\Application Data\Identities\{66308FCE-0639-4DA7-AED3-
9700A8CD8D92}\Microsoft\Outlook Express\Inbox.dbx is infected with worm
Win32/Swen.A. NOD32 cannot clean this infiltration.
I dont use OE for a newsreader, I use Gravity.

Thnaks
Chuck

 

[Shane]

Inbox.dbx is the OE incoming e-mail folder. If you open OE, open the Inbox,
the e-mail in question should be the one with a size of 106 KB or
thereabouts. If it's only found in the dbx then it probably hasn't been
activated. Delete it.


Shane

 

[Miles Fromier]

Inbox.dbx is the OE incoming e-mail folder. If you open OE, open the Inbox,
the e-mail in question should be the one with a size of 106 KB or
thereabouts. If it's only found in the dbx then it probably hasn't been
activated. Delete it.

Compact folders too, might not be necessary but it won't hurt.

 

[Morph]

try this, i am sure it will help...

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Morph

 

[Wim Hamhuis]

I am very confused- my computer, Windows ME, was acting funny-
all my event sounds have disappeared, the inbox/sent mail has
all disappeared from Outlook express. My scanner, AVG Pro did
not find anything, but the BitDefender on-line scanner found
Win 32 Swen.A@mm in two Outlook Express files in the
Windows\Application Data\Identities\randon numbers\Microsoft\Outlook
Express folder.

I have run the bitdefender, the Norton, the AVG and McAfee removal tool
but none of them find an infection to heal.

Do I have a virus/worm or not? If so, how do I remove it?

Thanks for any help.

You have to turn of "System Restore" before running the fixtool.
You have to startup in safe-mode and then run the fixtool.
This prevents the computer to reinfect.

with friendly greetings,
Wim Hamhuis