Is it Swen or isn't it?

[Little Johnny]

You don't have the virus until you open the att.
If you open it Norton will stop and tell you.

"belfry" <belfry@insightbb.com> wrote in message
news:aGRbb.131260$mp.66667@rwcrnsc51.ops.asp.att.n et...
> I have been getting the fake Microsoft Update and "returned" e-mails
exactly
> like the the Swen virus, but I have downloaded from Symantec and others
> their scanning program and ran it. And they all say I do not have the
> Win32.Swen.A virus. Yet I still am being bombarded with these "returned
> messages" and MS Update notices, all with that 106K size attachment!
>
> Even F-Prot says my coimputer is clean. Can someone help?
>
>

[Ken Russell]

That's not correct Little Johnny. In some cases it will activate automatically without the user opening the attachment.

Yet another Internet virus pretending to be a patch from Microsoft is spreading quickly on the Internet. Swen (w32.swen@mm, also known as Gibe) uses the subject line to entice Windows users to open the attachment. In some cases, the virus will execute automatically.

--
Ken Russell

"Little Johnny" <missb93@hotmail.com> wrote in message news:vn0in0ofeedsf9@corp.supernews.com...
| You don't have the virus until you open the att.
| If you open it Norton will stop and tell you.
|
| "belfry" <belfry@insightbb.com> wrote in message
| news:aGRbb.131260$mp.66667@rwcrnsc51.ops.asp.att.n et...
| > I have been getting the fake Microsoft Update and "returned" e-mails
| exactly
| > like the the Swen virus, but I have downloaded from Symantec and others
| > their scanning program and ran it. And they all say I do not have the
| > Win32.Swen.A virus. Yet I still am being bombarded with these "returned
| > messages" and MS Update notices, all with that 106K size attachment!
| >
| > Even F-Prot says my coimputer is clean. Can someone help?
| >
| >
|
|

[Sharky]

In message <3f710233$0$18592$afc38c87@news.optusnet.com.au> "Ken
Russell" <rusty@theseams.com.au> wrote:

>This is a multi-part message in MIME format.
>
>------=_NextPart_000_0014_01C38297.E536C3F0
>Content-Type: text/plain;
> charset="Windows-1252"
>Content-Transfer-Encoding: quoted-printable

Ken, please don't post html to Usenet groups. The subject matter of
this thread should be enough to convince people to disable html
content in their news AND mail clients.

Do it for the children, man! ;-)

[Ken Russell]

OOPS! Sorry about that kids ;-)

--
Ken Russell

"Sharky" <sharky@hellsgate.corg> wrote in message
news:2782nvg77pi4oevfsse6057lmfocclvsqb@news.alt.n et...
| In message <3f710233$0$18592$afc38c87@news.optusnet.com.au> "Ken
| Russell" <rusty@theseams.com.au> wrote:
|
| >This is a multi-part message in MIME format.
| >
| >------=_NextPart_000_0014_01C38297.E536C3F0
| >Content-Type: text/plain;
| > charset="Windows-1252"
| >Content-Transfer-Encoding: quoted-printable
|
| Ken, please don't post html to Usenet groups. The subject matter of
| this thread should be enough to convince people to disable html
| content in their news AND mail clients.
|
| Do it for the children, man! ;-)
|