VIRUS

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

BOB O - 08 Oct 2003 19:04 GMT

I keep getting barraged with emails from ms inet security
service, ms service pack service, etc. i get 50 or so a
day. i tried creating rules as they came in to
immediately delete them, but it has altered my rules
wizard to stop processing more rules. also, it doesn't
seem to be saving any new rules i am able to set up. i
run norton anti virus enterprise edition. this is the
only machine out of 120 that it is happening to. i
searched the symantec site and didn't see any mention of
it. the messages appear to be coming from microsoft, but
i'm sure they aren't. HELP!!! OUTLOOK 2002 SP1on WIN2K
SP4

Reply to this Message

Doug Walsh - 08 Oct 2003 20:54 GMT

I'm having the same problem. Nothing works to block
these virus'. Anyone know how to get rid of them?

Doug

>-----Original Message-----
>I keep getting barraged with emails from ms inet security
[quoted text clipped - 10 lines]
>SP4
>.

Reply to this Message

Sue Mosher [MVP] - 08 Oct 2003 23:28 GMT

The virus in question is most likely Swen -- see http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.html . It shouldn't be getting through your Norton if your definitions are up-to-date.

Signature

Sue Mosher, Outlook MVP
Outlook and Exchange solutions at http://www.slipstick.com
Author of
Microsoft Outlook Programming: Jumpstart
for Administrators, Power Users, and Developers
http://www.outlookcode.com/jumpstart.aspx

> I keep getting barraged with emails from ms inet security
> service, ms service pack service, etc. i get 50 or so a
[quoted text clipped - 8 lines]
> i'm sure they aren't. HELP!!! OUTLOOK 2002 SP1on WIN2K
> SP4

Reply to this Message

Kunzang - 09 Oct 2003 04:59 GMT

Hi Sue,

I followed the directions from the link you provided
below. Downloaded the FixSwen.exe file, renamed it,
disabled the System Restore, ran the FixSwen.cmd file,
restarted the computer, ran the tool again, re-enabled
System Restore, ran LiveUpdate and rebooted my computer.

The fix it tool did not find any infected files on my
computer on both occasions.

However, I'm still getting the W32Swen e-mails although
my antivirus has deleted the infected files.

Is there any way that this barrage of e-mails can be
stopped??

Thanks for your help.

Kunzang

>-----Original Message-----
>The virus in question is most likely Swen -- see http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.h

tml . It shouldn't be getting through your Norton if your
definitions are up-to-date.

>> I keep getting barraged with emails from ms inet security
>> service, ms service pack service, etc. i get 50 or so a
[quoted text clipped - 9 lines]
>> SP4
>.

Reply to this Message

Sue Mosher [MVP] - 09 Oct 2003 12:23 GMT

See if your anti-virus program can delete the virus transmission messages instead of leaving them in your Inbox. If it can't, consider replacing it with a different anti-virus program.

Signature

> However, I'm still getting the W32Swen e-mails although
> my antivirus has deleted the infected files.
>
> Is there any way that this barrage of e-mails can be
> stopped??

Reply to this Message

Kunzang - 09 Oct 2003 17:42 GMT

Sue,

I'm using Norton AntiVirus (it runs LiveUpdate
regularly), Outlook 2002 and Microsoft XP.

In researching further, I recall receiving the Bogus
Bulletin (example at
http://www.microsoft.com/security/antivirus/authenticate_m
ail.asp) but I don't recall doing anything else but
delete it.

I went to Norton's Quarantine and found 82 files in the
Backup Files folder and no folders in the Quarantine
folder. The files in the Backup Files folder were copies
of e-mails where the W32Swen virus were detected. I've
now deleted them.

I'd like to keep using Norton AntiVirus but need some
direction as to how I can get Norton to "delete the virus
transmission messages instead of leaving them in the
Inbox" as you suggested.

Thanks for your assistance.

Kunzang

>-----Original Message-----
>See if your anti-virus program can delete the virus transmission messages instead of leaving them in your

Inbox. If it can't, consider replacing it with a
different anti-virus program.

>> However, I'm still getting the W32Swen e-mails although
>> my antivirus has deleted the infected files.
[quoted text clipped - 3 lines]
>
>.

Reply to this Message

Sue Mosher [MVP] - 09 Oct 2003 19:00 GMT

You'd need to ask Symantec about this.

> Sue,
>
[quoted text clipped - 44 lines]
> >
> >.

Reply to this Message