Virus Alert

[Signal]

Morning folks, just a little warning that Swen-A, a new virus is now
popping up regularly in my in box. It comes in as a secuity warning
from Microsoft as a very authentic looking HTML message.

It will have an executable attachment which will cause all sorts of
bother for you if it gets executed. It also exploits a very old auto
execute hole in explorer. If you havent patched your machine the
attachment can launch even if you dont click on it.

If you have antivirus software update it, if not take a look at
www.grisoft.com, they do a free download.

Public service announcment over

Be lucky

Signal

 

[Anonymous]

Hi Signal

Yes, I had one delivered this morning. The problem is that the attachments have lots of different names.

As far as I am aware NOBODY gets emails from Microsoft with an attachment to complete their "Windows Update".

Cheers
Neil

 

[Signal]

Neil,

yep youre right, unless you subscribe to the security
alerts or one of the many other mailing lists of MS you
shouldnt be getting anything from them, least of all with
attachments.

Fortunately I am running Sybari Antigen on my server
and just quarantine nigh on all inbound attachments.

If it is a 'real' attachment I can then unquarantine when
needed.

Cheers

Signal

 

[sawdustalley]

Yep I got that one aswell, I wonder what it does?

deleted :twisted: , First of all I thought it was from microsoft for a second till I saw the attachment - i could do a better job of making it look more authentic! :roll:

 

[Signal]

James,

http://www.sophos.com/virusinfo/analyses/w32gibef.html

tells you all you want to know about Swen or Gibe

Cheers

Signal