swen question

[RB]

Do I rightly conclude that if:

1. I haven't opened the attachment, and/or

2. haven't installed the "patch" that I probably haven't caught infection
from this one??

If you are infected, what's one obvious giveaway?

What's the fix?

And yes, I've gotten over 100 of them today. My filter is now keeping off
my screen.

 

[Thomas Krug]

Do I rightly conclude that if:

1. I haven't opened the attachment, and/or

2. haven't installed the "patch" that I probably haven't caught
infection from this one??

If you are infected, what's one obvious giveaway?

What's the fix?
[...]

It seems to spread mainly via email now, but it may also spread using other
techniques (see link)

Useful info here:
http://www.symantec.com/avcenter/venc/data/[email protected]

I guess there'll be a removal tool at this web page available soon.

Thomas.

 

[Zan Hecht]

If you are infected, what's one obvious giveaway?

Start/Run/regedit.exe

If it doesn't run, you have the virus.

-- Zan

Remove every other letter (abcdefg) to reply.

 

[FromTheRafters]

Do I rightly conclude that if:

1. I haven't opened the attachment, and/or

2. haven't installed the "patch" that I probably haven't caught infection
from this one??

No. You must have also patched a very old hole.
This worm can use the incorrect MIME type vulnerability
to autoexecute on unpatched systems.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-020.asp

If you are infected, what's one obvious giveaway?

msconfig or regedit won't run.
They may start to run and then immediately close again.

What's the fix?

Removal instructions can be found here:

http://www.symantec.com/avcenter/venc/data/[email protected]

And yes, I've gotten over 100 of them today. My filter is now keeping off
my screen.

I haven't seen any, but then I never do ever see these things
unless I go looking ~ and then sometimes not even then.

This one doesn't really interest me much, but Mimail would be
more to my liking.