Thank You AVG+How I got worms<Warning>

  • Thread starter Thread starter DaveM
  • Start date Start date
D

DaveM

Got an Email from "MS Inet Delivery System", Subject:Undelivered Mail:Return
to Sender"
AVG Resident Shield "warned" me, but I spent so much time reading the
warning, that the message opened and out popped "I-Worm/Swen.B"..

Had another message from: "Program Security Section"
Subject:" Internet Critical Update" which showed to have an Attachment.
Opened, didn't open the attachment, but still got another dose of the same
Worm.

Ran AVG which detected and "Cured" both infections
(Not sure what that means, but everything is OK now.)

Please be warned, I only attempted to READ these and opened NO
attachments!!!
 
Got an Email from "MS Inet Delivery System", Subject:Undelivered Mail:Return
to Sender"
AVG Resident Shield "warned" me, but I spent so much time reading the
warning, that the message opened and out popped "I-Worm/Swen.B"..

Had another message from: "Program Security Section"
Subject:" Internet Critical Update" which showed to have an Attachment.
Opened, didn't open the attachment, but still got another dose of the same
Worm.

Ran AVG which detected and "Cured" both infections
(Not sure what that means, but everything is OK now.)

Please be warned, I only attempted to READ these and opened NO
attachments!!!
Click to expand...

Why blame avg ?

It cured your problems

Try using software which does not run programmes automatically, or
display html posts.

A little research will work wonders for you.

I have not checked, but guess you are using Outlook Express - use a
better email client, and turn off html and you will be a lot safer
 
DaveM said:
Got an Email from "MS Inet Delivery System", Subject:Undelivered Mail:Return
to Sender"
AVG Resident Shield "warned" me, but I spent so much time reading the
warning, that the message opened and out popped "I-Worm/Swen.B"..

Had another message from: "Program Security Section"
Subject:" Internet Critical Update" which showed to have an Attachment.
Opened, didn't open the attachment, but still got another dose of the same
Worm.

Ran AVG which detected and "Cured" both infections
(Not sure what that means, but everything is OK now.)

Please be warned, I only attempted to READ these and opened NO
attachments!!!
Click to expand...

and avg was mostly likely detecting the virus *in the email*... though
there is a really old exploit it uses to try and autorun - but there's
been a patch available for that exploit for 1-2 years now...
 
"DaveM" <DaveMNoSpan said:
Wasn't blaming AVG. I Really meant "Thanks" for
detecting and "Curing" the worm
Click to expand...

But have you hardened Outlook Excess?

Better still, get a sane mail (and news) reader.

Cheers,

Roy
 
Please be warned, I only attempted to READ these and opened NO
attachments!!!
Click to expand...

Such are the consequences of using Microsoft Outlook Express.

Mozilla does not automatically open attachments.
 
On that special day, "DaveM" <DaveMNoSpan @InvaliDmyglobalnet.net>,
("DaveM said:
Got an Email from "MS Inet Delivery System", Subject:Undelivered Mail:Return
to Sender"
AVG Resident Shield "warned" me, but I spent so much time reading the
warning, that the message opened and out popped "I-Worm/Swen.B"..
Click to expand...

Did you preview this message with an Outlook Express Version 5.x before
SP2? Get a newer one, pronto!
Had another message from: "Program Security Section"
Subject:" Internet Critical Update" which showed to have an Attachment.
Opened, didn't open the attachment, but still got another dose of the same
Worm.
Click to expand...

Impossible. You didn't clean the system restore, I suspect, and so it
was "restored". If yes, your AVG didn't do its job till the end, but
stopped half way.
Ran AVG which detected and "Cured" both infections
(Not sure what that means, but everything is OK now.)

Please be warned, I only attempted to READ these and opened NO
attachments!!!
Click to expand...

The "cumulative patch" message doesn't use the wrong mime header
exploit. That's definite.


Gabriele Neukam

(e-mail address removed)
 
Back
Top