COMM: Wedding Invitation Kits on Ebay

This is the SWEN Worm virus.

We are currently being invaded by over 200 such messages per day, which we do not download, but delete at server level. Messages are also presented as various forms of rejected/returned emails, which induce the recipient to open the file to discover what it is all about - an appeal to natural curiosity.

The way the worm works, is that when it infects a machine, it searches that machine for e-mail addresses, and then mails a copy of itself to all that it finds. Most people have a circle of friends, or most businesses have a circle of contacts. Suppose a friend (A) opens the attachment and their machine becomes infected. All their friends are liable to be mailed with the virus. If any of these (B) open the attachments, their circle of friends will be mailed as well. Now as A and B are friends, their circles of friends will overlap to a greater or lesser extent, so that mutual friends of A and B will receive the mail twice. Once opened, It also has the capacity to attack some virus protection software.

Furthermore, the worm also uses Internet news groups to find mail recipients. This is an even greater source of 'chain reaction' mailing.

Microsoft and the Anti Virus Alliance are aware of the problems being caused by this latest attack on the Internet community and are taking steps to combat it. More information can be found on the web site below -

snipped-for-privacy@mm.htmlI have passed a suggestion to Microsoft UK that ISP's should bepersuaded to restrict and delete program files (EXE , SCRIPT files etc.)at server level, either on a mandatory basis, or by providing a FILEATTACHMENT filter for the user to impose their own restrictions. Suchfiles could still be passed by changing the file suffix (e.g. EXE toEX? or similar ) where the user would need to edit the suffix andreplace the ? with the original E to enable the file to function. Thisshould prevent accidental opening of these files and require a consciousaction by the user. A slight inconvenience, but far less trouble thatdownloading hundreds of viral emails per day at around 150kb each.

This is the SWEN Worm virus.

We are currently being invaded by over 200 such messages per day, which we do not download, but delete at server level. Messages are also presented as various forms of rejected/returned emails, which induce the recipient to open the file to discover what it is all about - an appeal to natural curiosity.

The way the worm works, is that when it infects a machine, it searches that machine for e-mail addresses, and then mails a copy of itself to all that it finds. Most people have a circle of friends, or most businesses have a circle of contacts. Suppose a friend (A) opens the attachment and their machine becomes infected. All their friends are liable to be mailed with the virus. If any of these (B) open the attachments, their circle of friends will be mailed as well. Now as A and B are friends, their circles of friends will overlap to a greater or lesser extent, so that mutual friends of A and B will receive the mail twice. Once opened, It also has the capacity to attack some virus protection software.

Furthermore, the worm also uses Internet news groups to find mail recipients. This is an even greater source of 'chain reaction' mailing.

Microsoft and the Anti Virus Alliance are aware of the problems being caused by this latest attack on the Internet community and are taking steps to combat it. More information can be found on the web site below -

snipped-for-privacy@mm.htmlI have passed a suggestion to Microsoft UK that ISP's should bepersuaded to restrict and delete program files (EXE , SCRIPT files etc.)at server level, either on a mandatory basis, or by providing a FILEATTACHMENT filter for the user to impose their own restrictions. Suchfiles could still be passed by changing the file suffix (e.g. EXE toEX? or similar ) where the user would need to edit the suffix andreplace the ? with the original E to enable the file to function. Thisshould prevent accidental opening of these files and require a consciousaction by the user. A slight inconvenience, but far less trouble thatdownloading hundreds of viral emails per day at around 150kb each.