Another virus warning, this one got past my antivirus.

[Xandax]

Just recived an email from "Microsoft" (yeah - right, dead giveaway), but the scary part is that the email attachment apparently got past my antivirus check (Symantech Internet Security 2003).
I think it has gotten past unharmed, but I'm not foolish enough to run it.

It appears to be this virus:
W32.Swen.A@mm

Just thought I'd give a warning, because I know some peopel that would click this attachment, because "it seems official" and if it can somehow get past antivirus programms, it might seem "sure".

But once again, never click attachment you haven't asked for, because many later vira spoofs email adress, so you can't see whom they really came from by looking at the "from field" therefore you can recive attachment from people you know.
But never click them (and turn autoshow content from also ).

[dragon wench]

I just received the following alert on this one:



Attention Uniserve customers,
>
> There is a serious new virus/worm in circulation called "Swen". The worm
> spreads primarily through e-mail. Upon receipt, it looks very much like a
> Microsoft security update, and it contains an attachment which it
> claims is
> an update security patch. Once clicked, the attachment appears to be
> installing an update, but in fact, it is a worm. In addition to email
> circulation, the worm is also spreading over Kazza (file sharing download
> site) and IRC (Internet Relay Chat).
>
> It is important to understand that Microsoft never e-mails security update
> patches or notifications. You should never run an update that you receive
> via e-mail that claims to be Microsoft. Legitimate Microsoft updates are
> only available from the Windows Update website www.windowsupdate.com.
> Microsoft is making a major push right now to get users to update their
> installation of Windows because another vulnerability was detected
> recently, and Microsoft is trying to avoid a repeat of the
> Blaster/LovSan/soBig debacle in August. Unfortunately, this new "Swen"
> worm takes advantage of the publicity surrounding the legitimate update
> that is now available.
>
> Uniserve's free email virus protection service has been updated (and
> continues to be updated every four hours) with virus definitions to filter
> the "Swen" virus. Uniserve's free email virus service is automatically
> enabled on all Uniserve email accounts*. It filters known viruses,
> protecting you from infection via email. It is important to run virus
> protection software on your computer, to protect you from
> infection through
> other means. It is also important to ensure the latest security
> updates be
> installed on your computer. Windows customers should visit
> www.windowsupdate.com to run and install the latest patches. *Axion
> customers - visit www.uniserve.com/virusprotection to learn more
> about this
> service, with special instructions on how you can take advantage of this
> free service.
>
> More details on this worm can be found at
> http://www.viruslist.com/eng/viruslist.html?id=88029

[VonDondu]

I read about this yesterday at The Register:

Nasty worm poses as MS security update

...and The Inquirer:

Beware: Fake Microsoft "security" spam conceals virus (Looks convincing... don't click)