OT: swen stuff

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

kcat - 23 Sep 2003 18:10 GMT

well - I ran the symantec fix program. it found no viruses. Yup, I
turned off the System Restore thingy first.

since my ghg account refuses to send intentional emails, i don't
understand how swen could have gotten in there and made it do that.
and FixSwen says I'm clean.

must be a case of a mutual acquaintence perhaps - nabbing my email out
of their nicklist.

if everyone out there has not updated their windows stuff and their AV
stuff - please do so ASAP.

also - the i.e. "hole" claims to be for 5.x versions and MS tells me
that since I have 6.x then that particular hole isn't there. <fingers
crossed>

Reply to this Message

janers - 23 Sep 2003 19:15 GMT

Hey there

first off, how do you turn off the system restore thingy?

I have norton internet security and I just did an on line for security and
for virus, I am clean that way. DID I do it wrong.

thanks
janers

Reply to this Message

kcat - 23 Sep 2003 20:27 GMT

>Hey there
>
[quoted text clipped - 5 lines]
>thanks
>janers

I don't know if what you did is sufficient having not seen the process
you went through.

"System Restore" checkbox is located in the My Computer Properties
pop-up. It only needs to be turned off if you are running ME/XP. I
am not familiar with ME so can't promise that the method used to turn
it off in ME is the same but it's pretty straightforward.

Right click on My Computer then click on Properties
Click the "System Restore" tab
Select "Turn off System Restore" or "Turn off System Restore on all
drives"

Then run Symantec's swen removal tool.

To get full instructions for this process:
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.to
ol.html

Be sure to read the directions all the way through first. They are
poorly written - first giving instructions for running the removal
tool, then instructions for how to make sure your removal tool is
"valid" (chktrust) *then* instructions for how to turn off the System
Restore capability. you want to work in the opposite direction

First turn System Restore off. Then download chktrust and the removal
tool (swenfix.exe) from symatec. Run chktrust (the instructions on
are the page above) - *then* run swenfix. it takes some time for
swenfix to go through every file and "fix" it if there is a problem.

There are links on the above page to instructions on how to turn off
System Restore as well as how to use chktrust.

kcat

Reply to this Message

Marg Watson - 23 Sep 2003 21:07 GMT

Maggie--Liking her webtv *much* more than usual.

Reply to this Message

janers - 24 Sep 2003 00:17 GMT

Ok, I am fine too. I have windows 98 and went to norton on line and they
did complete scan on virus's as well as security check. took a LONG Time
but I am good to go.

thanks Kcat

janers

Reply to this Message

Andy - 23 Sep 2003 19:40 GMT

>well - I ran the symantec fix program. it found no viruses. Yup, I
>turned off the System Restore thingy first.

Klever Kitty :)

>since my ghg account refuses to send intentional emails, i don't
>understand how swen could have gotten in there and made it do that.
>and FixSwen says I'm clean.
>
>must be a case of a mutual acquaintence perhaps - nabbing my email out
>of their nicklist.

See my other postings

>if everyone out there has not updated their windows stuff and their AV
>stuff - please do so ASAP.

The Kat Hath Spoke. Do as she says - it's easier...

>also - the i.e. "hole" claims to be for 5.x versions and MS tells me
>that since I have 6.x then that particular hole isn't there. <fingers
>crossed>

Signature

Andy [Chair, N E Lupus Group]
See http://www.kitzbuhel.demon.co.uk/lupus for more!

Reply to this Message

Bob Musicant - 24 Sep 2003 03:20 GMT

> well - I ran the symantec fix program. it found no viruses. Yup, I
> turned off the System Restore thingy first.
[quoted text clipped - 12 lines]
> that since I have 6.x then that particular hole isn't there. <fingers
> crossed>

Kcat,
You have to keep in mind is the real torture is not for those who are
infected -- they might not even know it -- but for those who have the mail
pouring in from those who are infected. I've talked with my ISP (Earthlink)
several times, and they don't seem to have a good grasp of how bad it is out
here in newsgroup land.
Bob

Reply to this Message

Andy - 24 Sep 2003 11:07 GMT

[

>Kcat,
>You have to keep in mind is the real torture is not for those who are
[quoted text clipped - 3 lines]
>here in newsgroup land.
>Bob

Quite so! I have seen reports of people having them arrive faster than
they can kill them :( And if you're on a 28kb dialup line, charged by
the minute, it ain't fun.

Signature

Andy [Chair, N E Lupus Group]
See http://www.kitzbuhel.demon.co.uk/lupus for more!

Reply to this Message

kcat - 24 Sep 2003 16:54 GMT

>Kcat,
>You have to keep in mind is the real torture is not for those who are
>infected -- they might not even know it -- but for those who have the mail
>pouring in from those who are infected.

oh believe me, I'm well aware of this. This addy I use for this group
is being bombarded with hundreds of copies - no exaggeration. I view
it through the web site which makes clean up even slower and more
aggravating than normal. But I have no choice in how I read the email
from this address. Anyway - yes, it's a mess. I probably download at
least 100 copies a day through the four addies I have. (yes, I have
too many)

>I've talked with my ISP (Earthlink)
>several times, and they don't seem to have a good grasp of how bad it is out
>here in newsgroup land.

Newsguy seems oblivious too - in the past they have been very good
about filtering spam and virus-laden files. this one has them
buffaloed apparently.

sigh..

Reply to this Message