Exchange Server Forums

W32.Swen slamming Exchange

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2000] >> Server Security >> W32.Swen slamming Exchange

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

W32.Swen slamming Exchange - 22.Oct.2003 4:04:00 PM

Dreddnet

Posts: 9
Joined: 22.Oct.2003
From: Augusta, GA, USA
Status: offline

Within the last week my Exchange2k server has been slammed with Swen viruses. I have Symantec Antivirus with Exchange protection on there, but my inbox is still getting full of virus warnings that have been blocked. I keep getting emails about a new update from Microsoft or an Admin sending me an email titled Advice. Also is a pack of failure notices from sites I never sent to.

I checked all PC's on my network and none have the virus on them. Also ran the removal tool from Symantec and it said clean. What can I do to stop this from flooding my exchange and my inbox?

Any help would be greatly appreciated!

-D

Post #: 1

Featured Links*

RE: W32.Swen slamming Exchange - 22.Oct.2003 4:53:00 PM

Henrik Walther

Posts: 6835
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline

Checkout Vamsoft's script:

http://www.vamsoft.com/orf/tools.asp#swen

This is an SMTP transport event sink script developed specifically to filter Win32.Swen.A@mm worm emails. Emails that seems to be infected by the worm are dropped.

(in reply to Dreddnet)

Post #: 2

RE: W32.Swen slamming Exchange - 23.Oct.2003 4:16:00 AM

Dreddnet

Posts: 9
Joined: 22.Oct.2003
From: Augusta, GA, USA
Status: offline

So far so good using that script.

How many good emails do you think this will block though? I have MailEssentials now to prevent many spam items and such from getting thru and those that are blocked get forwarded to a special account that I review.

Thanks for the tip!

(in reply to Dreddnet)

Post #: 3