• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

W32.Swen slamming Exchange

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2000] >> Server Security >> W32.Swen slamming Exchange Page: [1]
Login
Message << Older Topic   Newer Topic >>
W32.Swen slamming Exchange - 22.Oct.2003 4:04:00 PM   
Dreddnet

 

Posts: 9
Joined: 22.Oct.2003
From: Augusta, GA, USA
Status: offline
Within the last week my Exchange2k server has been slammed with Swen viruses. I have Symantec Antivirus with Exchange protection on there, but my inbox is still getting full of virus warnings that have been blocked. I keep getting emails about a new update from Microsoft or an Admin sending me an email titled Advice. Also is a pack of failure notices from sites I never sent to.

I checked all PC's on my network and none have the virus on them. Also ran the removal tool from Symantec and it said clean. What can I do to stop this from flooding my exchange and my inbox?

Any help would be greatly appreciated!

-D
Post #: 1
RE: W32.Swen slamming Exchange - 22.Oct.2003 4:53:00 PM   
Henrik Walther

 

Posts: 6928
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline
Checkout Vamsoft's script:

http://www.vamsoft.com/orf/tools.asp#swen

This is an SMTP transport event sink script developed specifically to filter Win32.Swen.A@mm worm emails. Emails that seems to be infected by the worm are dropped.

(in reply to Dreddnet)
Post #: 2
RE: W32.Swen slamming Exchange - 23.Oct.2003 4:16:00 AM   
Dreddnet

 

Posts: 9
Joined: 22.Oct.2003
From: Augusta, GA, USA
Status: offline
So far so good using that script.

How many good emails do you think this will block though? I have MailEssentials now to prevent many spam items and such from getting thru and those that are blocked get forwarded to a special account that I review.

Thanks for the tip!

(in reply to Dreddnet)
Post #: 3
RE: W32.Swen slamming Exchange - 23.Oct.2003 12:21:00 PM   
Henrik Walther

 

Posts: 6928
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline
I have no idea, would suggest you ask this question in the Vamsoft newsgroups - news.vamsoft.com.

(in reply to Dreddnet)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2000] >> Server Security >> W32.Swen slamming Exchange Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter