Windows Virus/Worm Alert —September 22 ’03
Email alert to subscribers

There is a new worm circulating the Internet, called W32.Swen.A@mm, that arrives as email masquerading as a security alert or patch from Microsoft. This worm arrives as an email attachment with the subject, body and From: address of the email varying in text. Some examples claim to be patches for Microsoft Internet Explorer, or Delivery Failure notices from qmail.

As an Internet Service Provider, SoVerNet must continue the practice of notifying customers who are infected with viruses and even suspending accounts that do not clean up the virus quickly. We do this to protect all our customers, so this note will give you details about avoiding infection in the first place, as well as cleaning up after this newest worm.

Swen is another in a series of viruses/worms that have exploited a vulnerability in Microsoft Outlook and Outlook Express; look for Windows Update information and a patch to reduce the vulnerability at: http://www.microsoft.com/technet/security/bulletin/MS01-020.asp Microsoft does not usually send update patches by email. Depending on your Windows operating system, you can get the patch automatically downloaded or you can go to the Start button, then to Windows Update and follow the directions to scan for updates and install them. Mac users need not get the updates (at least so far).

SoVerNet wants to stress the importance of virus protection software for any customer using the internet. The last month has demonstrated that viruses and worms will be released from time to time, and can be destructive to individuals, businesses and entire networks. No company can provide protection for all it's end users except by urging each and every one of you to get the best virus protection and to KEEP IT UPDATED.

Symantec and McAfee both offer affordable virus protection that is regularly updated for maximum effectiveness. Both companies also provide the tools needed to scan your computer and rid it of any previously acquired viruses. Neither is perfect, but they are the best protection you have, and for the sake of your personal computer, those of your friends, and for the entire SoVerNet network, we urge you to get your virus protection immediately.

There are also a few basic rules about email that should help protect you and your friends in your address book. First, don't ever open attachments unless you are expecting them, not even from friends or business associates. If you get one, call to be sure it was intentionally sent and not distributed by a virus or worm. And second, don't reply to unsolicited mail, just delete it.

We have links to Symantec and McAfee on our website; http://www.sover.net

You can get to the Symantec utility to look for, clean and eliminate the worm at: http://tinyurl.com/o0u3 or McAfee at: http://tinyurl.com/o92y

We send this note in the spirit of collaboration. In the end each customer is responsible to prevent infection of his or her own computer, and SoVerNet is required to suspend those accounts that spread the infection, but we do not want it to come to that. We hope this helps, and wish you the best.