We had several detections of the Worm.Automat.AHB. Interestingly this has now been renamed W32.Swen.A@mm. I checked the server that gets updates every night and it was using definitions dated 18th September (which catches this worm) and despite it updating every night, it hadn’t downloaded the definitions dated 19th September which according to Symantec’s Virus watch page detects 5 more new virus’s
Comments
Set the update to Hourly?
😉
I’m waiting for the next variant, the Goran-Eriksson virus.
can’t do hourly, at least not without batch file programming 🙂
And that is what I was thinking Neil!
Are the virus definitions on the server being downloaded with LiveUpdate?
Definitions available for LiveUpdate are not released every day. (I don’t know why)
You have to download and install the definitions “manually”
http://securityresponse.symantec.com/avcenter/defs.download.html
I’m not too worried about infection. I don’t use MS Outlook, I use yahoo!
I can scan anything before downloading it, but there are SO MANY people sending me the worm that it takes up space in my mailbox.
BUT, I found something interesting. I’ve discovered that some of the people sending them are from Slovakia (Slovak Republic).
Check out my link, or copy and paste this to the address bar. It starts out silly, but it has good info for reporting IP Addresses:
http://www.geocities.com/khyron_4/worms.html
Does this mean that Slovaks aren’t bright enough to avoid opening suspicious attachments?