Worm.Automat.AHB

I am getting strange mail notifications that email (I did not send it) wasn't delivered.
Some systems report that I have Worm.Automat.AHB. I am scanning my system with Norton and it cannot find the virus.
What is the way to remove the virus? I even dont if I have it.
I also have mail from "Microsoft Corporation Network Security Center" or something like this.
Please help.
Thanks, Mark

 

[waitman]

Not really sure about the name of that one, but similar ones will give you emails with attachments, don't open them. sometimes your email address will be used as the one sending the mail, when you didn't send it. when a pc becomes infected it scans all the email addresses and uses those to send the email to others. One from microsoft isn't actually from microsoft, but is a virus or worm or trojan, dont open that attachment.

Go to Microsoft update and make sure you have all the patches in place, you can also try Symantecs site, ok it talks about it here and there are other posts about it in these forums.

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html[L=Text[/url]]http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html[url="http://securityresponse.symantec.com/avcenter/venc/w32.swen.a@mm.html"]Text[/L]

 

I scanned my system with latest Norton but nothing was found. I am still getting these emails.

 

[waitman]

just because you are getting the emails doesn't mean you have the virus, but if you open attachments in them you get the virus. You haven't opened any of the atachments have you? Do you have all the latest critical updates from microsoft update?
The following post came from the technical support forum, follow that advice. hope this helps.






Zepper
Platinum Member

Posts: 2378
Joined: May 2001
09/19/2003 9:12 PM Message OptionsView Users ProfilePrivate Message User


I've gotten more copies of the carriers (I have seen 2 diff types) for this one than any other worm/virus/trojan. I think I only got 3 or 4 from the Sobig and I've gotten at least 10 of these already. This thing really dumps a load on the system of anyone dumb or ignorant enough to execute the attachment - see the symantec security site. They rate cleanup as "difficult"!
. It disguises itself as a security update from MS and spoofs real MS return addresses. Also poses as "delivery failure notices from qmail" etc. Be careful out there
.bh.
:moon:

 

Dont see any link.

 

[bob4432]

i too keep getting them, i am running my own email server and the email server's antivirus and also norton keep catching them... trying to get this figured out....

 

[waitman]

Originally posted by: markgg
Dont see any link.

the link is in my first post.