Author Topic: swen wrm  (Read 3476 times)

0 Members and 1 Guest are viewing this topic.

tonyofoz

  • Guest
swen wrm
« on: December 11, 2003, 09:04:08 PM »
Hi everyone-
I need help - I have swen wrm parked in vchest when I say delete is says danger you will loose all data in outlook:
the infected file is windows\localsettings\applicationdata\Outlook\outlook\.pst

what do I do

techie101

  • Guest
Re:swen wrm
« Reply #1 on: December 12, 2003, 06:20:15 AM »
tony,

I will have to assume that you are talking about the w32.swenA worm or a variant.

We can approach this in one of two ways:
1.  Attempt a repair of the pst files with the Windows Inbox repair tool. http://www.slipstick.com/problems/scanpst.htm

2.  What I would do is make a backup of the file, then download and run the Avast Virus Cleaner, or the CAI utility which will remove the swen from the local machine.
http://www.avast.com/i_kat_67.html
http://www3.ca.com/virusinfo/virus.aspx?ID=36939

Unfortunately, because the worm has settled in the pst files (which are archived personal data mail files in MS Outlook format), deleting it could very well destroy the data contained in that storage folder.

If Outlook does not run properly, or if some vital data has been erased, then we can try another method since we do have a backup copy of the file.
(It is a good practice to make a backup copy of any "suspicious file" before trying to remove it.

Let me know how it turns out.

« Last Edit: December 12, 2003, 06:52:14 AM by techie101 »