Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

How to fix the "Windows Security Update" Worm.

  • 22-10-2003 6:15pm
    #1
    mike65
    Closed Accounts Posts: 88,972 ✭✭✭✭


    I for the second time got caught out by a virus - I recived an e-mail with attachment supposedly from Micro$oft regarding an update patch for Outlook.

    I saved the file intending to scan it but I could'nt as saving let the little fvcker loose.

    The worm is called Swen and the file is called SIWPNZRT.EXE This file will do a number of nasty things causing for example all exe files not to open stopping access to files accessed from the RUN box, disabling anti-virus software and much more besides.

    So first run find for SIWPNZRT and then do the following -
    copy and paste-

    Start
    ;Registry fix for Swen worm
    [Version]
    Signature="$CHICAGO$"

    [DefaultInstall]
    AddReg=FixSwen

    [FixSwen]
    HKCR, "exefile\shell\open\command",,0,"""%1"" %*"
    HKCR, "comfile\shell\open\command",,0,"""%1"" %*"
    ;End

    into notepad and save on desktop as .INF file

    locate file and right click select INSTALL.

    Then get this http://srnmicro.com/downloads/SwenFix.exe
    and run.

    Then once clear reinstall your anti-virus software....

    Hope this helps someone else who was'nt paying attention!

    Go here for more info - http://srnmicro.com/virusinfo/swen

    Mike.


Comments

  • #2
    logistic
    Registered Users, Registered Users 2 Posts: 922 ✭✭✭logistic


    Also microsoft never send out patchs or fixes as attachments to emails. Use microsoft windows update.


  • #3
    SouperComputer
    Registered Users, Registered Users 2 Posts: 6,949 ✭✭✭SouperComputer


    Originally posted by logistic
    Also microsoft never send out patchs or fixes as attachments to emails. Use microsoft windows update.

    seconded


  • #4
    Paddyo
    Registered Users, Registered Users 2 Posts: 414 ✭✭Paddyo


    This might be a simpler way

    1) Connect to this and run http://kpatz.home.comcast.net/misc/swenfix.vbs

    2) Connect to this and run http://www.sophos.com/support/cleaners/gibfgui.com

    The vbs script reverses the registry entries that stop exes running
    The gibfgui.com is the Sophos removal tool for the worm.


    I have used these on numerous occassions with great results.

    Paddyo


  • #5
    Typedef
    Closed Accounts Posts: 5,564 ✭✭✭Typedef


    How to fix the "Windows Security Update" Worm.

    Use OpenBSD?


  • #6
    Capt'n Midnight
    Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 93,583 Mod ✭✭✭✭Capt'n Midnight


    Actually you'd be better off with Knoppix..
    Switch computer off, switch computer on, and it's same as it ever was


  • Advertisement
  • #7
    theciscokid
    Closed Accounts Posts: 1,006 ✭✭✭theciscokid


    Originally posted by Capt'n Midnight
    Actually you'd be better off with Knoppix..
    Switch computer off, switch computer on, and it's same as it ever was

    ghost in the shell ;)


Advertisement