Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

How to fix the "Windows Security Update" Worm.

  • 22-10-2003 07:15PM
    #1
    Closed Accounts Posts: 88,968 ✭✭✭✭


    I for the second time got caught out by a virus - I recived an e-mail with attachment supposedly from Micro$oft regarding an update patch for Outlook.

    I saved the file intending to scan it but I could'nt as saving let the little fvcker loose.

    The worm is called Swen and the file is called SIWPNZRT.EXE This file will do a number of nasty things causing for example all exe files not to open stopping access to files accessed from the RUN box, disabling anti-virus software and much more besides.

    So first run find for SIWPNZRT and then do the following -
    copy and paste-

    Start
    ;Registry fix for Swen worm
    [Version]
    Signature="$CHICAGO$"

    [DefaultInstall]
    AddReg=FixSwen

    [FixSwen]
    HKCR, "exefile\shell\open\command",,0,"""%1"" %*"
    HKCR, "comfile\shell\open\command",,0,"""%1"" %*"
    ;End

    into notepad and save on desktop as .INF file

    locate file and right click select INSTALL.

    Then get this http://srnmicro.com/downloads/SwenFix.exe
    and run.

    Then once clear reinstall your anti-virus software....

    Hope this helps someone else who was'nt paying attention!

    Go here for more info - http://srnmicro.com/virusinfo/swen

    Mike.


Comments

  • Registered Users, Registered Users 2 Posts: 942 ✭✭✭logistic


    Also microsoft never send out patchs or fixes as attachments to emails. Use microsoft windows update.


  • Registered Users, Registered Users 2 Posts: 6,946 ✭✭✭SouperComputer


    Originally posted by logistic
    Also microsoft never send out patchs or fixes as attachments to emails. Use microsoft windows update.

    seconded


  • Registered Users, Registered Users 2 Posts: 414 ✭✭Paddyo


    This might be a simpler way

    1) Connect to this and run http://kpatz.home.comcast.net/misc/swenfix.vbs

    2) Connect to this and run http://www.sophos.com/support/cleaners/gibfgui.com

    The vbs script reverses the registry entries that stop exes running
    The gibfgui.com is the Sophos removal tool for the worm.


    I have used these on numerous occassions with great results.

    Paddyo


  • Closed Accounts Posts: 5,563 ✭✭✭Typedef


    How to fix the "Windows Security Update" Worm.

    Use OpenBSD?


  • Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 98,142 Mod ✭✭✭✭Capt'n Midnight


    Actually you'd be better off with Knoppix..
    Switch computer off, switch computer on, and it's same as it ever was


  • Advertisement
  • Closed Accounts Posts: 1,006 ✭✭✭theciscokid


    Originally posted by Capt'n Midnight
    Actually you'd be better off with Knoppix..
    Switch computer off, switch computer on, and it's same as it ever was

    ghost in the shell ;)


Advertisement
Advertisement