Ask the Question

susie876 · Joined: 31 Jan 2006 Posts: 64 Location: scotland

hi again
i have just had my fatherinlaw on the phone his comp is playing up he has got a virus it says this, AVG found .mph virus in explore.exe it recomends moving it to the vault does anyone know of this virus ive looked but cannot find anything about it
thanks in advance
susan Rolling Eyes

thescruff · Moderator Joined: 03 May 2003 Posts: 4758 Location: Bath

No .mph virus listed so its either a new one or you have it wrong.

Is there another part to it. need the exact wording

susie876 · Joined: 31 Jan 2006 Posts: 64 Location: scotland

no that was the exact wording i did a search for it on google and a few other people have had it to but did not know what to do it seems to be a new one my fatherinlaw is ready to throw his comp out the window
thanks again
susan Rolling Eyes

thescruff · Moderator Joined: 03 May 2003 Posts: 4758 Location: Bath

How did he know he had the virus, if it was detected by software then he should follow the onscreen recommendations to remove it.

the only mention I can find.

Have a look at;

http://www.webuser.co.uk/forums/showflat.php/cat/0/Number/301934/an/0/page/0

thescruff · Moderator Joined: 03 May 2003 Posts: 4758 Location: Bath

As you were. Cool

MPH Interactive
URGENT Virus Alert September 30, 2003

In this issue:

E-Mail Virus Disguised as Microsoft Patch
How Are We Doing?

===================================
E-MAIL VIRUS DISGUISED AS MICROSOFT PATCH

URGENT! Do NOT install any attachment that arrives in your email claiming to be
Microsoft security patches. This is actually the I-WORM.SWEN virus!

I-WORM.SWEN looks like a legitimate email from Microsoft which claims "this is the
latest version of security update, the "September 2003, Cumulative Patch" update which
eliminates all known security vulnerabilities..." Note the grammatical errors; this is
typical of virus email but not of messages from major public companies such as
Microsoft.

The "from" line of the email will list a legitimate-sounding name such as...

MS Public Support
Internet Security Center
Security Department
(or others)

The actual email address of the message will usually contain a lot of gibberish letters.
This is yet another good tip this is a virus.

The "subject" line of the email will also sound plausible, such as...

Latest Internet Security Patch
Latest Interent Upgrade
New Security Patch
(or others)

For more information about the virus and a removal tool, see Symantec's website...

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html

One further note: If you are using the Outlook or Outlook Express email program on
Microsoft Windows and have not installed the latest security patches, you may have been
infected just by reading the email even if you did not click the attachment. Make sure
your antivirus software is up-to-date and run a scan immediately.

DO NOT EVER INSTALL A FILE SENT TO YOU THROUGH EMAIL until you know
more about it! Microsoft and other software companies do not typically distribute patches
this way. If the file appears to come from a friend, email or call them to double-check its
validity before you install it.

To search for and download real Microsoft security patches, go to...

http://windowsupdate.microsoft.com/

Macintosh and Linux users are not affected by this virus.

MPH Interactive has Norton Antivirus in stock for $48. Contact us if you have questions
or need other assistance.

===================================
HOW ARE WE DOING?

Post your compliments or complaints about our service to our online feedback form at
http://feedback.mphinteractive.net/ and let us know how we're doing. Your comments
will help us to improve our service. We care about our customers and want to know what
you think. Thanks!

===================================
annalisa@mphinteractive.net
jeff@mphinteractive.net
park@mphinteractive.net

MPH Interactive, Inc.
12 West State Road 28
Williamsport, IN 47993

765-762-2501 office
765-762-2398 fax
765-491-9604 cell phone

"The Friendly Face of Technology"

Feedback form at http://feedback.mphinteractive.net/

MPH Interactive practices ethical e-mail. We never share our e-mail customer list with
other companies. We will contact you only occasionally and only with news we believe
you might be interested in. If you prefer not to receive this mail, reply to this message
with the subject REMOVE. Your request will be honored.

susie876 · Joined: 31 Jan 2006 Posts: 64 Location: scotland

thank you so much i have sent him the details he is going to give it a try it has been put in the virus vault just now so hopefully he will be able to fix it
thanks for all your help
susan Very Happy