Avalanche of emails from Microsoft?

[Beau Schless]

I'm trying to figure out if I'm being deluged with emails
from microsoft or if it's a scan. The emails contain an
executable which Norton says is a virus. The emails are
coming from:
- Microsoft Program Security Division
- inet Seciurity Division
and a bunch more names like this. I'm getting 20 or 30 a day.
If anyone knows what's goiong on, would you please email me
at the above address?

thank you!

Beau Schless

 

[T O M M Y]

Most certainly you are receiving these e-mails because you have sent your
e-mail address to an untrusting web site in a form or it is in a friend's infected computer or a news group which is picked up by this worm.

The worm/virus is probably one of the followings:

W32.Swen.A_mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Dumaru_mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Gibe_mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Also:
< Microsoft never has, does not currently, and never will email
unsolicited security patches.>


I have received many of these e-mails ,claiming they couldn't deliver my
messages to any of those (untrue) addresses and such...,
They only way to get rid of them is to use filters provided with your e-mail
service.

------
WARNING:

Many of these e-mails can self execute the attached file ( the worm) when
you only open or see the preview of the e-mail sent to you even without
opening the attachment...If you receive them , delete them immediately
even without opening them ( This is due to a famous vulnerability in IE
while rendering HTML messages with wrong MIME headers and executing
such files, which I still see exists in OE 6 and IE 6 came with Win XP)

------
A good guide:
The worm has a fixed file size...., something about 145KB, 150KB or around it. So
if your e-mails --with any subjects or From line text-- are of the mentioned
size or sth around it , please delete the message immediately.

------

Some famous forms of these infected messages:

1- From: Microsoft Corporation Program Se Subject: Network security Upgrade Size: 143KB

2- From: Public Assistance Subject: net update Size: 130KB

3- From: Admin Subject: Error Letter Size: 150KB

4- From: MS Corporation Security Center Subject: Newest Net Update Size: 145KB

5- From: Admin Subject: Message Size : 125KB

6- From: Network Security Section Subject: "NO SUBJECT" Size : 150KB

6- From: Net message delivery Subject: No delivery found Size : 144KB



Good luck

---------------------------------------------------------------------------------------------------------------------------------------------------------------

 

[Jupiter Jones [MVP]]

Beau;
They are NOT from Microsoft and they are a virus.

Microsoft NEVER sends Email with attachments.
http://www.microsoft.com/security/antivirus/authenticate_mail.asp
NEVER open a unexpected attachment.
Verify with sender before opening an attachment.
Delete the mail and the attachment immediately if not verifiable.

Swen Removal:
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.
removal.tool.html

To protect the safety and security of your computer:
Install or enable a firewall IMMEDIATELY, before connecting to the
internet:
http://support.microsoft.com/?kbid=283673

Install ALL Critical Updates IMMEDIATELY.
Start/All Programs/Windows Update

Install an antivirus application
Update it weekly
Run it at least weekly

Also see:
http://www.microsoft.com/security/protect/default.asp
http://www.microsoft.com/security/home/
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/col
umns/security/5min/5min-105.asp
http://www.microsoft.com/security/articles/spam.asp