"Microsoft udates via email"....

[Leonard Abeyta]

Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Len

 

[Leonard Abeyta]

BTW....you can check who is really sending this crap by right clicking on
the email then go to properties, in this case this potential virus was sent
by: (e-mail address removed). Does anyone know of a web site to report stuff
like this, not that it would do much any good I am sure as this person is
probably constantly changing addresses.

Len

 

[Thomas Blum]

Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had

WIIIIIIILLLLLLLLLLLMAAAAAAAAAAAAAAAA . . ..

I had 8!!!
Or 12?

**** - the number doesn´t count.

these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email.

Yes. Brave.

All updates they have are at
there site. These emails look VERY official.

Hey Dude,

SPAM isn´t a Virus.
A Virus isn´t a Worm.
A Worm isn´t Spam.

Configure a good AntiSpamProg. !!!

HTH

Thomas



"Der Mensch ist eine Krankheit. Das Geschwür dieses Planeten . . ."
"Ich hasse diesen Planeten, diesen Zoo, dieses Gefängnis.
Diese Realität, wie auch immer man dazu sagen mag."
(Matrix 1; Words of Agent Smith)

 

[Thomas Krug]

Today in my inbox I had FOUR attachments allegedly sent by Microsoft.
I had these before but never this many. Be on the look out for this.
Microsoft will NEVER send attachments through he email. All updates
they have are at there site. These emails look VERY official.

Len

Propably Gibe.F / Swen.A
http://www.symantec.com/avcenter/venc/data/[email protected]
- spreading quickly.

There seems to be a virus counter connected to this worm at
http://ww2.fce.vutbr.cz/bin/counter.gif/link=bacillus&width=6&set=cnt006
(link from german language posting de.admin.net-abuse.mail)

Best regards
Thomas.

 

[Mal]

There seems to be a virus counter connected to this worm at
http://ww2.fce.vutbr.cz/bin/counter.gif/link=bacillus&width=6&set=cnt006
(link from german language posting de.admin.net-abuse.mail)

WEll it just ticked over 1Million....

Any ideas what the count is of? infected users/emails sent?

 

[Boyd Williston]

BTW....you can check who is really sending this crap by right clicking
on the email then go to properties, in this case this potential virus
was sent by: (e-mail address removed). Does anyone know of a web site
to report stuff like this, not that it would do much any good I am sure
as this person is probably constantly changing addresses.

Len

More likely that the return address is forged and/or from an infected
computer, not sent deliberately by the person you identified.

 

[Thomas Krug]

WEll it just ticked over 1Million....

Any ideas what the count is of? infected users/emails sent?

I'd guess...

Marco Manfredini found this
(
Anyway - intersting counter. Like a deer standing on the street and staring
fascinated into a car's lights...

Thomas.

 

[Jeffrey A. Setaro]

Today in my inbox I had FOUR attachments allegedly sent by Microsoft.

Consider yourself lucky I'm getting about six an hour.

I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Only to a complete neophyte.

--
Cheers-

Jeff Setaro
(e-mail address removed)
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34

 

[Troy]

Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Len

Yes I've had over 100 of the bastards sent, they just keep on filling up
my inbox... NAV reports them as W32.Gibe.B@mm. Good thing that I use
Mozilla

Cheers

Troy

 

[Troy]

Yes I've had over 100 of the bastards sent, they just keep on filling up
my inbox... NAV reports them as W32.Gibe.B@mm. Good thing that I use
Mozilla

Cheers

Troy

BTW, The funny thing that I noticed was that NAV stopped identiying them
after it found the first 3. Hmm, could be time to change AV's I think...

Cheers

Troy

 

[frank1492]

Why aren't these things immediately reported on
microsoft.com., too many?

 

[W.S. Blevins]

Why aren't these things immediately reported on
microsoft.com., too many?

And just what do you think they would be able to do about it?

 

[frank1492]

Nothing. They could simply corroborate the
authenticity (or lack thereof) for people not as
intelligent as yourself.

 

[W.S. Blevins]

Nothing. They could simply corroborate the
authenticity (or lack thereof) for people not as
intelligent as yourself.

Most people, particularly those with an I.Q. above two digits, realize
that Microsoft does not distribute patches or updates via email.

 

[Jeffrey A. Setaro]

Nothing. They could simply corroborate the
authenticity (or lack thereof) for people not as
intelligent as yourself.

You like they did in April?

<http://www.microsoft.com/technet/security/news/patch_hoax.asp>

And like when they posted this little gem on their web site?

<http://www.microsoft.com/technet/security/policy/swdist.asp>

--
Cheers-

Jeff Setaro
(e-mail address removed)
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34

 

[frank1492]

"Most people" would not include the vast majority of AOLers,
for example, or neophytes, which class I presume even you belonged
to at one time.

 

[W.S. Blevins]

"Most people" would not include the vast majority of AOLers

I'm not sure if these worms can propogate through AOL's proprietary
email system or not as I haven't read up on it, but my understanding
is that it (the worm) uses security holes in Outlook.Outlook Express.
Anyone care to chime in on this?

I

 

[frank1492]

Thank you. I had not seen this.

You like they did in April?

<http://www.microsoft.com/technet/security/news/patch_hoax.asp>

And like when they posted this little gem on their web site?

<http://www.microsoft.com/technet/security/policy/swdist.asp>

 

[Zan Hecht]

Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Len

Four? I've had 79 since noon.

-- Zan

Remove every other letter (abcdefg) to reply.

 

[David]

It uses several methods to propagate. Email,irc, kazaa,usenet,and network
shares.
As far as Outlook it tries to use an old mime header vulnerability(which was
patched last march) to auto execute if the email is viewed.