Is M/S Message a Virus?

[craig gordon]

I'm getting inundated with a message from "Microsoft Corporation Public
Assistance" and "Microsoft Program Security" telling me to update my
security and install a new 'cumulative patch'. I get as many as 10 at a
time. When I click the Contact Us button, I get an 'unable to deliver'
message and a garbled return address. Is this a genuine message or a
virus??

 

[Chris Lanier]

Never listen to ANY email asking or telling you to update your computer,
goto Windows Update for any and all Microsoft Patch's

http://v4.windowsupdate.microsoft.com/en/default.asp

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

While Microsoft does send out warnings on occasion and does have services to
which you can subscribe to receive notices of security updates, Microsoft
never sends out updates or patches by e-mail. They are only available for
download.

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

Microsoft never sends unsolicited files by email.
DO NOT open the file--it is NOT from MS.
REPEAT:Microsoft NEVER sends unsolicited files by email.

It is a virus masquerading as MS security.
The most recent is W32/Swen@MM which can be removed with Stinger
http://vil.nai.com/vil/stinger/

The others circulating are dumaru.b
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
or a variant of the gibe worm.
Removal tool for gibe is at
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

 

[Carroll]

Craig, I don't know if it is a virus or not, but I got
the same email and after downloading, my desktop icons to
pull up Outlook Express & Incredimail bring up a window
that reads "Can't find....". Also. I've lost my scanner
even after re-installing the software. Sure hope
somebody out there has an answer.

 

[craig gordon]

I'm still getting around 20 messages a day in Outlook Express - half are the
fake M/S window - the other are 'undeliverable message' notifications. Each
is accompanied by a Norton Anti-Virus detection for a virus called
worm.automat.ahb. I am unable to find a patch or whatever to prevent this.
Norton says the virus is related to W3.Swen.A@mm but this doesn't affect
Int. Expl 6 which I have.

 

[Chris Lanier]

You are not infected by anything yet. If you dont open the attachment it's
just an email. all you have to do is delete it.

 

[craig gordon]

It's just a pain having to delete 20 messages a day - and wait for each one
to be scanned by Norton, which recognises these emails as a virus. Many
others have e-mailed me direct with the same problem.