"Microsoft udates via email"....

  • Thread starter Thread starter Leonard Abeyta
  • Start date Start date
L

Leonard Abeyta

Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Len
 
BTW....you can check who is really sending this crap by right clicking on
the email then go to properties, in this case this potential virus was sent
by: (e-mail address removed). Does anyone know of a web site to report stuff
like this, not that it would do much any good I am sure as this person is
probably constantly changing addresses.

Len
 
Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
Click to expand...

WIIIIIIILLLLLLLLLLLMAAAAAAAAAAAAAAAA . . ..

I had 8!!!
Or 12?

**** - the number doesn´t count.
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email.
Click to expand...

Yes. Brave.
All updates they have are at
there site. These emails look VERY official.
Click to expand...

Hey Dude,

SPAM isn´t a Virus.
A Virus isn´t a Worm.
A Worm isn´t Spam.

Configure a good AntiSpamProg. !!!

HTH

Thomas



"Der Mensch ist eine Krankheit. Das Geschwür dieses Planeten . . ."
"Ich hasse diesen Planeten, diesen Zoo, dieses Gefängnis.
Diese Realität, wie auch immer man dazu sagen mag."
(Matrix 1; Words of Agent Smith)
 
Leonard Abeyta said:
Today in my inbox I had FOUR attachments allegedly sent by Microsoft.
I had these before but never this many. Be on the look out for this.
Microsoft will NEVER send attachments through he email. All updates
they have are at there site. These emails look VERY official.

Len
Click to expand...


Propably Gibe.F / Swen.A
http://www.symantec.com/avcenter/venc/data/[email protected]
- spreading quickly.

There seems to be a virus counter connected to this worm at
http://ww2.fce.vutbr.cz/bin/counter.gif/link=bacillus&width=6&set=cnt006
(link from german language posting de.admin.net-abuse.mail)

Best regards
Thomas.
 
BTW....you can check who is really sending this crap by right clicking
on the email then go to properties, in this case this potential virus
was sent by: (e-mail address removed). Does anyone know of a web site
to report stuff like this, not that it would do much any good I am sure
as this person is probably constantly changing addresses.

Len
Click to expand...

More likely that the return address is forged and/or from an infected
computer, not sent deliberately by the person you identified.
 
Mal said:
WEll it just ticked over 1Million....

Any ideas what the count is of? infected users/emails sent?
Click to expand...



I'd guess...

Marco Manfredini found this
(
Anyway - intersting counter. Like a deer standing on the street and staring
fascinated into a car's lights...

Thomas.
 
Today in my inbox I had FOUR attachments allegedly sent by Microsoft.
Click to expand...

Consider yourself lucky I'm getting about six an hour.
I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.
Click to expand...

Only to a complete neophyte.

--
Cheers-

Jeff Setaro
(e-mail address removed)
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34
 
Leonard said:
Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Len
Click to expand...


Yes I've had over 100 of the bastards sent, they just keep on filling up
my inbox... NAV reports them as W32.Gibe.B@mm. Good thing that I use
Mozilla :-)

Cheers

Troy
 
Troy said:
Yes I've had over 100 of the bastards sent, they just keep on filling up
my inbox... NAV reports them as W32.Gibe.B@mm. Good thing that I use
Mozilla :-)

Cheers

Troy
Click to expand...
BTW, The funny thing that I noticed was that NAV stopped identiying them
after it found the first 3. Hmm, could be time to change AV's I think...

Cheers

Troy
 
Nothing. They could simply corroborate the
authenticity (or lack thereof) for people not as
intelligent as yourself.
 
Nothing. They could simply corroborate the
authenticity (or lack thereof) for people not as
intelligent as yourself.
Click to expand...


Most people, particularly those with an I.Q. above two digits, realize
that Microsoft does not distribute patches or updates via email.
 
frank1492 said:
Nothing. They could simply corroborate the
authenticity (or lack thereof) for people not as
intelligent as yourself.
Click to expand...

You like they did in April?

<http://www.microsoft.com/technet/security/news/patch_hoax.asp>

And like when they posted this little gem on their web site?

<http://www.microsoft.com/technet/security/policy/swdist.asp>

--
Cheers-

Jeff Setaro
(e-mail address removed)
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34
 
"Most people" would not include the vast majority of AOLers,
for example, or neophytes, which class I presume even you belonged
to at one time.
 
"Most people" would not include the vast majority of AOLers
Click to expand...


I'm not sure if these worms can propogate through AOL's proprietary
email system or not as I haven't read up on it, but my understanding
is that it (the worm) uses security holes in Outlook.Outlook Express.
Anyone care to chime in on this?

I
 
Leonard Abeyta said:
Today in my inbox I had FOUR attachments allegedly sent by Microsoft. I had
these before but never this many. Be on the look out for this. Microsoft
will NEVER send attachments through he email. All updates they have are at
there site. These emails look VERY official.

Len
Click to expand...

Four? I've had 79 since noon.

-- Zan

Remove every other letter (abcdefg) to reply.
 
It uses several methods to propagate. Email,irc, kazaa,usenet,and network
shares.
As far as Outlook it tries to use an old mime header vulnerability(which was
patched last march) to auto execute if the email is viewed.
 
Back
Top