On October 19, 2003 11:19 am, Anne Wilson wrote: > I have just received the latest version of the fake M$ mails: > > Last Network Security Update > Date: Sun Oct 19 17:55:27 2003 > From: "Microsoft Internet Security Center" > <[EMAIL PROTECTED]> > To: "Microsoft Consumer" <[EMAIL PROTECTED]> > > Microsoft Consumer > <snippity snip>
well, if notthing else should trigger an normally wary user the TO field should. Oh well :-) I suspect I'll get a call shortly to unvirus a bunch of computers. No freebie on this one, though. It's so obviously a fake that anyone who opens it needs to have their computer using priviledges revoked until they qualify as an MSCE. Not that that will help, mind you :) I first spotted this scam on the newsgroups, oddly enough. As I don't run a news client on windows I was safe so I peeked. It's a fun little worm, if I'm reading the code right. The crappy thing about this is that it hit the wire about the same time as a collection of genuine MS updates which purport to correct everything that previous updates failed to. So some MS users will open it and it's off. Again, if I'm reading the code correctly, if the user is on a LAN say goodbye to every windows box on the LAN cause it finds a shared directory and parks there. Then it fires itself out to every other machine on the LAN. And on and on. As this is the first time I've disassembled one of these beasties I don't know if it's an old one or not. No, Zone Alarm does not blacklist email, at least the free version doesn't. The paid for one claims to though I've heard varying reports of how well or poorly it does that. As someone has pointed out, have your daughter use Pegasus. Also, while Microsoft may be populated by greedy, drooling monopolists they aren't THAT stupid to email patches. They'll simply push them to you. And, for some strange reason, incompetance?, the patch will break more than it fixes. Ahh well, enough anti MS ranting. I need my blood pressure meds again :) ttfn John
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
