On Sun, 2003-10-19 at 15:25, John Wilson wrote: > On October 19, 2003 11:19 am, Anne Wilson wrote: > > I have just received the latest version of the fake M$ mails: > > > > Last Network Security Update > > Date: Sun Oct 19 17:55:27 2003 > > From: "Microsoft Internet Security Center" > > <[EMAIL PROTECTED]> > > To: "Microsoft Consumer" <[EMAIL PROTECTED]> > > > > Microsoft Consumer > > > <snippity snip> > > well, if notthing else should trigger an normally wary user the TO field > should. Oh well :-) > > I suspect I'll get a call shortly to unvirus a bunch of computers. No freebie > on this one, though. It's so obviously a fake that anyone who opens it needs > to have their computer using priviledges revoked until they qualify as an > MSCE. Not that that will help, mind you :) > > I first spotted this scam on the newsgroups, oddly enough. As I don't run a > news client on windows I was safe so I peeked. It's a fun little worm, if > I'm reading the code right.
In fact if you go to just about any main page at M$'s website they have huge warnings about this scam and a statement saying "We haven't, we don't, and we never will send out a virus warning in this manor". > > The crappy thing about this is that it hit the wire about the same time as a > collection of genuine MS updates which purport to correct everything that > previous updates failed to. So some MS users will open it and it's off. > > Again, if I'm reading the code correctly, if the user is on a LAN say goodbye > to every windows box on the LAN cause it finds a shared directory and parks > there. Then it fires itself out to every other machine on the LAN. And on > and on. > > As this is the first time I've disassembled one of these beasties I don't know > if it's an old one or not. > > No, Zone Alarm does not blacklist email, at least the free version doesn't. > The paid for one claims to though I've heard varying reports of how well or > poorly it does that. > > As someone has pointed out, have your daughter use Pegasus. > > Also, while Microsoft may be populated by greedy, drooling monopolists they > aren't THAT stupid to email patches. They'll simply push them to you. And, > for some strange reason, incompetance?, the patch will break more than it > fixes. > > Ahh well, enough anti MS ranting. I need my blood pressure meds again :) > > ttfn > > John > > > ______________________________________________________________________ > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com