On Sun, 2003-10-19 at 15:25, John Wilson wrote:
> On October 19, 2003 11:19 am, Anne Wilson wrote:
> > I have just received the latest version of the fake M$ mails:
> >
> > Last Network Security Update
> > Date: Sun Oct 19 17:55:27 2003
> > From: "Microsoft Internet Security Center"
> > <[EMAIL PROTECTED]>
> > To: "Microsoft Consumer" <[EMAIL PROTECTED]>
> >
> > Microsoft Consumer
> >
> <snippity snip>
> 
> well, if notthing else should trigger an normally wary user the TO field 
> should.  Oh well :-)
> 
> I suspect I'll get a call shortly to unvirus a bunch of computers.  No freebie 
> on this one, though.  It's so obviously a fake that anyone who opens it needs 
> to have their computer using priviledges revoked until they qualify as an 
> MSCE.  Not that that will help, mind you :)
> 
> I first spotted this scam on the newsgroups, oddly enough.  As I don't run a 
> news client on windows I was safe so I peeked.  It's a fun little worm, if 
> I'm reading the code right. 

In fact if you go to just about any main page at M$'s website they have
huge warnings about this scam and a statement saying "We haven't, we
don't, and we never will send out a virus warning in this manor".


> 
> The crappy thing about this is that it hit the wire about the same time as a 
> collection of genuine MS updates which purport to correct everything that 
> previous updates failed to.  So some MS users will open it and it's off.
> 
> Again, if I'm reading the code correctly, if the user is on a LAN say goodbye 
> to every windows box on the LAN cause it finds a shared directory and parks 
> there.  Then it fires itself out to every other machine on the LAN.  And on 
> and on.
> 
> As this is the first time I've disassembled one of these beasties I don't know 
> if it's an old one or not.
> 
> No, Zone Alarm does not blacklist email, at least the free version doesn't.  
> The paid for one claims to though I've heard varying reports of how well or 
> poorly it does that.
> 
> As someone has pointed out, have your daughter use Pegasus.
> 
> Also, while Microsoft may be populated by greedy, drooling monopolists they 
> aren't THAT stupid to email patches.  They'll simply push them to you.  And, 
> for some strange reason, incompetance?, the patch will break more than it 
> fixes.
> 
> Ahh well, enough anti MS ranting.  I need my blood pressure meds again :)
> 
> ttfn
> 
> John
> 
> 
> ______________________________________________________________________
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to