While downloading a crit update for exp 6, serv pak 1,
Norton A-V grabbed a virus.

I thought people should know. Unfortunately, I couldn't
find any way to contact Microsoft about it...?

Re: Critical update contained a virus by Herb

Herb
Wed Aug 06 20:38:59 CDT 2003

> While downloading a crit update for exp 6, serv pak 1,
> Norton A-V grabbed a virus.

Exp 6? IE 6 perhaps? How did you link to it? Did you
determine it was definitely coming FROM Microsoft?

What page or site specifically?

"Grabbed a virus"?

You mean "alerted" or "warned" about a virus and perhaps
quarantined it?

If this came from Microsoft, it IS POSSIBLE that it contains
a virus but far more likely that it is just a false positive.

Also, note that I am fully up to day with no machines alerting
on updates ORIGINATING from the Microsoft sites.

> I thought people should know. Unfortunately, I couldn't
> find any way to contact Microsoft about it...?

You need to provide much more specific information in your
report for them (or most anyone else) to take it seriously.



Re: Critical update contained a virus by Susan

Susan
Wed Aug 06 21:22:02 CDT 2003

"If this came from Microsoft, it IS POSSIBLE that it contains
a virus but far more likely that it is just a false positive."

Hardly. More likely that it's a bogus email that has been going around
with an email attachment that isn't from MS at all but just looks like
it is.



Herb Martin wrote:

> > While downloading a crit update for exp 6, serv pak 1,
> > Norton A-V grabbed a virus.
>
> Exp 6? IE 6 perhaps? How did you link to it? Did you
> determine it was definitely coming FROM Microsoft?
>
> What page or site specifically?
>
> "Grabbed a virus"?
>
> You mean "alerted" or "warned" about a virus and perhaps
> quarantined it?
>
> If this came from Microsoft, it IS POSSIBLE that it contains
> a virus but far more likely that it is just a false positive.
>
> Also, note that I am fully up to day with no machines alerting
> on updates ORIGINATING from the Microsoft sites.
>
> > I thought people should know. Unfortunately, I couldn't
> > find any way to contact Microsoft about it...?
>
> You need to provide much more specific information in your
> report for them (or most anyone else) to take it seriously.

--
"Don't lose sight of security. Security is a state of being,
not a state of budget. He with the most firewalls still does
not win. Put down that honeypot and keep up to date on your
patches. Demand better security from vendors and hold them
responsible. Use what you have, and make sure you know how
to use it properly and effectively."
~Rain Forest Puppy
http://www.wiretrip.net/rfp/txt/evolution.txt



Re: Critical update contained a virus by Susan

Susan
Wed Aug 06 21:21:04 CDT 2003

By any chance was this an email being sent to you that contained an
attach file labelled as a critical update? This is a bogus email not
sent from Microsoft. MS never emails code.

Mike wrote:

> While downloading a crit update for exp 6, serv pak 1,
> Norton A-V grabbed a virus.
>
> I thought people should know. Unfortunately, I couldn't
> find any way to contact Microsoft about it...?

--
"Don't lose sight of security. Security is a state of being,
not a state of budget. He with the most firewalls still does
not win. Put down that honeypot and keep up to date on your
patches. Demand better security from vendors and hold them
responsible. Use what you have, and make sure you know how
to use it properly and effectively."
~Rain Forest Puppy
http://www.wiretrip.net/rfp/txt/evolution.txt



Re: Critical update contained a virus by Herb

Herb
Thu Aug 07 00:17:28 CDT 2003


"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@pacbell.net>
wrote in message news:3F31B7CA.25948008@pacbell.net...
> "If this came from Microsoft, it IS POSSIBLE that it contains
> a virus but far more likely that it is just a false positive."
>
> Hardly. More likely that it's a bogus email that has been going around
> with an email attachment that isn't from MS at all but just looks like
> it is.

No, you are wrong -- what I said was "IF", that is "IF it came
from Microsoft" and he indicated in the original post that he
"downloaded" this, not that he received it in email.

If you read my original reply you will find that I first queried him
on where specifically he obtained the item.

You would have been correct if you had merely said it was more
likely that he had not obtained this from Microsoft.

30
> Herb Martin wrote:
>
> > > While downloading a crit update for exp 6, serv pak 1,
> > > Norton A-V grabbed a virus.
> >
> > Exp 6? IE 6 perhaps? How did you link to it? Did you
> > determine it was definitely coming FROM Microsoft?
> >
> > What page or site specifically?
> >
> > "Grabbed a virus"?
> >
> > You mean "alerted" or "warned" about a virus and perhaps
> > quarantined it?
> >
> > If this came from Microsoft, it IS POSSIBLE that it contains
> > a virus but far more likely that it is just a false positive.
> >
> > Also, note that I am fully up to day with no machines alerting
> > on updates ORIGINATING from the Microsoft sites.
> >
> > > I thought people should know. Unfortunately, I couldn't
> > > find any way to contact Microsoft about it...?
> >
> > You need to provide much more specific information in your
> > report for them (or most anyone else) to take it seriously.
>
> --
> "Don't lose sight of security. Security is a state of being,
> not a state of budget. He with the most firewalls still does
> not win. Put down that honeypot and keep up to date on your
> patches. Demand better security from vendors and hold them
> responsible. Use what you have, and make sure you know how
> to use it properly and effectively."
> ~Rain Forest Puppy
> http://www.wiretrip.net/rfp/txt/evolution.txt
>
>



Re: Critical update contained a virus by Susan

Susan
Thu Aug 07 00:58:21 CDT 2003

Missed the if...sorry...but you and I both know that probably our dear friend
Mr. __fill in the month__ cummulative IE email ;-)

Herb Martin wrote:

> "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@pacbell.net>
> wrote in message news:3F31B7CA.25948008@pacbell.net...
> > "If this came from Microsoft, it IS POSSIBLE that it contains
> > a virus but far more likely that it is just a false positive."
> >
> > Hardly. More likely that it's a bogus email that has been going around
> > with an email attachment that isn't from MS at all but just looks like
> > it is.
>
> No, you are wrong -- what I said was "IF", that is "IF it came
> from Microsoft" and he indicated in the original post that he
> "downloaded" this, not that he received it in email.
>
> If you read my original reply you will find that I first queried him
> on where specifically he obtained the item.
>
> You would have been correct if you had merely said it was more
> likely that he had not obtained this from Microsoft.
>
> 30
> > Herb Martin wrote:
> >
> > > > While downloading a crit update for exp 6, serv pak 1,
> > > > Norton A-V grabbed a virus.
> > >
> > > Exp 6? IE 6 perhaps? How did you link to it? Did you
> > > determine it was definitely coming FROM Microsoft?
> > >
> > > What page or site specifically?
> > >
> > > "Grabbed a virus"?
> > >
> > > You mean "alerted" or "warned" about a virus and perhaps
> > > quarantined it?
> > >
> > > If this came from Microsoft, it IS POSSIBLE that it contains
> > > a virus but far more likely that it is just a false positive.
> > >
> > > Also, note that I am fully up to day with no machines alerting
> > > on updates ORIGINATING from the Microsoft sites.
> > >
> > > > I thought people should know. Unfortunately, I couldn't
> > > > find any way to contact Microsoft about it...?
> > >
> > > You need to provide much more specific information in your
> > > report for them (or most anyone else) to take it seriously.
> >
> > --
> > "Don't lose sight of security. Security is a state of being,
> > not a state of budget. He with the most firewalls still does
> > not win. Put down that honeypot and keep up to date on your
> > patches. Demand better security from vendors and hold them
> > responsible. Use what you have, and make sure you know how
> > to use it properly and effectively."
> > ~Rain Forest Puppy
> > http://www.wiretrip.net/rfp/txt/evolution.txt
> >
> >

--
"Don't lose sight of security. Security is a state of being, not a
state of budget. He with the most firewalls still does not win.
Put down that honeypot and keep up to date on your patches. Demand
better security from vendors and hold them responsible. Use what
you have, and make sure you know how to use it properly and effectively."
~ Rain Forest Puppy

http://www.wiretrip.net/rfp/txt/evolution.txt



Re: Critical update contained a virus by Herb

Herb
Thu Aug 07 02:52:47 CDT 2003


"Susan Bradley, CPA aka Ebitz SBS Rocks [MVP]" <sbradcpa@pacbell.net> wrote
in message news:3F31EA7D.F093573D@pacbell.net...
> Missed the if...sorry...but you and I both know that probably our dear
friend
> Mr. __fill in the month__ cummulative IE email ;-)

Pretty much sums it up, but I was giving him the benefit
of the doubt (on a post that was little more than "my
Windows is broken please help me fix them.".