Virus Warning?! by Steve
Steve
Sat Sep 20 10:03:18 CDT 2003
What you are experiencing is a known virus that spoofs
itself as an update from Microsoft. Of course we all know
that Microsoft does not do this. We do know this don't
we? He he, sorry I couldn't help my self.
The virus package attached is known by a few names, Swen,
W32/Swen@MM, Gibe, and W32/Gibe-F. The exploit is against
a 2 year old vulnerability in Windows 2000. If you
regularly patch your system you are protected.
Un-patched systems that VIEW the e-mail will be infected.
Antivirus vendors consider this virus a LOW risk.
Just in the last 24 hours I have had about 20 of these
sneak through my own mailbox. Expect external e-mail
delays if you are filtering at the gateway.
Is there a 10th level of Dante's Inferno? It should be
reserved for virus writers.
>-----Original Message-----
>Hi all
>
>I know this subject isn't related to this NG, but I've
been getting e-mails
>which are flooding my box, and I was hoping someone in
here would know of a
>way of stopping them?
>
>They all appear to report from either Microsoft Security
Division, or MS
>something, or some mail server resulting in NDR
messages. Each e-mail
>contains an executable or pif attachment of
approximately 145kb. A lot of
>them appear to come from Microsoft themselves, although
since they never
>e-mail patches it obviously isn't!
>
>I hope this information serves to protect some people,
and hopefully leads
>me to the bottom of this!
>
>Regards
>
>Gareth Saunders
>
>
>.
>