hidden hit counter
Welcome to Soft32 Forums!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Bogus MS emails

  
   Soft32 Home -> Windows -> New Users RSS
Next:  ASP.NET listed as user now [?]  
Author Message
rippinchikkin

External


Since: Sep 07, 2003
Posts: 5



(Msg. 1) Posted: Thu Sep 18, 2003 8:06 am
Post subject: Bogus MS emails
Archived from groups: microsoft>public>windowsxp>newusers (more info?)
Has anyone else been getting these bogus Microsoft emails? I have
gotten like 4 today already, claiming to be from the MS security
division, with a .exe file. All looked very offical and all had the MS
patch number i.e. #Q4327blabla.....
get the picture. but all sacaned with norton and were virus loaded..
If you wanna download any new patches or updates do it from their
site.
Just though I would put my 2 cents worth out there.
Back to top
Login to vote
"Larry Samuels MS-MVP XP

External


Since: Dec 10, 2003
Posts: 12



(Msg. 2) Posted: Thu Sep 18, 2003 1:12 pm
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
PSS Security Response Team Alert - New E-Mail Worm: W32/Swen@MM

SEVERITY: MODERATE
DATE: September 18, 2003
PRODUCTS AFFECTED: Microsoft Outlook, Microsoft Outlook Express, and
Web-based e-mail

**********************************************************************

WHAT IS IT?
W32/Swen@MM spreads via e-mail and network shares. The Microsoft
Product Support Services Security Team is issuing this alert to advise
customers to be on the alert for this virus as it spreads in the wild.
Customers are advised to review the information and take the appropriate
action for their environments.

IMPACT OF ATTACK: Mass Mailing, disabling processes related to security
software such as antivirus and firewall software

TECHNICAL DETAILS:
For additional details on this worm from anti-virus software vendors
participating in the Microsoft Virus Information Alliance (VIA) please
visit the following links:

Network Associates:

http://vil.nai.com/vil/content/v_100662.htm

Trend Micro:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SWE
N.A

Symantec

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.ht
ml

Computer Associates:

http://www3.ca.com/virusinfo/virus.aspx?ID=36939

For more information on Microsoft's Virus Information Alliance please
visit this link: http://www.microsoft.com/technet/security/virus/via.asp


Please contact your Antivirus Vendor for additional details on this
virus.


PREVENTION:

1. This worm is exploiting a previously patched vulnerability. The
vulnerability exploited is related to the following Microsoft Security
Bulletin:
http://www.microsoft.com/technet/security/bulletin/ms01-020.asp

As always, customers are advised to install the latest security patch
for Internet Explorer. Information on the latest cumulative security
patch for
Internet Explorer can be found here:
http://www.microsoft.com/technet/security/bulletin/MS03-032.asp

2. Outlook 2000 post SP2 and Outlook XP SP1 include the most recent
updates to improve the security in Outlook and other Office programs.
This includes the functionality to block potentially harmful attachment
types. If you are running either of these versions, they will (by
default) block the attachment, and you will be unable to open it.

To ensure you are using the latest version of Office click here:
http://office.microsoft.com/ProductUpdates/default.aspx

By default, Outlook 2000 pre SR1 and Outlook 98 did not include this
functionality, but it can be obtained by installing the Outlook E-mail
Security Update. More information about the Outlook E-mail Security
Update can be found here:

http://office.microsoft.com/Downloads/2000/Out2ksec.aspx

Outlook Express 6 can be configured to block access to
potentially-damaging attachments. Information about how to configure
this can be found here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q291387

Outlook Express all other versions: Previous versions of Outlook Express
do not contain attachment-blocking functionality. Please exercise
extreme caution when opening unsolicited e-mail messages with
attachments.

Web-based e-mail programs: Use of a program-level firewall can protect
you from being infected with this virus through Web-based e-mail
programs.

RECOVERY:
If your computer has been infected with this virus, please contact your
preferred antivirus vendor or Microsoft Product Support Services for
assistance with removing it.

TECHNET SECURITY LINK:
http://www.microsoft.com/technet/security/virus/alerts/swen.asp

As always please make sure to use the latest Anti-Virus detection from
your Anti-Virus vendor to detect new viruses and their variants.

If you have any questions regarding this alert please contact your
Microsoft representative or 1-866-727-2338 (1-866-PCSafety) within the
US, outside of the US please contact your local Microsoft Subsidiary.
Support for virus related issues can also be obtained from the Microsoft
Virus Support Newsgroup which can be located by clicking on the
following link
news://msnews.microsoft.com/microsoft.public.security.virus.

PSS Security Response Team

--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone

"rippinchikkin" <rippinchikkin RemoveThis @sport.rr.com> wrote in message
news:87ac3620.0309181206.68222ea3@posting.google.com...
> Has anyone else been getting these bogus Microsoft emails? I have
> gotten like 4 today already, claiming to be from the MS security
> division, with a .exe file. All looked very offical and all had the MS
> patch number i.e. #Q4327blabla.....
> get the picture. but all sacaned with norton and were virus loaded..
> If you wanna download any new patches or updates do it from their
> site.
> Just though I would put my 2 cents worth out there.
Back to top
Login to vote
Mike Brannigan [MSFT]

External


Since: Oct 15, 2004
Posts: 109



(Msg. 3) Posted: Thu Sep 18, 2003 4:54 pm
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
"rippinchikkin" <rippinchikkin RemoveThis @sport.rr.com> wrote in message
news:87ac3620.0309181206.68222ea3@posting.google.com...
> Has anyone else been getting these bogus Microsoft emails? I have
> gotten like 4 today already, claiming to be from the MS security
> division, with a .exe file. All looked very offical and all had the MS
> patch number i.e. #Q4327blabla.....
> get the picture. but all sacaned with norton and were virus loaded..
> If you wanna download any new patches or updates do it from their
> site.
> Just though I would put my 2 cents worth out there.

Yes Millions of them are sent everyday to millions of users.
Any one that contains an attachment is not from us.
We will never send you an attachment - we always include a link to the file
for download.
see
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec...ty/poli

--
Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

"rippinchikkin" <rippinchikkin RemoveThis @sport.rr.com> wrote in message
news:87ac3620.0309181206.68222ea3@posting.google.com...
> Has anyone else been getting these bogus Microsoft emails? I have
> gotten like 4 today already, claiming to be from the MS security
> division, with a .exe file. All looked very offical and all had the MS
> patch number i.e. #Q4327blabla.....
> get the picture. but all sacaned with norton and were virus loaded..
> If you wanna download any new patches or updates do it from their
> site.
> Just though I would put my 2 cents worth out there.
Back to top
Login to vote
Will Denny

External


Since: Sep 12, 2003
Posts: 41



(Msg. 4) Posted: Thu Sep 18, 2003 5:19 pm
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
"Mike Brannigan [MSFT]" <mikebran.RemoveThis@online.microsoft.com> wrote in message news:uOthOcifDHA.368@TK2MSFTNGP12.phx.gbl...
> "rippinchikkin" <rippinchikkin.RemoveThis@sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
>
> Yes Millions of them are sent everyday to millions of users.
> Any one that contains an attachment is not from us.
> We will never send you an attachment - we always include a link to the file
> for download.
> see
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec...ty/poli
>
> --
> Regards,
>
> Mike
> --
> Mike Brannigan [Microsoft]

Hi Mike

It seems as though more and more people are falling for these hoaxes and installing these 'updates' - there have been several instances today. The only way round it - so far as I can see - is to perform a 'clean' install as .EXE files are affected and can't be started. Several people have said that they can access their data files, which can be backed up prior to the re-install.

Will

> "rippinchikkin" <rippinchikkin.RemoveThis@sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 11/09/2003
Back to top
Login to vote
Crispy

External


Since: Sep 19, 2003
Posts: 3



(Msg. 5) Posted: Fri Sep 19, 2003 5:12 pm
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
4?

I have had nearer 40!!!

Is anyone doing anything about all this?


"rippinchikkin" <rippinchikkin DeleteThis @sport.rr.com> wrote in message
news:87ac3620.0309181206.68222ea3@posting.google.com...
> Has anyone else been getting these bogus Microsoft emails? I have
> gotten like 4 today already, claiming to be from the MS security
> division, with a .exe file. All looked very offical and all had the MS
> patch number i.e. #Q4327blabla.....
> get the picture. but all sacaned with norton and were virus loaded..
> If you wanna download any new patches or updates do it from their
> site.
> Just though I would put my 2 cents worth out there.
Back to top
Login to vote
rippinchikkin

External


Since: Sep 07, 2003
Posts: 5



(Msg. 6) Posted: Mon Sep 22, 2003 8:06 am
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Thanks for the response, no I haven't fallen for these. it just
concerned me because the email that I have been getting these on is a
private email address. It is only in my MCSE profile, at MS. It is not
an email that i give too friends or use for anything other than
official communication with Microsoft. I have 6 or 7 email address
that I use for various reasons. This is the only one that gets these.
This is why I think they came through you guys one way or another. I
know that they are a hoax and have never had a problem with them other
than having to delete so 400+ email from the last two days. so its
more of an annoyance than anything else

thanks

David

"Mike Brannigan [MSFT]" <mikebran.TakeThisOut@online.microsoft.com> wrote in message
news:<uOthOcifDHA.368.TakeThisOut@TK2MSFTNGP12.phx.gbl>...
> "rippinchikkin" <rippinchikkin.TakeThisOut@sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
>
> Yes Millions of them are sent everyday to millions of users.
> Any one that contains an attachment is not from us.
> We will never send you an attachment - we always include a link to the file
> for download.
> see
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec...ty/poli
>
> --
> Regards,
>
> Mike
> --
> Mike Brannigan [Microsoft]
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights
>
> Please note I cannot respond to e-mailed questions, please use these
> newsgroups
>
> "rippinchikkin" <rippinchikkin.TakeThisOut@sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
Back to top
Login to vote
rippinchikkin

External


Since: Sep 07, 2003
Posts: 5



(Msg. 7) Posted: Mon Sep 22, 2003 8:06 am
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Thanks for the response, no I haven't fallen for these. it just
concerned me because the email that I have been getting these on is a
private email address. It is only in my MCSE profile, at MS. It is not
an email that i give too friends or use for anything other than
official communication with Microsoft. I have 6 or 7 email address
that I use for various reasons. This is the only one that gets these.
This is why I think they came through you guys one way or another. I
know that they are a hoax and have never had a problem with them other
than having to delete so 400+ email from the last two days. so its
more of an annoyance than anything else

thanks

David

"Mike Brannigan [MSFT]" <mikebran RemoveThis @online.microsoft.com> wrote in message
news:<uOthOcifDHA.368 RemoveThis @TK2MSFTNGP12.phx.gbl>...
> "rippinchikkin" <rippinchikkin RemoveThis @sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
>
> Yes Millions of them are sent everyday to millions of users.
> Any one that contains an attachment is not from us.
> We will never send you an attachment - we always include a link to the file
> for download.
> see
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec...ty/poli
>
> --
> Regards,
>
> Mike
> --
> Mike Brannigan [Microsoft]
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights
>
> Please note I cannot respond to e-mailed questions, please use these
> newsgroups
>
> "rippinchikkin" <rippinchikkin RemoveThis @sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
Back to top
Login to vote
rippinchikkin

External


Since: Sep 07, 2003
Posts: 5



(Msg. 8) Posted: Mon Sep 22, 2003 12:43 pm
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Ok my bad, they were coming in on another adderss. thanks for the
links. havent been affected, but the shear numbers of them is what
gets are annoying. I mean they coming in at the rate of one a minute
now, when I check my mail again there will be 20 new ones. However I
did get the root address out of one of the emails, since I dont know
the email I can only assume that it was not from there infected
addresdbook since they should not have my address. 8 more in the time
it took me to write this message.
these are two of the address that i pulled from the emails
nbrewer.RemoveThis@woh.rr.com
joegoglio.RemoveThis@comcast.net




"Mike Brannigan [MSFT]" <mikebran.RemoveThis@online.microsoft.com> wrote in message news:<uOthOcifDHA.368.RemoveThis@TK2MSFTNGP12.phx.gbl>...
> "rippinchikkin" <rippinchikkin.RemoveThis@sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
>
> Yes Millions of them are sent everyday to millions of users.
> Any one that contains an attachment is not from us.
> We will never send you an attachment - we always include a link to the file
> for download.
> see
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec...ty/poli
>
> --
> Regards,
>
> Mike
> --
> Mike Brannigan [Microsoft]
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights
>
> Please note I cannot respond to e-mailed questions, please use these
> newsgroups
>
> "rippinchikkin" <rippinchikkin.RemoveThis@sport.rr.com> wrote in message
> news:87ac3620.0309181206.68222ea3@posting.google.com...
> > Has anyone else been getting these bogus Microsoft emails? I have
> > gotten like 4 today already, claiming to be from the MS security
> > division, with a .exe file. All looked very offical and all had the MS
> > patch number i.e. #Q4327blabla.....
> > get the picture. but all sacaned with norton and were virus loaded..
> > If you wanna download any new patches or updates do it from their
> > site.
> > Just though I would put my 2 cents worth out there.
Back to top
Login to vote
Gordon Burgess-Parker

External


Since: Aug 25, 2003
Posts: 50



(Msg. 9) Posted: Mon Sep 22, 2003 4:09 pm
Post subject: Re: Bogus MS emails [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
rippinchikkin wrote:
> Thanks for the response, no I haven't fallen for these. it just
> concerned me because the email that I have been getting these on is a
> private email address. It is only in my MCSE profile, at MS. It is not
> an email that i give too friends or use for anything other than
> official communication with Microsoft.

I've had them on an email address that likewise I keep very private!


--
Google is your Friend
Email address deliberately false to avoid spam:
gordonATgbpcomputingDOTcoDOTuk
www.gbpcomputing.co.uk





-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----
Back to top
Login to vote
Display posts from previous:   
       Soft32 Home -> Windows -> New Users All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
  Windows
 Linux
 Mac
 PDA

[ Contact us | Terms of Service/Privacy Policy ]