Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

[ Create a new account ]

Surak (18578)

Surak
  surak AT mailblocks DOT com
http://focasmi.org/

Pagan, occultist, redneck, Sysadmin, programmer, writer, Trekker, former BBS SysOp, and 3D CAD and CGI systems expert.

Journal of Surak (18578)

Interesting new virus?

[ #46498 ]
Friday September 19 2003, @01:25PM
User Journal
Has anyone seen the following e-mail?

MS Client

this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three new vulnerabilities. Install now to protect your computer from these vulnerabilities, the most serious of which could allow an malicious user to run executable on your system. This update includes the functionality of all previously released patches.

  System requirements Windows 95/98/Me/2000/NT/XP
  This update applies to MS Internet Explorer, version 4.01 and later
MS Outlook, version 8.00 and later
MS Outlook Express, version 4.01 and later
  Recommendation Customers should install the patch at the earliest opportunity.
  How to install Run attached file. Choose Yes on displayed dialog box.
  How to use You don't need to do anything after installing this item.

Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact Us.

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies.

--------------------------------------------------------------------------------
The names of the actual companies and products mentioned herein are the trademarks of their respective owners.


Obviously it's a fake. It had an executable attached to it that was supposed to be a 'fix'. I had a user e-mail and ask me if it was for real, though.

Now, the e-mail itself looks somewhat real, aside from the fact that the greeting says 'MS Client:', along with the obvious grammatical errors. They grabbed some images from the Microsoft Web site, but I can't reproduce them here in this JE, obviously. Let's just say the formatting looks like it *could* be real. If we didn't already know that Microsoft never publishes patches via e-mail, that is. ;)

Anyone else see this? I wonder how effective it is on the unwashed masses?
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login
Loading... please wait.