Re: Virus Patch

From: Larry Samuels MS-MVP XP \(Shell/User\) (larry_at_mvps.org)
Date: 09/19/03


Date: Thu, 18 Sep 2003 19:26:56 -0400


Microsoft never sends unsolicited files by email.
DO NOT open the file--it is NOT from MS.
REPEAT:Microsoft NEVER sends unsolicited files by email.

It is a virus masquerading as MS security.
The current one circulating is dumaru.b
http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru.b@mm.html
or a variant of the gibe worm.
Removal tool for gibe is at
http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.removal.tool.html

If by chance you did open the file:
>From a post by Bill Sanderson MVP:
Here's where to get the removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru@mm.removal.tool.html

Read the instructions completely, paying particular attention to the part
about System Restore on XP and Me.

-- 
Larry Samuels MS-MVP  (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
"Mitch" <tall_frosty_one@hotmail.com> wrote in message
news:798001c37e3a$e7983220$a601280a@phx.gbl...
> In the last 2 or 3 weeks; I've been receiving a Virus
> Patch from, what says, Microsoft. My Norton's Antivirus
> has been declaring it as containing a virus. I'm receiving
> this on an average of 3 times a day. I can't see anywhere
> in the Microsoft site where I can report this or send the
> patch email for tracking. My nephew's wife loaded the
> patch and now the computer has totally shutdown. Not even
> a DOS prompt. I was wondering if anyone else is getting
> this email. I'm located in Southern Ontario and find that
> many of my family and friends are receiving it.


Relevant Pages

  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... | install the patch, they could have been ready to pull the ISP plug. ... | If there is no active virus/worm/Trojan, then it's ok for Microsoft to say ... |> | involving them self's in anti virus issues affecting their products). ...
    (microsoft.public.security)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... | install the patch, they could have been ready to pull the ISP plug. ... | If there is no active virus/worm/Trojan, then it's ok for Microsoft to say ... |> | involving them self's in anti virus issues affecting their products). ...
    (microsoft.public.security.virus)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... | install the patch, they could have been ready to pull the ISP plug. ... | If there is no active virus/worm/Trojan, then it's ok for Microsoft to say ... |> | involving them self's in anti virus issues affecting their products). ...
    (microsoft.public.win2000.security)
  • Re: SECURITY PATCH SENT BY EMAIL ?
    ... There are dangerous virus in the Internet ... >try to install the patch. ... >MS patch email messages. ... >Microsoft never sends patches in unsolicited mails, ...
    (microsoft.public.security)
  • Re: Mail Microsoft
    ... Microsoft NEVER sends unsolicited files by email. ... It is a virus masquerading as MS security. ... > I receve a message from supose Microsoft telling to use a> patch right away and I think it is not from you. ...
    (microsoft.public.security.virus)