Re: suspicious email

From: Pavan \(MS\) (a-papedi_at_online.microsoft.com)
Date: 09/19/03


Date: Fri, 19 Sep 2003 11:08:59 -0700


If you are infected by the w32.swen.@mm worm, follow this link for removal
instructions.

https://www.europe.f-secure.com/v-descs/swen.shtml

For more information Visit:

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html

Information on Bogus Microsoft Security Bulletin E-mails:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/patch_hoax.asp

-- 
Pavan
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions.
Please use these newsgroups to let me know if the suggestions resolved the
issue.
"MRR" <mlrlra@hotmail.com> wrote in message
news:0e6701c37ed4$a6f47130$a001280a@phx.gbl...
> I got the same one: The attachment name is patch425.exe
> and contains the Worm.Automat.AHB virus.
>
>
> >-----Original Message-----
> >Greetings --
> >
> >   What you received is either a very common malicious
> hoax or the
> >output of a computer infected by one of several well-
> known,
> >wide-spread, mass emailing worms.  The most widely-known
> are:
> >
> >W32.Gibe_mm
> >http://securityresponse.symantec.com/avcenter/venc/data/w
> 32.gibe@mm.html
> >
> >W32.Dumaru_mm
> >http://securityresponse.symantec.com/avcenter/venc/data/w
> 32.dumaru@mm.html
> >
> >W32.Swen.A_mm
> >http://securityresponse.symantec.com/avcenter/venc/data/w
> 32.swen.a@mm.html
> >
> >   Microsoft never has, does not currently, and never
> will email
> >unsolicited security patches.  At the most, if, and only
> if, you
> >subscribe to their security notification newsletter,
> they will send
> >you an email informing you that a new patch is available
> for
> >downloading.
> >
> >Microsoft Policies on Software Distribution
> >http://www.microsoft.com/technet/treeview/?
> url=/technet/security/policy/swdist.asp
> >
> >Information on Bogus Microsoft Security Bulletin Emails
> >http://www.microsoft.com/technet/treeview/default.asp?
> url=/technet/security/news/patch_hoax.asp
> >
> >    Any and all legitimate patches and updates are
> readily available
> >at http://windowsupdate.microsoft.com/.  (Notice that
> this is the true
> >URL, rather than the bogus one that may have been
> contained in the
> >email you received.) Any messages that point to any
> other source(s) or
> >claim to have the patch attached are bogus.
> >
> >
> >Bruce Chambers
> >
> >--
> >Help us help you:
> >http://dts-l.org/goodpost.htm
> >http://www.catb.org/~esr/faqs/smart-questions.html
> >
> >You can have peace.  Or you can have freedom.  Don't
> ever count on
> >having both at once. -- RAH
> >
> >
> >"Steve Rappeport" <rapp7@swbell.net> wrote in message
> >news:025a01c37ecb$73160670$a301280a@phx.gbl...
> >> I have received a number of emails supposedly from
> >> Microsoft which porport to contain security patches.
> They
> >> contain .exe attachments which may be viruses. They
> were
> >> not detected by my antivirus software.
> >>
> >> Normally security patches are obtained online. Who can
> I
> >> forward these emails to to determine if they are
> viruses?
> >>
> >> Thanks
> >
> >
> >.
> >


Relevant Pages

  • Re: suspicious email
    ... Microsoft Policies on Software Distribution ... Information on Bogus Microsoft Security Bulletin Emails ... > Microsoft which porport to contain security patches. ... > contain .exe attachments which may be viruses. ...
    (microsoft.public.security.virus)
  • Re: Viruses and Worms in e-mails sent to me.. Please,.Any one can help?
    ... Microsoft Policies on Software Distribution ... Information on Bogus Microsoft Security Bulletin Emails ... the address book of someone infected with a worm, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: suspicious email
    ... >Microsoft Policies on Software Distribution ... >Information on Bogus Microsoft Security Bulletin Emails ... >> Microsoft which porport to contain security patches. ... >> contain .exe attachments which may be viruses. ...
    (microsoft.public.security.virus)
  • [Full-Disclosure] Fw: Sasser internet worm spreading
    ... > ARE YOU RUNNING THE LATEST MICROSOFT SECURITY PATCHES? ... > as the Sasser worm infects internet users. ... > or the Sophos Anti-Virus Small Business Edition were ...
    (Full-Disclosure)
  • Re: Non-Admin Installing Security Updates
    ... E.g. SUS supports this... ... 3rd party products further down) for security patches. ... Microsoft Software Update Services ... Here is a third party product that supports Win9x and WinME as well: ...
    (microsoft.public.windowsxp.security_admin)