Re: New Virus?

From: Andrew Z Carpenter [now with added MVP!] (azc_at_FILTERcirencester.ac.uk)
Date: 10/20/03


Date: Mon, 20 Oct 2003 20:56:13 +0100


> <anonymous@discussions.microsoft.com> wrote in message
> news:010a01c3973f$6b333e00$a601280a@phx.gbl...
>
> Hi JB:
>
> Well,I downloaded both tools and cleared off a couple of
> data miners, restarted and I'm still being re-directed to
> the bogus Microsoft site! It actully blocks the link to
> the Security patch dowload link on the MS Homepage too....
>
> My IT guys are baffled...they can't find anything either.
> This is quite bizarre! This is the error message I get...
>
> Error: The website you are looking for does not appear to
> be located on this server.
>
> It is our understanding that your computer may require one
> of the new security patches from Microsoft.Com. Please
> download it from the following address:
> http://www.windowsupdate.com
>
> After you have updated your windows security at
> Microsoft's Windows Update (The Link Above) the address
> you have typed in should take you to where you expected to
> go.
>
> Have you ever seen this before??
>
> Many thanks,
> Donna
> Thankyou.

Again, my guess is infection by the QHosts Trojan.

Scan your computer with updated antivirus software, or more
specifically a QHosts removal tool, such as the one provided
by Symantec.

As for the link for WindowsUpdate, Microsoft did used to own
that address but it was taken down due to automated attack
by virus infected machines.

The real Windows Update website address is as follows:
http://windowsupdate.microsoft.com

The Qhosts trojan can infect your computer if it is missing
the latest cumulative patch for Internet Explorer (not the
bogus one being emailed, but the real one you get from MS).

Good luck!

-- 
AZC
MVP
---
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.528 / Virus Database: 324 - Release Date: 16/10/2003


Relevant Pages

  • Re: IE patches killed internet connection
    ... IE to download/install from Windows Update manually, so don't even try using Firefox. ... Later, Auto Update reoffered the security update, but I was ... Microsoft.com to try to download manually, but I have to use Firefox to ... install all patches offered except for SP2. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: malware affecting IE7 on XP
    ... to the Windows Update site. ... Then a page saying that I have security problems pops up, and prompts me ... Here's some info on the registrant of the site that is trying to download ...
    (microsoft.public.security.virus)
  • RE: Windows Update not working at all...
    ... I installed the "collective security update" KB 867801 in mid August. ... couldn't update anything from Windows Update since that time. ... I managed to install SP2 from a CD and Windows Media Player 10 ... (both refused to download from Windows Update) ...
    (microsoft.public.windowsupdate)
  • Re: IE patches killed internet connection
    ... Yes, you *must* use IE to download/install from Windows Update manually, so don't even try using Firefox. ... Later, Auto Update reoffered the security update, but I was ... Microsoft.com to try to download manually, but I have to use Firefox to ... install all patches offered except for SP2. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: MS Network Security Center message
    ... unsolicited security patches. ... Microsoft Policies on Software Distribution ... Information on Bogus Microsoft Security Bulletin Emails ... > not sure what I need or what is being sent for download. ...
    (microsoft.public.security.virus)