Re: ** WARNING ** DANGEROUS E-Mail

From: leslie (LESLIE@JRLVAX.HOUSTON.RR.COM)
Date: 04/10/03 

From: LESLIE@JRLVAX.HOUSTON.RR.COM (leslie)
Date: Thu, 10 Apr 2003 05:55:27 GMT

*** (apexx@softhome.net) wrote:
: If you ever receive email with the following characteristics:
:
: TO: "Microsoft Consumer" < >
: SUBJECT: Network Security Pack.
:
: PLEASE DELETE IT AT ONCE !
:
: DO NOT OPEN THE ATTACHMENT, because the attachment is either a VIRUS
: or a TROJAN HORSE.
:

It's the Gibe.B worm:

   http://www.f-secure.com/v-descs/gibe_b.shtml
   F-Secure Computer Virus Information Pages: Gibe.B

  "NAME: Gibe.B
   ALIAS: I-Worm.Gibe.B, Gibe_B

   Gibe.b worm first appeared on 24th of February 2003. Is started to
   spread actively on 25th of February. The worm spreads itself via
   e-mail, IRC, local network and P2P (peer-to-peer) networks. The worm
   pretends to be an update from Microsoft when it spreads via e-mail..."

: Microsoft NEVER send "network security pack" to its customers via
: email.
:

   http://www.microsoft.com/technet/security/policy/swdist.asp
   Microsoft Policies on Software Distribution
 
  "...Microsoft never distributes software directly via e-mail..."

--Jerry Leslie (my opinions are strictly my own)
  Note: leslie@jrlvax.houston.rr.com is invalid for email

Relevant Pages

  • Re: ** WARNING ** DANGEROUS E-Mail
    ... Gibe.b worm first appeared on 24th of February 2003. ... The worm spreads itself via ... Microsoft Policies on Software Distribution ...
    (microsoft.public.security)
  • Re: ** WARNING ** DANGEROUS E-Mail
    ... Gibe.b worm first appeared on 24th of February 2003. ... The worm spreads itself via ... Microsoft Policies on Software Distribution ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ** WARNING ** DANGEROUS E-Mail
    ... Gibe.b worm first appeared on 24th of February 2003. ... The worm spreads itself via ... Microsoft Policies on Software Distribution ...
    (comp.security.misc)
  • Oxygen3 24h-365d [Weekly virus report - 10/26/03]
    ... Lohack.C spreads via e-mail and across network drives. ... this worm tries to trick users by referring to the Spanish Information ... The fourth malicious code in today's report is a Trojan called Sdbot.N. ... Vix.A is a virus with worm characteristics that infects PE files ...
    (microsoft.public.security.virus)
  • NOTICE: Instant Messages Can Spread Download.Ject
    ... A Download.Ject-style worm which spreads through instant messages is ... The as-yet unnamed worm arrives as an innocuous looking instant message ... These websites contains exploit code designed to infect ... On 24 June many websites running IIS 5 were infected with malicious ...
    (comp.security.misc)