Re: ATTN TOMSTDENIS Re: "New Microsoft Patch" == virus

From: John E. Hadstate (nospam@null.nil)
Date: 04/10/03

  • Next message: Shill: "Borisov, Goldberg, and Wagner perform WEP jointly" 
    From: "John E. Hadstate" <nospam@null.nil>
Date: Thu, 10 Apr 2003 17:36:29 -0400

    As Microsoft says over and over, "We don't spam the world with our patches."
    If you get unsolicited email that purports to be a patch from Microsoft,
    delete it. It's 100% guaranteed to have a virus attached. Don't believe
    it? Check the headers.

    One famous one that's currently floating around purports to be from
    "Microsoft Corporation Network Security Center". Here's what the headers
    show:

    X-Message-Info: yilqo4+6kc64AXpUCzRAW30W84h6gtv8
    Received: from sccrmhc02.attbi.com ([204.127.202.62]) by
    mc6-f1.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
      Wed, 9 Apr 2003 16:07:47 -0700
    Date: Wed, 9 Apr 2003 18:53:04 +0000 (GMT)
    X-Comment: Sending client does not conform to RFC822 minimum requirements
    X-Comment: Date has been added by Maillennium.
    Received: from qchjgzn (12-252-188-53.client.attbi.com[12.252.188.53])
              by sccrmhc02.attbi.com (sccrmhc02) with SMTP
              id <2003040918525500200jc8k3e>; Wed, 9 Apr 2003 18:53:01 +0000
    FROM: "Microsoft Corporation Network Security Center"
    <pltpeircmynniikloxa@lQspIPhfG.com>
    TO: "Microsoft User" < >
    SUBJECT: Newest Network Security Pack
    Mime-Version: 1.0
    Content-Type: multipart/mixed; boundary="WYNGMwtUIuZbyRF"
    Return-Path: alexis.c@attbi.com
    Message-ID: <MC6-F12gpaiARcwl4fN0008fda1@mc6-f1.law1.hotmail.com>
    X-OriginalArrivalTime: 09 Apr 2003 23:07:47.0351 (UTC)
    FILETIME=[D5DC3270:01C2FEEC]

  • Next message: Shill: "Borisov, Goldberg, and Wagner perform WEP jointly"

    Relevant Pages

    • Re: ATTN TOMSTDENIS Re: "New Microsoft Patch" == virus
      ... >If you get unsolicited email that purports to be a patch from Microsoft, ... It's 100% guaranteed to have a virus attached. ...
      (sci.crypt)
    • Security update
      ... I have just received what purports to be a security ... The e-mail looks authentic and asks me to run an 'EXE' ... mail address looks like this 'Microsoft ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Hebrew Suggestions
      ... from the version I sent to Microsoft. ... > numbering - automatically. ... > set which headers to include. ... I strongly suggest that you ensure that Heading 1 is used if you are using ...
      (microsoft.public.word.docmanagement)
    • Re: attachment and e-mail where to report these security issues?
      ... I don't have the source code for microsoft ... all you need to do to get the full headers of a message is ... > lookup and guessing at the guy's ISP provider is not all that convienient, ...
      (microsoft.public.security.virus)