look out virus about!

[chesters1]

i just this e`mail which i thought was from microsoft (suspician raised straight away)it contains an" update" to cure vunrabilities in windows ,the exe file according to nortons contains a virus .anybody else had one? :

Microsoft Customer,

 

this is the latest version of security update, the

"30 Apr 2002 Cumulative Patch" update which eliminates all

known security vulnerabilities affecting Internet Explorer and

MS Outlook/Express as well as six new vulnerabilities, and is

discussed in Microsoft Security Bulletin MS02-005. Install now to

protect your computer from these vulnerabilities, the most serious of which

could allow an attacker to run code on your computer.

 

Description of several well-know vulnerabilities:

 

- "Incorrect MIME Header Can Cause IE to Execute E-mail Attachment" vulnerability.

If a malicious user sends an affected HTML e-mail or hosts an affected

e-mail on a Web site, and a user opens the e-mail or visits the Web site,

Internet Explorer automatically runs the executable on the user's computer.

 

- A vulnerability that could allow an unauthorized user to learn the location

of cached content on your computer. This could enable the unauthorized

user to launch compiled HTML Help (.chm) files that contain shortcuts to

executables, thereby enabling the unauthorized user to run the executables

on your computer.

 

- A new variant of the "Frame Domain Verification" vulnerability could enable a

malicious Web site operator to open two browser windows, one in the Web site's

domain and the other on your local file system, and to pass information from

your computer to the Web site.

 

- CLSID extension vulnerability. Attachments which end with a CLSID file extension

do not show the actual full extension of the file when saved and viewed with

Windows Explorer. This allows dangerous file types to look as though they are simple,

harmless files - such as JPG or WAV files - that do not need to be blocked.

 

System requirements:

Versions of Windows no earlier than Windows 95.

 

This update applies to:

Versions of Internet Explorer no earlier than 4.01

Versions of MS Outlook no earlier than 8.00

Versions of MS Outlook Express no earlier than 4.01

 

How to install

Run attached file q216309.exe

 

How to use

You don't need to do anything after installing this item.

 

For more information about these issues, read Microsoft Security Bulletin MS02-005, or visit link below.

http://www.microsoft.com/windows/ie/downlo...cal/default.asp

If you have some questions about this article contact us at rdquest12@microsoft.com

 

Thank you for using Microsoft products.

 

With friendly greetings,

MS Internet Security Center.

----------------------------------------

----------------------------------------

Microsoft is registered trademark of Microsoft Corporation.

Windows and Outlook are trademarks of Microsoft Corporation.

[davidP]

That's a sneaky one - sure to catch a lot of people. Did you see that the writer of the Melissa virus just got locked up in the USA? Sadly I don't see this having too much of an effect on the next wave of virus writers as they all think themselves too clever to be caught!

[jackmaster]

I fell for this one . It completly wiped everything on the computer as my wife and and I are near computer illiterates it took a freind 8 hours to get the thing up and running again. We have lost everything we had in the 'puter from E-mail adresses to saved levels of games (it has taken me a year to get to the last mission of carmageddon 2000 and now the level walkthru website has gone!). Steer well clear if you know what is good for you. :mad:

[Newt]

The virus that sends that particular message is W32.Gibe@mm and it is not a nice one.

 

But is should be detected and dealt with by any good AV program.

 

Good warning chesters1.

[Leon Roskilly]

This sounds as though it could be nasty

 

http://www.newscientist.com/news/news.jsp?...p?id=ns99992252

 

Be careful out there!

 

Tight Lines - leon

[Chris Goddard]

Had something similar a couple of weeks ago, i.e. purporting to come from Microsoft. I informed them and got a right load of tripe back in response!! But my AVG (Free version) picked up on It straight away.

Just as an aside I also had a virus e-mail supposedly coming from e-bay as well about the same time!! Same response from e-bay though, rubbish!!

 

Chris