[Dshield] Microsoft Patch

mark rowlands mark.rowlands at mypost.se
Fri Sep 19 05:02:10 GMT 2003


Well, most folks seem to opt for 



 http://www.sophos.com/virusinfo/analyses/w32gibef.html

http://www.security-forums.com/forum/viewtopic.php?t=8447

> -----Original Message-----
> From: list-bounces at dshield.org 
> [mailto:list-bounces at dshield.org] On Behalf Of 
> allan.malig at equitablepcib.com
> Sent: Friday, September 19, 2003 4:24 AM
> To: General DShield Discussion List
> Subject: Re: [Dshield] Microsoft Patch
> 
> 
> I think that's the handywork of W32 Dumaru.A
> 
> 
>                                                               
>                                              
>                                                               
>                                              
>                                                               
>                                              
>                                                               
>                                              
>                                                               
>                                              
>                       Jose Vicente                            
>                                              
>                       Nunez Zuleta          To:    General 
> DShield Discussion List <list at dshield.org>      
>                       <josevnz at newbrea      cc:               
>                                              
>                       k.com>                bcc:              
>                                              
>                       Sent by:              Subject:     Re: 
> [Dshield] Microsoft Patch                     
>                       list-bounces at dsh                        
>                                              
>                       ield.org                                
>                                              
>                                                               
>                                              
>                                                               
>                                              
>                       09/19/2003 09:44                        
>                                              
>                       AM                                      
>                                              
>                       Please respond                          
>                                              
>                       to General                              
>                                              
>                       DShield                                 
>                                              
>                       Discussion List                         
>                                              
>                                                               
>                                              
>                                                               
>                                              
> 
> 
> 
> 
> Yes, I got 10 of those emails.
> 
> On Thu, 2003-09-18 at 18:41, Mike wrote:
> > -----Original Message-----
> > From: Guy Barnum <GuyBarnum at Armscole.com>
> > Sent: Sep 18, 2003 1:50 PM
> > To: list at dshield.org
> > Subject: [Dshield] Microsoft Patch
> >
> > Did anyone else recieve an email from microsoft with an attached exe
> containing the latest security patch?
> >
> > With the ease that email headers can be faked I'm surprised 
> M$ would 
> > send
> out an attachment like this via email.  Imagine how easy it 
> would be to send out a fake email with malware attached!
> >
> > Has anyone tried to fake emails from M$ in the past?
> >
> > Guy
> >
> > _______________________________________________
> > list mailing list
> > list at dshield.org
> > To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> >
> > Yes...I have!!
> >
> > Be well.
> >
> > Mike
> >
> > _______________________________________________
> > list mailing list
> > list at dshield.org
> > To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> --
> Jose Vicente Nunez Zuleta <josevnz at newbreak.com> Newbreak LLC
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> 
> DISCLAIMER
> 
> This correspondence, including attachments, replies, CC 
> (carbon copy) , BCC (blind  carbon copy)  and forward copies 
> are confidential and/or privileged
> information  and intended solely for viewing by the 
> addressee(s).    Please
> ensure  that  reproductions  of  this  correspondence are 
> kept in a secured area..
> If you are NOT a named addressee, or if you received this 
> correspondence by mistake,  please  notify  sender  
> immediately  and delete all copies of the
> correspondence   and   associated   files.     Any   
> unauthorized  copying,
> disclosure,   distribution   or    possession   of  the  
> material  in  this
> correspondence  in  any  format   is  strictly  forbidden and 
> is subject to
> penalties  or sanctions as provided for by the Bank's Code of 
> Conduct or by applicable laws of the Republic of the Philippines.
> 
> 
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 
> 




More information about the list mailing list