I WOULDN'T TOUCH THIS WITH A 20Foot BARGE POLE, FOLKS!

--

Steve Rindsberg PPT MVP
PPTLive ( http://www.pptlive.com ) Featured Speaker
PPTools: http://www.pptools.com
PPT FAQ: http://www.pptfaq.com


"J.S.L." <gjeelgxlw-psdtwdgk[at]oiyv.net> wrote in message
news:#qCS4RkfDHA.2984[at]TK2MSFTNGP11.phx.gbl...
Microsoft Client

In case anyone didn't notice, this post did NOT come from Microsoft. Do not
respond. Do not download.

--
Beth Rosengard
Mac MVP

Mac Word FAQ: <http://www.mvps.org/word/FAQs/WordMac/index.htm>
Entourage Help Page: <http://www.entourage.mvps.org/toc.html>



On 9/18/03 5:25 PM, in article #qCS4RkfDHA.2984[at]TK2MSFTNGP11.phx.gbl,
"J.S.L." <gjeelgxlw-psdtwdgk[at]oiyv.net> wrote:

> Microsoft <http://www.microsoft.com/> All Products
> <http://www.microsoft.com/catalog/> | Support <http://support.microsoft.com/>
> | Search <http://search.microsoft.com/> | Microsoft.com Guide
> <http://www.microsoft.com/>
> Microsoft Home <http://www.microsoft.com/>
>
> Microsoft Client
>
> this is the latest version of security update, the "September 2003, Cumulative
> Patch" update which fixes all known security vulnerabilities affecting MS
> Internet Explorer, MS Outlook and MS Outlook Express as well as three newly
> discovered vulnerabilities. Install now to continue keeping your computer
> secure from these vulnerabilities, the most serious of which could allow an
> attacker to run executable on your computer. This update includes the
> functionality of all previously released patches.
>
> System requirements Windows 95/98/Me/2000/NT/XP
> This update applies to MS Internet Explorer, version 4.01 and later
> MS Outlook, version 8.00 and later
> MS Outlook Express, version 4.01 and later
> Recommendation Customers should install the patch at the earliest
> opportunity.
> How to install Run attached file. Choose Yes on displayed dialog box.
> How to use You don't need to do anything after installing this item.
> Microsoft Product Support Services and Knowledge Base articles can be found on
> the Microsoft Technical Support <http://support.microsoft.com/> web site. For
> security-related information about Microsoft products, please visit the
> Microsoft Security Advisor <http://www.microsoft.com/security> web site, or
> Contact Us. <http://www.microsoft.com/contactus/contactus.asp>
>
> Thank you for using Microsoft products.
>
> Please do not reply to this message. It was sent from an unmonitored e-mail
> address and we are unable to respond to any replies.
>
> The names of the actual companies and products mentioned herein are the
> trademarks of their respective owners.
> Contact Us <http://www.microsoft.com/contactus/contactus.asp> | Legal
> <http://www.microsoft.com/legal/> | TRUSTe
> <https://www.truste.org/validate/605>
> ©2003 Microsoft Corporation. All rights reserved. Terms of Use
> <http://www.microsoft.com/info/cpyright.htm> | Privacy Statement
> <http://www.microsoft.com/info/privacy.htm> | Accessibility
> <http://www.microsoft.com/enable/>
>

This message contains a virus:

Filename : installer.exe
VIRUS name is Worm.Automat.AHB

For Mac users not aware of this: Micropsoft NEVER sends out security patch
alerts to users!

Gene van Troyer

On 9/19/03 11:04 PM, in article BB913BFF.2F77%gevantry[at]nirai.ne.jp, "Gene
van Troyer" <gevantry[at]nirai.ne.jp> wrote:

> For Mac users not aware of this: Micropsoft NEVER sends out security patch
> alerts to users!

Let me correct that: you can subscribe to a security alerts newsletter from
MS, but you have to got to MS and subscribe yourself. If you don't have such
a subscription (which I don't), then anything you get concerning MS sucurity
bulletins is bogus.

I'm getting fed up with the current run of virii. I've received close to
3000 infected messages since last Thursday. Fortunately I never use VPC for
e-mail or other web communication. I stick to the Mac for that.

Gene van Troyer

Hi Gene,

You're not alone! At one point I actually went over Earthlink's 10 MB
server storage limit. I've had to set Entourage to keep nothing on the
server. It's really awful, but I have to "admire" the engineer of this
worm: I never knew there could be so many variants on such a simple theme.
I started making junk folder rules for the relatively few infected messages
that were coming in to my Inbox (as opposed to my junk mail folder) until I
realized how many variations there can be. I gave up. It'll run itself out
eventually though it took about a year before I stopped getting KLEZ
messages! :-\

--
Beth Rosengard
Mac MVP

Mac Word FAQ: <http://www.mvps.org/word/FAQs/WordMac/index.htm>
Entourage Help Page: <http://www.entourage.mvps.org/toc.html>



On 9/22/03 7:12 AM, in article BB95326B.31CE%gevantry[at]nirai.ne.jp, "Gene van
Troyer" <gevantry[at]nirai.ne.jp> wrote:

> I'm getting fed up with the current run of virii. I've received close to
> 3000 infected messages since last Thursday.

The alerts don't have attachments--they have links to Microsoft web URL's.

Any email with an attachment that you didn't actively solicit is probably a
Bad Thing.

"Gene van Troyer" <gevantry[at]nirai.ne.jp> wrote in message
news:BB95326B.31CE%gevantry[at]nirai.ne.jp...
> On 9/19/03 11:04 PM, in article BB913BFF.2F77%gevantry[at]nirai.ne.jp, "Gene
> van Troyer" <gevantry[at]nirai.ne.jp> wrote:
>
> > For Mac users not aware of this: Micropsoft NEVER sends out security
patch
> > alerts to users!
>
> Let me correct that: you can subscribe to a security alerts newsletter
from
> MS, but you have to got to MS and subscribe yourself. If you don't have
such
> a subscription (which I don't), then anything you get concerning MS
sucurity
> bulletins is bogus.
>
> I'm getting fed up with the current run of virii. I've received close to
> 3000 infected messages since last Thursday. Fortunately I never use VPC
for
> e-mail or other web communication. I stick to the Mac for that.
>
> Gene van Troyer
>

And clicking on a URL in a message whose source you are not ABSOLUTELY sure
of is an invitation to infection. Don't do it!

--
Beth Rosengard
Mac MVP

Mac Word FAQ: <http://www.mvps.org/word/FAQs/WordMac/index.htm>
Entourage Help Page: <http://www.entourage.mvps.org/toc.html>


On 9/22/03 11:40 AM, in article ucfuJkTgDHA.2984[at]TK2MSFTNGP11.phx.gbl, "Bill
Sanderson" <Bill_Sanderson[at]msn.com.plugh.org> wrote:

> The alerts don't have attachments--they have links to Microsoft web URL's.
>
> Any email with an attachment that you didn't actively solicit is probably a
> Bad Thing.
>
> "Gene van Troyer" <gevantry[at]nirai.ne.jp> wrote in message
> news:BB95326B.31CE%gevantry[at]nirai.ne.jp...
>> On 9/19/03 11:04 PM, in article BB913BFF.2F77%gevantry[at]nirai.ne.jp, "Gene
>> van Troyer" <gevantry[at]nirai.ne.jp> wrote:
>>
>>> For Mac users not aware of this: Micropsoft NEVER sends out security
> patch
>>> alerts to users!
>>
>> Let me correct that: you can subscribe to a security alerts newsletter
> from
>> MS, but you have to got to MS and subscribe yourself. If you don't have
> such
>> a subscription (which I don't), then anything you get concerning MS
> sucurity
>> bulletins is bogus.
>>
>> I'm getting fed up with the current run of virii. I've received close to
>> 3000 infected messages since last Thursday. Fortunately I never use VPC
> for
>> e-mail or other web communication. I stick to the Mac for that.
>>
>> Gene van Troyer
>>
>
>

On 9/23/03 3:40 AM, in article ucfuJkTgDHA.2984[at]TK2MSFTNGP11.phx.gbl, "Bill
Sanderson" <Bill_Sanderson[at]msn.com.plugh.org> wrote:

> The alerts don't have attachments--they have links to Microsoft web URL's.

They have variants, some bearing attachments and links to bogus MS websites
that immediately attempt to infect your Windoze PC with the SoBig worm. So
far my ISP has zapped over 6000 messages, and I've filtered at least another
1000.

There's a theory that SoBig was actually commissioned by spammers to
knock-out anti-spam websites:


http://www.theregister.co.uk/content/56/33059.html

> Sobig linked to DDoS attacks on anti-spam sites
> By John Leyden
> Posted: 25/09/2003 at 19:22 GMT
>
> A senior anti-spam activist is calling on law enforcement authorities to track
> down the perpetrators behind a widespread and sustained attack on anti-spam
> sites. The call, from Steve Linford of Spamhaus, comes along with fresh
> evidence that the assaults have been enabled by the infamous Sobig worm.

Gene van Troyer

On 9/23/03 3:40 AM, in article ucfuJkTgDHA.2984[at]TK2MSFTNGP11.phx.gbl, "Bill
Sanderson" <Bill_Sanderson[at]msn.com.plugh.org> wrote:

> The alerts don't have attachments--they have links to Microsoft web URL's.

And next in my message cue, in the VPC MS News Server newsgroup, from the
entity "Solaris Srl," was just such an alert with URLS AND a zipped virus
file purporting to be a security patch.

Gene van Troyer

I'm trying to help folks clearly delineate REAL email from Microsoft from
the fake ones.

Best information, though, is this, direct from Microsoft:

http://www.microsoft.com/security/antivirus/authenticate_mail.asp


"Gene van Troyer" <gevantry[at]nirai.ne.jp> wrote in message
news:BB9B16CF.346B%gevantry[at]nirai.ne.jp...
> On 9/23/03 3:40 AM, in article ucfuJkTgDHA.2984[at]TK2MSFTNGP11.phx.gbl,
"Bill
> Sanderson" <Bill_Sanderson[at]msn.com.plugh.org> wrote:
>
> > The alerts don't have attachments--they have links to Microsoft web
URL's.
>
> They have variants, some bearing attachments and links to bogus MS
websites
> that immediately attempt to infect your Windoze PC with the SoBig worm. So

Hi Gene:

A small but very important correction to that:

Microsoft NEVER emails FILES.

Yes, you can subscribe to security alerts from Microsoft, but they are
normal emails. They NEVER contain files.

Anything that contains an attachment did NOT come from Microsoft, and is
almost CERTAINLY a virus.

I am currently getting around 3 - 500 a day of the little suckers...

Hope this helps

This responds to article <BB95326B.31CE%gevantry[at]nirai.ne.jp>, from "Gene
van Troyer" <gevantry[at]nirai.ne.jp> on 23/9/03 12:12 AM:

> On 9/19/03 11:04 PM, in article BB913BFF.2F77%gevantry[at]nirai.ne.jp, "Gene
> van Troyer" <gevantry[at]nirai.ne.jp> wrote:
>
>> For Mac users not aware of this: Micropsoft NEVER sends out security patch
>> alerts to users!
>
> Let me correct that: you can subscribe to a security alerts newsletter from
> MS, but you have to got to MS and subscribe yourself. If you don't have such
> a subscription (which I don't), then anything you get concerning MS sucurity
> bulletins is bogus.
>
> I'm getting fed up with the current run of virii. I've received close to
> 3000 infected messages since last Thursday. Fortunately I never use VPC for
> e-mail or other web communication. I stick to the Mac for that.
>
> Gene van Troyer
>

--
All Spam and attachments blocked by Microsoft Entourage for Mac OS X. Please
post replies to the newsgroup to maintain the thread.

John McGhie, Microsoft MVP: Word for Macintosh and Word for Windows
Consultant Technical Writer <john[at]mcghie-information.com.au>
+61 4 1209 1410; Sydney, Australia: GMT + 10 hrs

I've had to open a new emailbox as a result. and I am using the old
address for reading news just to prevent receiving any of the stuff in
Newspost. This news group along has 3 or 4 a day. If I didn't have view
attachments inline turned off I would spread it again. Although Mac are
not affected by most PC viruses except for the Macrovirus stuff in
Office; we can be typhiod Mary's passing the stuff along.

"John McGhie [MVP]" wrote:
>
> Hi Gene:
>
> A small but very important correction to that:
>
> Microsoft NEVER emails FILES.
>
> Yes, you can subscribe to security alerts from Microsoft, but they are
> normal emails. They NEVER contain files.
>
> Anything that contains an attachment did NOT come from Microsoft, and is
> almost CERTAINLY a virus.
>
> I am currently getting around 3 - 500 a day of the little suckers...
>
> Hope this helps
>
> This responds to article <BB95326B.31CE%gevantry[at]nirai.ne.jp>, from "Gene
> van Troyer" <gevantry[at]nirai.ne.jp> on 23/9/03 12:12 AM:
>
> > On 9/19/03 11:04 PM, in article BB913BFF.2F77%gevantry[at]nirai.ne.jp, "Gene
> > van Troyer" <gevantry[at]nirai.ne.jp> wrote:
> >
> >> For Mac users not aware of this: Micropsoft NEVER sends out security patch
> >> alerts to users!
> >
> > Let me correct that: you can subscribe to a security alerts newsletter from
> > MS, but you have to got to MS and subscribe yourself. If you don't have such
> > a subscription (which I don't), then anything you get concerning MS sucurity
> > bulletins is bogus.
> >
> > I'm getting fed up with the current run of virii. I've received close to
> > 3000 infected messages since last Thursday. Fortunately I never use VPC for
> > e-mail or other web communication. I stick to the Mac for that.
> >
> > Gene van Troyer
> >
>
> --
> All Spam and attachments blocked by Microsoft Entourage for Mac OS X. Please
> post replies to the newsgroup to maintain the thread.
>
> John McGhie, Microsoft MVP: Word for Macintosh and Word for Windows
> Consultant Technical Writer <john[at]mcghie-information.com.au>
> +61 4 1209 1410; Sydney, Australia: GMT + 10 hrs

--
---------------------------------------------------------------------------
Phillip M. Jones, CET |MEMBER:VPEA (LIFE) ETA-I, NESDA,ISCET, Sterling
616 Liberty Street |Who's Who. PHONE:276-632-5045, FAX:276-632-0868
Martinsville Va |pjones[at]kimbanet.com, ICQ11269732, AIM pjonescet
24112-1809
---------------------------------------------------------------------------

If it's "fixed", don't "break it"!

mailto:pjones[at]kimbanet.com

<http://www.kimbanet.com/~pjones/default.htm>
<http://home.kimbanet.com/~pjones/birthday/index.htm>
<http://vpea.exis.net>

On 9/29/03 3:41 PM, "Phillip M. Jones, C.E.T." <pjones[at]kimbanet.com> wrote:

> I've had to open a new emailbox as a result. and I am using the old
> address for reading news just to prevent receiving any of the stuff in
> Newspost. This news group along has 3 or 4 a day.

Microsoft has been reluctant to not allow any attachments to postings in
newsgroups. However, as of this late this afternoon PST, they have set a
limit on the size of postings, which should curb much of the SWEN
attachments seen here.

Older postings will be here for a while until cleaned up.

bill
--
William M. Smith
(Microsoft Interop MVP)