HP3000-L Archives

March 2003, Week 4

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Reply To:
Date:
Mon, 24 Mar 2003 00:17:37 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (37 lines)
 Jeff Kell ([log in to unmask]) wrote:
: Wirt Atmar wrote:
:
: > Although the people who are doing this are getting quite clever about how
: > they're going about this kind of thing, sometimes an amateur slips in and
: > sends out his scurilous little bit of email out to everyone in the clear,
: > as the one I've attached below did.
:
: This was a virus, W32/Gibe.gen@MM, which McAfee recognized but there is
: no reference on their website yet, but there is information available at
: Symantec:
:
: [log in to unmask]" target="_blank">http:[log in to unmask]
:
: The virus came from 206.172.162.156 = Hamilton-ppp216667.sympatico.ca.
:

Also documented at:

   http://www.f-secure.com/v-descs/gibe_b.shtml
   F-Secure Computer Virus Information Pages: Gibe.B

The worm claims to be a software update from Microsoft, who does NOT
send software updates by email:

   http://www.microsoft.com/technet/security/policy/swdist.asp
   Microsoft Policies on Software Distribution

  "...Microsoft never distributes software directly via e-mail..."


--Jerry Leslie   (my opinions are strictly my own)
  Note: [log in to unmask] is invalid for email

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2