HP3000-L Archives

July 2003, Week 5

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Reply To:
Date:
Tue, 29 Jul 2003 23:16:56 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (45 lines)
 rosenblatt, joseph ([log in to unmask]) wrote:
: I received a message containing a Virus. Our email administration sent
: this message: The attachment p235286.exe contains WORM_GIBE.B virus.
: ScanMail has Deleted it.
:
: Sender = C. Ripko
:

The Gibe.B worm sends itself from one infected PC to all of the email
addresses it finds in the address book...

   http://www.f-secure.com/v-descs/gibe_b.shtml
   F-Secure Computer Virus Information Pages: Gibe.B

  "NAME:  Gibe.B
   ALIAS: I-Worm.Gibe.B, Gibe_B

   Gibe.b worm first appeared on 24th of February 2003. Is started to
   spread actively on 25th of February. The worm spreads itself via
   e-mail, IRC, local network and P2P (peer-to-peer) networks. The worm
   pretends to be an update from Microsoft when it spreads via e-mail.

   [snip]

   The worm locates e-mail addresses by searching inside MailViews.db
   file and Windows Address Book file. Also the worm tries to look for
   e-mails in newsgroups. It reads newsgroup messages and gets sender's
   e-mail addresses from them..."


Microsoft NEVER sends software via email:

   http://www.microsoft.com/technet/security/policy/swdist.asp
   Microsoft Policies on Software Distribution

  "...Microsoft never distributes software directly via e-mail..."



--Jerry Leslie   (my opinions are strictly my own)
  Note: [log in to unmask] is invalid for email

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2