Re: New virus disguised as Microsoft patch?

[Alex Lambert <alambert () quickfire org>]

David:

It's Swen, the worm of the week. I first received it on Friday. It sends 
out the fake Microsoft updates as well as fake postmaster messages 
designed to exploit an old Outlook vulnerability.

See 
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SWEN.A




Cheers,

apl

David Gillett wrote:
>   No, this isn't the crude "500,000 already infected!"
> garbage.  This is an extremely polished and convincing 
> looking html email which claims to be a "September 2003, 
> Cumulative Patch" and includes an attached "patch8678.exe".
>
>   I've got four of these overnight, from broadband users
> as far away from Microsoft as Greece.  Each is followed by 
> an odd little NDR, presumably reporting failed delivery of
> a delivery confirmation message.
>
> David Gillett
>
>
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------