CAUTION: New wrinkles in Microsoft virus scam

[Malvern]

They're getting around the update notification now that most of us have
figured it out. I got a message from MS purporting to be an undeliverable
mail notice. Antivirus caught it and (or but) I would have dumped it anyway
as I *don't* get this from MS; my ISP sends such notices.

Another one is that Microsoft is not the only "sender" in the From column.
Again caught but would have been deleted.

Malv

[Nicholas]

You did not receive an update notification from Microsoft. You
received a virus-laden email message from a devious imposter!

A devious imposter is "spoofing" Microsoft and attempting to deceive you
into installing a malicious VIRUS in your computer! Delete the VIRUS
laden message immediately!

Microsoft never sends file attachments with email messages!

Please take a moment to read the following articles:

Information on Bogus Microsoft Security Bulletin E-mails
http://www.microsoft.com/technet/treeview/default.asp?url=3D/technet/secu=
rity/news/patch_hoax.asp

How to Tell If a Microsoft Security-Related Message Is Genuine
http://www.microsoft.com/security/antivirus/authenticate_mail.asp


--=20
Nicholas

-------------------------------------------------------------------------=
--------------------

"Malvern" > wrote in message:
...

| They're getting around the update notification now that most of us =
have
| figured it out. I got a message from MS purporting to be an =
undeliverable
| mail notice. Antivirus caught it and (or but) I would have dumped it =
anyway
| as I *don't* get this from MS; my ISP sends such notices.
|=20
| Another one is that Microsoft is not the only "sender" in the From =
column.
| Again caught but would have been deleted.
|=20
| Malv
|=20
|

[Max]

I've been suddenly getting about 100 messages a day on security updates,
botched emails from virus senders. Coincidently, this started happening the
same day I signed up for Micrososft's security update newsletter.

-M


"Malvern" > wrote in message
...
> They're getting around the update notification now that most of us have
> figured it out. I got a message from MS purporting to be an undeliverable
> mail notice. Antivirus caught it and (or but) I would have dumped it
anyway
> as I *don't* get this from MS; my ISP sends such notices.
>
> Another one is that Microsoft is not the only "sender" in the From column.
> Again caught but would have been deleted.
>
> Malv
>
>
>

[Malvern]

How well I know this. I posted as I did to save space. I've sent out the
same advice many posts ago. Ever hear of what "assume" equals when broken
up ? Has to do with a donkey. Guess I made myself one :-/

Malv

"Nicholas" > wrote in message
...
You did not receive an update notification from Microsoft. You
received a virus-laden email message from a devious imposter!

A devious imposter is "spoofing" Microsoft and attempting to deceive you
into installing a malicious VIRUS in your computer! Delete the VIRUS
laden message immediately!

Microsoft never sends file attachments with email messages!

Please take a moment to read the following articles:

Information on Bogus Microsoft Security Bulletin E-mails
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
news/patch_hoax.asp

How to Tell If a Microsoft Security-Related Message Is Genuine
http://www.microsoft.com/security/antivirus/authenticate_mail.asp


--
Nicholas

----------------------------------------------------------------------------
-----------------

"Malvern" > wrote in message:
...

| They're getting around the update notification now that most of us have
| figured it out. I got a message from MS purporting to be an undeliverable
| mail notice. Antivirus caught it and (or but) I would have dumped it
anyway
| as I *don't* get this from MS; my ISP sends such notices.
|
| Another one is that Microsoft is not the only "sender" in the From column.
| Again caught but would have been deleted.
|
| Malv
|
|

[CWatters]

Only 100. I got 1400 yesterday and counting today

--
Delete BOX to get my real email address
"Max" > wrote in message
.. .
> I've been suddenly getting about 100 messages a day on security updates,
> botched emails from virus senders. Coincidently, this started happening
the
> same day I signed up for Micrososft's security update newsletter.
>
> -M
>
>
> "Malvern" > wrote in message
> ...
> > They're getting around the update notification now that most of us have
> > figured it out. I got a message from MS purporting to be an
undeliverable
> > mail notice. Antivirus caught it and (or but) I would have dumped it
> anyway
> > as I *don't* get this from MS; my ISP sends such notices.
> >
> > Another one is that Microsoft is not the only "sender" in the From
column.
> > Again caught but would have been deleted.
> >
> > Malv
> >
> >
> >
>
>

[Sharon F]

On 20 Sep 2003 13:31:05 GMT, Malvern wrote:

> How well I know this. I posted as I did to save space. I've sent out the
> same advice many posts ago. Ever hear of what "assume" equals when broken
> up ? Has to do with a donkey. Guess I made myself one :-/

No you did not do that. You posted a valid warning about another email
guise (returned email) that the virus is attached to. Considering the
amount of email volume this worm is generating, I don't think an extra
warning (or two or three!) is out of place. Thanks for caring and for
posting this.

--
Sharon F
MS-MVP - Windows XP Shell/User

[Malvern]

Read Sharon's reply to my second post above, the reply to Nicholas. I think
your information should go out as an original post. As she said, all
information is valuable here.

Malv

"Max" > wrote in message
.. .
> I've been suddenly getting about 100 messages a day on security updates,
> botched emails from virus senders. Coincidently, this started happening
the
> same day I signed up for Micrososft's security update newsletter.
>
> -M
>
>
> "Malvern" > wrote in message
> ...
> > They're getting around the update notification now that most of us have
> > figured it out. I got a message from MS purporting to be an
undeliverable
> > mail notice. Antivirus caught it and (or but) I would have dumped it
> anyway
> > as I *don't* get this from MS; my ISP sends such notices.
> >
> > Another one is that Microsoft is not the only "sender" in the From
column.
> > Again caught but would have been deleted.
> >
> > Malv
> >
> >
> >
>
>

[W.Madison]

"Sharon F" > wrote in message
...
> On 20 Sep 2003 13:31:05 GMT, Malvern wrote:
>
> > How well I know this. I posted as I did to save space. I've sent out
the
> > same advice many posts ago. Ever hear of what "assume" equals when
broken
> > up ? Has to do with a donkey. Guess I made myself one :-/
>
> No you did not do that. You posted a valid warning about another email
> guise (returned email) that the virus is attached to. Considering the
> amount of email volume this worm is generating, I don't think an extra
> warning (or two or three!) is out of place. Thanks for caring and for
> posting this.
>
> --
> Sharon F
> MS-MVP - Windows XP Shell/User

If I could just find a way to STOP them, I have tried message rules, but
when you make one rule the subject or sender changes and it come through
again. I finally got Mail Washer, but it's a pain to have to run it and then
download the mail. But better than 300 phoney virus laden messages a day.

Wendy

[sli]

W.Madison wrote:
>
> If I could just find a way to STOP them, I have tried message rules,
> but when you make one rule the subject or sender changes and it come
> through again.
>
Make a rule to block all messages with attachments, and delete the messages
from the server.

[Tom Lake]

> Make a rule to block all messages with attachments, and delete the
messages
> from the server.

delete messages from the server does nothing on my system

Tom Lake

[Dick]

The important thing here is to block all messages with attachments
unless you have another line of defense. The delete messages from the
server just gets rid of the garbage. Personally, I depend greatly on
MailWasher. Gives you a chance to see things BEFORE they are
downloaded to your PC. Of course my ISP does an excellent job of
stopping spam and viruses before even MailWasher sees them. A few
sneak through, however, and that's when MailWasher comes into play.
So far my ISP has not missed a virus.

Dick

On Sun, 21 Sep 2003 00:16:25 -0400, "Tom Lake" >
wrote:

>> Make a rule to block all messages with attachments, and delete the
>messages
>> from the server.
>
>delete messages from the server does nothing on my system
>
>Tom Lake
>

[William B. Lurie]

Folks, I have a dumb question:
These slobs who create and disseminate these viruses....
Exactly what do they get out of this, just the pleasure
of knowing that they have created malice?
W B L
****************************************
"W.Madison" wrote:

> "Sharon F" > wrote in message
> ...
> > On 20 Sep 2003 13:31:05 GMT, Malvern wrote:
> >
> > > How well I know this. I posted as I did to save space. I've sent out
> the
> > > same advice many posts ago. Ever hear of what "assume" equals when
> broken
> > > up ? Has to do with a donkey. Guess I made myself one :-/
> >
> > No you did not do that. You posted a valid warning about another email
> > guise (returned email) that the virus is attached to. Considering the
> > amount of email volume this worm is generating, I don't think an extra
> > warning (or two or three!) is out of place. Thanks for caring and for
> > posting this.
> >
> > --
> > Sharon F
> > MS-MVP - Windows XP Shell/User
>
> If I could just find a way to STOP them, I have tried message rules, but
> when you make one rule the subject or sender changes and it come through
> again. I finally got Mail Washer, but it's a pain to have to run it and then
> download the mail. But better than 300 phoney virus laden messages a day.
>
> Wendy

--

William B. Lurie

[Ken Blake]

In ,
William B. Lurie > typed:

> Folks, I have a dumb question:
> These slobs who create and disseminate these viruses....
> Exactly what do they get out of this, just the pleasure
> of knowing that they have created malice?


Each slob undoubtedly gets his kicks in his own way, but in
general what you surmise is probably true for most of them.

--
Ken Blake
Please reply to the newsgroup

[Max]

That's kinda like asking, "what's the deal with terrorists?" ;)

The thing is, I don't have problems with viruses, because I update my
software regularly, update my virus scanner, and don't run files from people
I don't know anything about. I also backup important data. My company has a
preorganized plan to get back up quickly if there is ever a problem -- hard
drive crash, human error, or even a virus.

So my answer is who cares? If you get a virus, you're dumb. Get over it.

-M


"William B. Lurie" > wrote

> Folks, I have a dumb question:
> These slobs who create and disseminate these viruses....
> Exactly what do they get out of this, just the pleasure
> of knowing that they have created malice?
> W B L
> ****************************************

[Malvern]

"Tom Lake" > wrote in message
...
> > Make a rule to block all messages with attachments, and delete the
> messages
> > from the server.
>
> delete messages from the server does nothing on my system
>
> Tom Lake
>
It worked here. I made new rules using the *not* option for all wanted
senders, then selecting "Delete from server". I got ONE message this AM, a
wanted one. I did this once: Be sure to Apply (two times; second time
should get a notification of successful application), otherwise they won't
go into effect.

Malv

[Malvern]

"William B. Lurie" > wrote in message
...
> Folks, I have a dumb question:
> These slobs who create and disseminate these viruses....
> Exactly what do they get out of this, just the pleasure
> of knowing that they have created malice?
> W B L
> ****************************************
One thing I read on the NG's is that whoever is doing this probably has one
heck of a beef with Microsoft and is attempting to hurt, even close down,
the company. Ever hear of throwing feathers to the wind ? Your reasoning
is also valid, especially if the perpetrators are teenagers (They caught one
who modified Blaster.).

Malv

[Malvern]

"William B. Lurie" > wrote in message
...
> Folks, I have a dumb question:
> These slobs who create and disseminate these viruses....
> Exactly what do they get out of this, just the pleasure
> of knowing that they have created malice?
> W B L
> ****************************************
One thing I read on the NG's is that whoever is doing this probably has one
heck of a beef with Microsoft and is attempting to hurt, even close down,
the company. Ever hear of throwing feathers to the wind ? Your reasoning
is also valid, especially if the perpetrators are teenagers (They caught one
who modified Blaster.).

Malv

[GSV Three Minds in a Can]

Bitstring >, from the wonderful person
William B. Lurie > said
>Folks, I have a dumb question:
>These slobs who create and disseminate these viruses....
>Exactly what do they get out of this, just the pleasure
>of knowing that they have created malice?

It's just electronic vandalism .. what do people get out of smashing
phone booths, or scribbling on walls or tube trains? I guess the answer
is 'attention'.

--
GSV Three Minds in a Can
Outgoing Msgs are Turing Tested,and indistinguishable from human typing.

[Steve]

Could somebody please send me this virus as I'm feeling a little left out
here. Never had a virus before and don't get these bogus emails either.

"Malvern" > wrote in message
...
> They're getting around the update notification now that most of us have
> figured it out. I got a message from MS purporting to be an undeliverable
> mail notice. Antivirus caught it and (or but) I would have dumped it
anyway
> as I *don't* get this from MS; my ISP sends such notices.
>
> Another one is that Microsoft is not the only "sender" in the From column.
> Again caught but would have been deleted.
>
> Malv
>
>

[Ken Blake]

MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Complaints-To:
Lines: 25
Path: kermit!newsfeed-east.nntpserver.com!nntpserver.com!chi1.webusenet. com!sjc70.webusenet.com!news.webusenet.com!sn-xit-02!sn-xit-06!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
Xref: kermit microsoft.public.windowsxp.basics:148185 microsoft.public.windowsxp.general:745842

In ,
Malvern > typed:

> "William B. Lurie" > wrote in message
> ...
>> Folks, I have a dumb question:
>> These slobs who create and disseminate these viruses....
>> Exactly what do they get out of this, just the pleasure
>> of knowing that they have created malice?


> One thing I read on the NG's is that whoever is doing this
probably
> has one heck of a beef with Microsoft and is attempting to
hurt, even
> close down, the company.


Although that's certainly possible, it can only be a guess. Since
nobody knows who did it, nobody can know this for sure.

--
Ken Blake
Please reply to the newsgroup

[AliceW]

Be careful what you wish for!

--
Alice in NJ
www.ourcyberfamily.us
"In prosperity our friends know us; in adversity we know our friends."
John Churton Collins




"Steve" > wrote in message
...
> Could somebody please send me this virus as I'm feeling a little left out
> here. Never had a virus before and don't get these bogus emails either.
>
> "Malvern" > wrote in message
> ...
> > They're getting around the update notification now that most of us have
> > figured it out. I got a message from MS purporting to be an
undeliverable
> > mail notice. Antivirus caught it and (or but) I would have dumped it
> anyway
> > as I *don't* get this from MS; my ISP sends such notices.
> >
> > Another one is that Microsoft is not the only "sender" in the From
column.
> > Again caught but would have been deleted.
> >
> > Malv
> >
> >
>
>

[Jim Macklin]

Since he posted what appears to be a valid email address he
will get some, I only get them on one account that I use for
"public" purposes.

Nice thing about the free Hotmail, after a dozen 144 KB
viruses the account is full.

I'm getting about 1 per hour now.


"AliceW" > wrote in message
...
| Be careful what you wish for!
|
| --
| Alice in NJ
| www.ourcyberfamily.us
| "In prosperity our friends know us; in adversity we know
our friends."
| John Churton Collins
|
|
|
|
| "Steve" > wrote in message
| ...
| > Could somebody please send me this virus as I'm feeling
a little left out
| > here. Never had a virus before and don't get these bogus
emails either.
| >
| > "Malvern" > wrote in message
| > ...
| > > They're getting around the update notification now
that most of us have
| > > figured it out. I got a message from MS purporting to
be an
| undeliverable
| > > mail notice. Antivirus caught it and (or but) I would
have dumped it
| > anyway
| > > as I *don't* get this from MS; my ISP sends such
notices.
| > >
| > > Another one is that Microsoft is not the only "sender"
in the From
| column.
| > > Again caught but would have been deleted.
| > >
| > > Malv
| > >
| > >
| >
| >
|
|

[Gary P]

"William B. Lurie" > wrote in message
...
> Folks, I have a dumb question:
> These slobs who create and disseminate these viruses....
> Exactly what do they get out of this, just the pleasure
> of knowing that they have created malice?

It makes a nobody feel like a somebody.

[Steve]

Ah, see, it isn't my email address. This is why people get viruses via
email. They give out their address like there's no tomorrow and wonder why
they get bogus emails.

"Jim Macklin" > wrote in message
...
> Since he posted what appears to be a valid email address he
> will get some, I only get them on one account that I use for
> "public" purposes.
>
> Nice thing about the free Hotmail, after a dozen 144 KB
> viruses the account is full.
>
> I'm getting about 1 per hour now.
>
>
> "AliceW" > wrote in message
> ...
> | Be careful what you wish for!
> |
> | --
> | Alice in NJ
> | www.ourcyberfamily.us
> | "In prosperity our friends know us; in adversity we know
> our friends."
> | John Churton Collins
> |
> |
> |
> |
> | "Steve" > wrote in message
> | ...
> | > Could somebody please send me this virus as I'm feeling
> a little left out
> | > here. Never had a virus before and don't get these bogus
> emails either.
> | >
> | > "Malvern" > wrote in message
> | > ...
> | > > They're getting around the update notification now
> that most of us have
> | > > figured it out. I got a message from MS purporting to
> be an
> | undeliverable
> | > > mail notice. Antivirus caught it and (or but) I would
> have dumped it
> | > anyway
> | > > as I *don't* get this from MS; my ISP sends such
> notices.
> | > >
> | > > Another one is that Microsoft is not the only "sender"
> in the From
> | column.
> | > > Again caught but would have been deleted.
> | > >
> | > > Malv
> | > >
> | > >
> | >
> | >
> |
> |
>
>

[jvaqbjf_kc_sna]

Jim Macklin wrote:

> Since he posted what appears to be a valid email address he
> will get some, I only get them on one account that I use for
> "public" purposes.
>
> Nice thing about the free Hotmail, after a dozen 144 KB
> viruses the account is full.
>
> I'm getting about 1 per hour now.

Hence I started doing what I call drastic measures.

I have been getting around 120 to 200 PER DAY at my real, other email address.
NEVER again.. will I use a real email address to post.


--

/`\\\
( @ @ )
*-------ooO---(_)---Ooo---------*
/The HEADER ADDRESS is SPAMBLOCKED\
/ ROT-13 BELOW to email me: \
/ \
\_____________________________________/

[Malvern]

Long berfore the current problems started, I started treating my email
address as I do my snail mail address. It goes to only those it absolutely
has to. It has never appeared on any newsgroup since 1997; back then, the
privacy issues started to surface. I am taking further steps which I may
post later, once I get it written out correctly.

Malv

"jvaqbjf_kc_sna" > wrote in message
...
> Jim Macklin wrote:
>
> > Since he posted what appears to be a valid email address he
> > will get some, I only get them on one account that I use for
> > "public" purposes.
> >
> > Nice thing about the free Hotmail, after a dozen 144 KB
> > viruses the account is full.
> >
> > I'm getting about 1 per hour now.
>
> Hence I started doing what I call drastic measures.
>
> I have been getting around 120 to 200 PER DAY at my real, other email
address.
> NEVER again.. will I use a real email address to post.
>
>
> --
>
> /`\\\
> ( @ @ )
> *-------ooO---(_)---Ooo---------*
> /The HEADER ADDRESS is SPAMBLOCKED\
> / ROT-13 BELOW to email me: \
> / \
> \_____________________________________/
>
>