0
wmw999

Microsoft Worm / Virus warning

Recommended Posts

This comes from our virus maven here at work -- thought I'd pass it along:
Quote


ATTENTION: Microsoft e-mail Worm
-----------------------------------------------------------------

If you get a message from support@microsoft.com, and it has an attached file, don't open it.

I know I sound like a broken record, but SoBig/MankX/PalyH, a newly revitalized virus with three different names, is making the rounds. Most people get infected by opening (actually, running) a file attached to an email message. The message claims to be from support@microsoft.com. Of course, it isn't. Microsoft never, ever sends out patches attached to email messages. Never.

Usually the attachment is a PIF file which recent versions of Outlook won't let you directly execute anyway, but some people will manage to bypass the protections in place.

I know that quite a few of you are infected because I'm getting bunches of PalyH messages.

Quick check: right now, look in your Windows folder for a file called msccn32.exe. If you have it, you're infected.

Even if you're not infected and your version of Outlook blocks PIF files, you should get the latest anti-virus update anyway. Most AV software would have been updated in the last day or so to deal with this new nastie.

Normally the infected message has text saying 'all information is in the attached file' in an attempt to lure you into opening the attachment. The attachment name varies but always ends in .pif.

The email subject varies, we've seen 'My Details' 'Cool Screensaver' 'Screensaver' 'Approved (Ref: nnnnn)' 'Movie' and there's doubtless other variations around and coming.

Any email from support@microsoft.com should be deleted immediately.

Even if Microsoft did use that address to send messages in the past you can bet they'll never use it in the future



Wendy W.
There is nothing more dangerous than breaking a basic safety rule and getting away with it. It removes fear of the consequences and builds false confidence. (tbrown)

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

0