RE: Worrisome email

Subject: RE: Worrisome email
From: John Posada <JPosada -at- book -dot- com>
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Date: Tue, 15 Apr 2003 15:29:23 -0400


I got that same email. What threw me off was the closing:

---------
With friendly greetings,
Microsoft Internet Security Section
--------

Friendly greetings?

I sent it to my security guy and he said it seemed bogus...MS usually signs
their emails with a signed PGP key. However, mine had the attachment
stripped. The return mail address was "mailto:vkdjtq-ydetmsc -at- mQZkBneRqd -dot- com"

I deleted it.

John Posada
Senior Technical Writer
Barnes&Noble.com
jposada -at- book -dot- com
NY: 212-414-6656
Dayton: 732-438-3372
Although she lives with seven other men, she's not easy.
------ Magic Mirror


-----Original Message-----
From: Sharon Burton-Hardin [mailto:sharon -at- anthrobytes -dot- com]
Sent: Tuesday, April 15, 2003 3:01 PM
To: TECHWR-L
Subject: Worrisome email

I just got an email from what, at first glance, looks to be from the
Microsoft Internet Security Section. It has an attachment they are urging me
to install as a cumulative patch for the month of April.

Looking at the header, this is from Rugosa -at- pandora -dot- be, which would NOT be
from Microsoft at all. Obviously, this is a virus of some sort. And, the
fact that I know that Microsoft does not send these things out this way is
also a clue.

The scary thing is the attachment got thru intact. The latest updates in my
Norton did not strip this out. And I am updated with the latest virus
definitions. I have seen previous ones get cleaned out but not this one.
Scary.

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Purchase RoboHelp X3 in April and receive a $100 mail-in
rebate, plus FREE RoboScreenCapture and WebHelp Merge Module.
Order here: http://www.ehelp.com/techwr-l/


Help celebrate TECHWR-L's 10th Anniversary starting this month!
Check out the contests at http://www.raycomm.com/techwhirl/special/contests/
Happy birthday to you, happy birthday to you, happy birthday TECHWR-L....

---
You are currently subscribed to techwr-l as:
archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot- Visit
http://www.raycomm.com/techwhirl/ for more resources and info.



Previous by Author: RE: Real-World Ethical Questions
Next by Author: RE: Lock numbering
Previous by Thread: Re: Worrisome email
Next by Thread: RE: Worrisome email


What this post helpful? Share it with friends and colleagues:


Sponsored Ads