Don't download patches over email

Author
Aron Schatz
Posted
March 9, 2004
Views
8985
Tags Bugs

Page All:

Page 1
If you are receiving emails supposedly from Microsoft, don't be fooled. A new virus is popping up pretending to be a MyDoom patch. Don't execute files from emails and run an Antivirus scanner! http://www.grisoft.com it's free! I use it.

Quote

Sober.d arrives as e-mail pretending to be from Microsoft with a patch for the MyDoom worm. Microsoft does not e-mail its customers with new patch information. The subject line could be in either German or English, with random letters or words in some variation of "new Microsoft security patch." The body text, also in German or English, reads:
Page 2

Quote

"New MyDoom Virus Variant Detected!
A new variant of the W32.Mydoom (W32.Novarg) worm spread rapidly through the Internet.
Anti-virus vendor Central Command claims that 1 in 45 e-mails contains the MyDoom virus.
The worm also has a backdoor Trojan capability. By default, the Trojan component listens on port 13468.

"Protection:
Please download this digitally signed attachment.
This Update includes the functionality of previously released patches.
+++
+++ One Microsoft Way, Redmond, Washington 98052
+++ Restricted Rights at 48 CFR 52.227-19 com"

Title

Medium Image View Large