RE: [MLUG] New viruses using encrypted zip

["Ross, Matthew" <EMAIL:PROTECTED>]

We're recieving some to our faculty list "from" our staff list and "from" our administrator account that talk about the email account being deleted. It's fooled a few people already, and may well be going to and from other addresses, it's just the faculty list that we're getting flak about, and I'm not sure how another mailing list sent to that mailing list...

> -----Original Message-----
> From: EMAIL:PROTECTED
> [mailto:EMAIL:PROTECTED]On Behalf Of Russell Horn
> Sent: Wednesday, March 03, 2004 10:43 AM
> To: MLUG Members
> Subject: [MLUG] New viruses using encrypted zip
> 
> 
> Just wondering what folk are doing about this week's spate of 
> new viruses,
> several of which are hiding themselves inside encrypted zip files.
> 
> We have anti virus software on the desktops as well as the 
> mailserver, but
> we have new variants every few hours it seems so there's a 
> constant battle
> to keep definitions up to date before a user opens one of these files.
> 
> For those that haven't seen them, they come through in a 
> message like this:
> 
> 
> Subject: Notify about your e-mail account utilization.
> 
> Dear  user of mlug.com,
> 
> We  warn you  about some attacks on your e-mail account. Your 
>  computer may
> contain viruses,  in  order to  keep your computer and e-mail 
>  account safe,
> please,  follow the instructions.
> 
> Pay attention  on attached file.
> 
> In order to  read the  attach  you have to use the following  
> password:
> 33252.
> 
> Have a good day,
>      The mlug.com team                               
http://www.mlug.com


Now that's not going to fool many folk here, but if they improved their
language we could have a real problem. Remember we saw this last year
http://www.mikeshardware.com/reports/fakemsemailupdate/

If one of these viruses looked that authentic and came with an infected
attachment that we can't scan at the gateway...

Russell.

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members