---------- Forwarded message ----------
Date: Tue, 16 Mar 2004 14:37:45 -0800
From: James 'Ric' Doike-Foreman <[log in to unmask]>
To: [log in to unmask], [log in to unmask]
Subject: FW: New trojan linked in email 'from' microsoft
New Virus out. See below for more information. Note that Microsoft does not
send emails informing users of updates.
Ric
-----Original Message-----
From: [log in to unmask]
[mailto:[log in to unmask]] On Behalf Of
[log in to unmask]
Sent: Tuesday, March 16, 2004 2:19 PM
To: Distributed computing support
Subject: New trojan linked in email 'from' microsoft
A new variant of the Spy-Idwi virus is making the rounds and has been
received on the UW campus today, March 16th. The message will tempt many
people to follow the link which will download a trojan. The payload includes
a keystroke logger.
Be alert for Spy-Idwi. For more info, see
http://vil.nai.com/vil/content/v_101101.htmhttp://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101101
The email message looks something like this
From: (some username)@microsoft.com
Subject: MS Security
Body:
Welcome to Windows Update!
There are 10 critical updates available....
And includes a URL that looks like it is Microsoft. (The version here has
been neutered for your protection.)
www.microsoft - security - updates.com/
We plan to make connections to that URL fail for folks using UW DNS servers.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
--David Wall Computing & Communications...Client Services 206.543.8491
Univ. of Washington Box 352830 [log in to unmask]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To Search in the Gambia-L archives, go to: http://maelstrom.stjohns.edu/CGI/wa.exe?S1=gambia-l
To contact the List Management, please send an e-mail to:
[log in to unmask]
To unsubscribe/subscribe or view archives of postings, go to the Gambia-L Web interface
at: http://maelstrom.stjohns.edu/archives/gambia-l.html
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~