---------- Forwarded message ----------
Date: Tue, 16 Mar 2004 14:37:45 -0800
From: James 'Ric' Doike-Foreman <[log in to unmask]>
To: [log in to unmask], [log in to unmask]
Subject: FW: New trojan linked in email 'from' microsoft

New Virus out. See below for more information. Note that Microsoft does not
send emails informing users of updates.

Ric

-----Original Message-----
From: [log in to unmask]
[mailto:[log in to unmask]] On Behalf Of
[log in to unmask]
Sent: Tuesday, March 16, 2004 2:19 PM
To: Distributed computing support
Subject: New trojan linked in email 'from' microsoft


A new variant of the Spy-Idwi virus is making the rounds and has been
received on the UW campus today, March 16th.  The message will tempt many
people to follow the link which will download a trojan. The payload includes
a keystroke logger.

Be alert for Spy-Idwi.  For more info, see
  http://vil.nai.com/vil/content/v_101101.htm
  http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101101

The email message looks something like this

        From:  (some username)@microsoft.com
        Subject: MS Security
        Body:

        Welcome to Windows Update!

        There are 10 critical updates available....

And includes a URL that looks like it is Microsoft.  (The version here has
been neutered for your protection.)
   www.microsoft - security - updates.com/


We plan to make connections to that URL fail for folks using UW DNS servers.

 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

--David Wall    Computing & Communications...Client Services 206.543.8491
                Univ. of Washington Box 352830  [log in to unmask]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To Search in the Gambia-L archives, go to: http://maelstrom.stjohns.edu/CGI/wa.exe?S1=gambia-l
To contact the List Management, please send an e-mail to:
[log in to unmask]

To unsubscribe/subscribe or view archives of postings, go to the Gambia-L Web interface
at: http://maelstrom.stjohns.edu/archives/gambia-l.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~