---------- Forwarded message ---------- Date: Tue, 16 Mar 2004 14:37:45 -0800 From: James 'Ric' Doike-Foreman <[log in to unmask]> To: [log in to unmask], [log in to unmask] Subject: FW: New trojan linked in email 'from' microsoft New Virus out. See below for more information. Note that Microsoft does not send emails informing users of updates. Ric -----Original Message----- From: [log in to unmask] [mailto:[log in to unmask]] On Behalf Of [log in to unmask] Sent: Tuesday, March 16, 2004 2:19 PM To: Distributed computing support Subject: New trojan linked in email 'from' microsoft A new variant of the Spy-Idwi virus is making the rounds and has been received on the UW campus today, March 16th. The message will tempt many people to follow the link which will download a trojan. The payload includes a keystroke logger. Be alert for Spy-Idwi. For more info, see http://vil.nai.com/vil/content/v_101101.htm http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101101 The email message looks something like this From: (some username)@microsoft.com Subject: MS Security Body: Welcome to Windows Update! There are 10 critical updates available.... And includes a URL that looks like it is Microsoft. (The version here has been neutered for your protection.) www.microsoft - security - updates.com/ We plan to make connections to that URL fail for folks using UW DNS servers. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - --David Wall Computing & Communications...Client Services 206.543.8491 Univ. of Washington Box 352830 [log in to unmask] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To Search in the Gambia-L archives, go to: http://maelstrom.stjohns.edu/CGI/wa.exe?S1=gambia-l To contact the List Management, please send an e-mail to: [log in to unmask] To unsubscribe/subscribe or view archives of postings, go to the Gambia-L Web interface at: http://maelstrom.stjohns.edu/archives/gambia-l.html ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~