Re: [SPAM] Fw: Newest Internet Security Patch

[Peter Ferrie <pferrie () symantec com>]

> This might be helpful to spot out this fake microsoft mail telling you to
download the attachement.
> It does several times that Im receiving it and I guess many users trusts
it's from ms but it is not.
> (attachement removed from this mail), looks like the sender is a
wanadoo.fr host.

It's W32/Swen (see http://pferrie.tripod.com/vb/swen.pdf for a
description).

8^) p.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://www.secunia.com/