New virus disguised as Microsoft patch?

["David Gillett" <gillettdavid () fhda edu>]

  No, this isn't the crude "500,000 already infected!"
garbage.  This is an extremely polished and convincing 
looking html email which claims to be a "September 2003, 
Cumulative Patch" and includes an attached "patch8678.exe".

  I've got four of these overnight, from broadband users
as far away from Microsoft as Greece.  Each is followed by 
an odd little NDR, presumably reporting failed delivery of
a delivery confirmation message.

David Gillett



---------------------------------------------------------------------------
----------------------------------------------------------------------------