**Virus Alert**

[Spirit]

There is another virus alert going around at the moment, got an email about it at work yesterday then today got this in my inbox :

From: MS Security Bulletin
Subject: Latest Network Patch

It also has an attachment with the email.

My Norton blocked it - so be careful out there

Pete

[Brind]

Dunno if this is it but it has been on my homepage for a couple of days, it's a virus disguising itself as a Microsoft security update.

PC users warned of 'Microsoft' virus
Anti-virus companies have issued warnings about a new computer worm circulating via email that claims to be security software from Microsoft, but actually tries to disable any security programs that a user might have on their PC.

The worm, named W32/Givbe-F, but also known as "Swen" or "Gibe," takes advantage of a known hole in Internet Explorer and affects systems that have not installed a patch for that security hole.

The malicious program arrives as an attachment to an email pretending to contain a patch for holes in Internet Explorer, Outlook and Outlook Express. Once it has infected a machine, it mails itself off to addresses located on the victim's computer.

The worm has also spread over Internet relay chat and the KaZaa peer-to-peer network, along with other shared networks. Here, it disguises itself with the sort of filename that has become typical amongst virus writers, implying it has something to do with porn, drugs, hacking and even virus cleanup.

The emails sent out by the worm contain a message randomly constructed from a wide range of realistic-sounding phrases, so there is no fixed text to watch out for.

However, companies such as Microsoft never send out security patches by email, which makes the Gibe worm a dead giveaway. You can find the legitimate Microsoft security patches at the Microsoft Windows Update website.

If an infected attachment is opened, the Gibe worm starts to spread. It covers its tracks by producing just the sort of message you might expect from a security patch, such as "Microsoft Internet Update Pack - This update does not need to be installed on this system", or "This will install Microsoft Security Update. Do you wish to continue?"

In the background, however, Gibe searches your hard disk for email addresses and sends out a copy of itself to each of them. Gibe also attempts to switch off a range of security and anti-virus products, which may open you up to re-infection by older viruses you thought you were safe from.

When it infects a computer it alerts a website that appears to be counting the infections. The number of the counter was already at 760,000 by Thursday afternoon.

Commenting on the new virus, Graham Cluley, a consultant for anti-virus firm Sophos said: "Recent virus outbreaks such as Blaster, Nachi and Sobig-F have raised many users' awareness of computer security. Users may think it is a good idea to install any security patch which is sent to them. Unfortunately, they may be falling straight into the virus writer's hands."

The worm is a growing threat, but is currently classed as a low risk for corporate users, but that warning is upgraded to medium risk for home users. If you have anti-virus software on your PC, the companies are already offering updates that detect and remove the worm.

Sophos offers the following advice to PC users:

1. Never accept security updates which arrive as email attachments. INSERT INTO post VALUES (For that matter, don't blindly follow web links which arrive by email, either, especially if they take you directly to a software download.)

2. Update your anti-virus software regularly so you can identify new worms and viruses effectively and accurately. If you do not have anti-virus software, you are strongly encouraged to invest in some.

3. Emails which sound too strange to be true, or sound too good to be true, or are just too conveniently-timed to be true, probably aren't true. You don't need to be cynical or paranoid to exercise caution!

4. Doing nothing about viruses and worms is not an option. Once infected by a worm like Gibe, your computer will try to send the worm to as many other potential victims as it can. Even if you don't care about your computer, be considerate of the effect that your carelessness might have on other Internet users.

[Nick VR4]

Errr Hello
Were have you two been ;)

I posted this last week

http://www.clubvr4.co.uk/forum/showthread.php?s=&threadid=1339 :rolleyes: :rolleyes: :D

[Spirit]

Nick

Sorry mate !

/bows to Nicks superior knowledge

[Brind]

*Ahem* I knew that. :o

[Nick VR4]

lol

Dont forget guys I deal with this stuff all day nearly every day
@
www.securitymob.com

[Roadrunner]

I've had 34 of these bl00dy messages over the past week! Real pain in the tatties, but dealing with this cr@p is part of my business too, so I didn't open any of them - Microsoft don't send emails with updates ;)

Brian

[Spader]

Damn looks like I'm not the only network security geek here then....that makes me feel better.
I deal with Safecom INSERT INTO post VALUES (NZ) NTL-Secure and BT Ultimus INSERT INTO post VALUES (UK) Firewalls, routers, switches, mail server, proxy servers etc

Pain in the arse especially when family calls you about every "virus alert" email they get