Newsgroup: it.news.net-abuse
Titolo: Invio di virus da parte della Microsoft??


MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="NextPart_000235"
X-UIDL: cc52ea74d32526138226084bdc077efb
This is a multi-part message in MIME format.
You should read this with client which
supported MIME standard.
--NextPart_000235
Content-Type: text/plain;
 charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Microsoft Customer,
     this is the latest version of security update, the
known security vulnerabilities affecting Internet Explorer and
MS Outlook/Express as well as six new vulnerabilities, and is
discussed in Microsoft Security Bulletin MS02-005. Install now to
protect your computer from these vulnerabilities, the most serious of which
could allow an attacker to run code on your computer.
Description of several well-know vulnerabilities:
- "Incorrect MIME Header Can Cause IE to Execute E-mail Attachment"
vulnerability.
If a malicious user sends an affected HTML e-mail or hosts an affected
e-mail on a Web site, and a user opens the e-mail or visits the Web site,
Internet Explorer automatically runs the executable on the user's computer.
- A vulnerability that could allow an unauthorized user to learn the
location
of cached content on your computer. This could enable the unauthorized
user to launch compiled HTML Help (.chm) files that contain shortcuts to
executables, thereby enabling the unauthorized user to run the executables
on your computer.
- A new variant of the "Frame Domain Verification" vulnerability could
enable a
malicious Web site operator to open two browser windows, one in the Web
site's
domain and the other on your local file system, and to pass information from
your computer to the Web site.
- CLSID extension vulnerability. Attachments which end with a CLSID file
extension
do not show the actual full extension of the file when saved and viewed with
Windows Explorer. This allows dangerous file types to look as though they
are simple,
harmless files - such as JPG or WAV files - that do not need to be blocked.
System requirements:
Versions of Windows no earlier than Windows 95.
This update applies to:
Versions of Internet Explorer no earlier than 4.01
Versions of MS Outlook no earlier than 8.00
Versions of MS Outlook Express no earlier than 4.01
How to install
Run attached file q216309.exe
How to use
You don't need to do anything after installing this item.
For more information about these issues, read Microsoft Security Bulletin
MS02-005, or visit link below.
http://www.microsoft.com/windows/ie/downloads/critical/default.asp
If you have some questions about this article contact us at
rdqu...@microsoft.com
Thank you for using Microsoft products.
With friendly greetings,
MS Internet Security Center.
----------------------------------------
----------------------------------------
Microsoft is registered trademark of Microsoft Corporation.
Windows and Outlook are trademarks of Microsoft Corporation.
--NextPart_000235
Content-Type: application/x-msdownload;
 name="q216309.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="q216309.exe"


Spamcop dice
ab...@rr.com
Rob-2

 inviato dalla Microsoft, un msg con allegato il worm gibe.
Scusa, ma se hai letto bene cos'e' e come si diffonde il worm W32.Gibe@mm
(
http://www.symantec.com/avcenter/venc/data/w32....@mm.html
) saprai che
quel worm si diffonde proprio mascherato da update di Microsoft, e non e'
semplice riuscire a determinare chi sia l'utente anche perche' usa un suo
SMTP client interno.
Al massimo puoi determinare il provider, ma IMHO segnalare ad un provider
che un suo utente ha un virus non credo che possa avere alcuna conseguenza
(se oltre agli abusi gli ISP dovessero anche far da balia agli utenti che si
beccano i virus dovrebbero quadruplicare l'abuse team...).
Quindi ti consiglio di lasciar perdere, di tenere il sistema ed il tuo
antivirus sempre aggiornato, e di non lanciare mai allegati sconosciuti.;-)
Ciao!
--
   Alex Palmese
---
Sei anche tu stanco dei messaggi spam? Usa Terminator, il programma
anti-spam italiano FREEWARE! 
http://www.sertel.net/terminator/