I am in receipt of an e-mail from "Jason Willis"
<[EMAIL PROTECTED]> with the subject line "See the correction
patch which came from M$ corporation". A file "q148548.exe" is attached.
This message was sent to a large number of addresses. The nature of
the addresses indicates they were gleaned from Usenet newsgroups.
The message says this file incorporates several security patches for
vulnerabilities in various flavors of Windows, and should be installed
ASAP.
I have not installed it, and I don't intend to.
First off, the use of "M$" to refer to Microsoft is suspicious.
I did some checking on the Windows downloads pages. The latest
security update for Windows 2000 is September 2002; for Windows NT,
in 2001. Also, a search for "q148548.exe" turned up nothing.
Jason's message says the file is a "February 2003 cumulative patch".
I think it's a fairly safe bet that we have something malicious here.
Chris
_______________________________________________
ERPS-list mailing list
[EMAIL PROTECTED]
http://lists.erps.org/mailman/listinfo/erps-list
