Groups | Blog | Home
all groups > iis security > september 2003 >

iis security : Install the correction update


Don & Dorothy
9/20/2003 1:17:53 PM
Microsoft Consumer

this is the latest version of security update, the
"September 2003, Cumulative Patch" update which eliminates
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express.
Install now to protect your computer
from these vulnerabilities.
This update includes the functionality =
of all previously released patches.

System requirements: Windows 95/98/Me/2000/NT/XP
This update applies to:
- MS Internet Explorer, version 4.01 and later
- MS Outlook, version 8.00 and later
- MS Outlook Express, version 4.01 and later

Recommendation: Customers should install the patch =
at the earliest opportunity.
How to install: Run attached file. Choose Yes on displayed dialog box.
Jonathan Maltz [MS-MVP]
9/20/2003 8:03:14 PM
Why?

Whoever posted it (it's auto-blocked so I don't know who it was) didn't post
it. The worm posts to newsgroups.

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site :-)
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.


[quoted text, click to view]

Jonathan Maltz [MS-MVP]
9/20/2003 9:23:33 PM
Sure,
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
7. Creates the file, %Windir%\Swen1.dat, where it stores a list of remote
news and mail servers.
....
The worm spreads through email, KaZaA, IRC, mapped drives, and newsgroups.
....

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site :-)
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.


[quoted text, click to view]

Jonathan Maltz [MS-MVP]
9/20/2003 10:26:13 PM
Yeah - not only Microsoft.public ones either, I've seen it all over (and my
brother who doesn't go to Microsoft groups has gotten the emails as well)

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site :-)
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.


[quoted text, click to view]

Paul Lynch
9/21/2003 12:55:01 AM
Hello,

Just in case anyone reading this isn't already aware...... the
previous post is inviting you to download and install a VIRUS onto
your machine. Microsft NEVER send their customers updates and patches
via e-mail.

Read this statement to be absolutely sure :

Microsoft Policies on Software Distribution
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/policy/swdist.asp


Regards,

Paul Lynch
Paul Lynch
9/21/2003 12:57:41 AM
Oh dear.... looks like you might be needing to find a new ISP
shortly...

OrgName: Iowa Network Services, Inc.
OrgID: IOWA
Address: 312 8th Street
City: Des Moines
StateProv: IA
PostalCode: 50309
Country: US

NetRange: 216.51.128.0 - 216.51.255.255
CIDR: 216.51.128.0/17
NetName: NETINS-BLK8
NetHandle: NET-216-51-128-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.NETINS.NET
NameServer: NS2.NETINS.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-02-14
Updated: 2003-05-07

TechHandle: INS-NOC-ARIN
TechName: netINS Network Operations Center
TechPhone: +1-800-205-1110
TechEmail: noc@netins.net

OrgTechHandle: INS-NOC-ARIN
OrgTechName: netINS Network Operations Center
OrgTechPhone: +1-800-205-1110
OrgTechEmail: noc@netins.net


Regards,

Paul Lynch
Paul Lynch
9/21/2003 1:56:56 AM
Posts to newsgroups ? I didn't know that. Can you provide a link
which supports this ?


Regards,

Paul Lynch
Paul Lynch
9/21/2003 2:28:26 AM
Hmmm... I had no idea this one was targeting newsgroups.... sheesh...

Regards,

Paul Lynch
NuT CrAcKeR
9/23/2003 12:10:18 PM
I have blocked more than 1000 of those messages on my mail servers....


[quoted text, click to view]

NuT CrAcKeR
10/6/2003 10:34:58 AM
More than 3000 now....

sheesh. what kind of peeps actually install these things? I thought it would
have died out 2 weeks ago.

NuTs

[quoted text, click to view]

AddThis Social Bookmark Button