GEN: Real virus alert (Fake Microsoft Update)

[Peter Milbury <pmilbury@ERICIR.SYR.EDU>]

Dear Colleagues,

I have recently received e-mail with an attachment with viruses. These
came in the form of fake Microsoft Security Update messages, with an file
attached. (W32.Gibe@mm)

I became suspicious and checked with both Microsoft and Symantec, the
(real) security experts. Their databases of viruses and hoaxes alerted me
to the fact that this is a new virus, which can do medium damage to your
computer.

The Microsoft info sheet is available at:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/gibe.asp
See the following for all current viruses of MS products.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/Default.asp

The Microsoft addresses are rather long, and if they do not connect for
you see the Symantec info sheet, which is available at:
   http://www.symantec.com/avcenter/venc/data/pf/w32.gibe@mm.html

I would strongly urge all LM_NETers to have current antivirus software
installed on their computers, and to make use of the automatic updating
that is built into most of those products.

The message here is to be extremely CAREFUL about installing any files you
receive in the e-mail. When I first started receiving these messages I
went to the Microsoft update site, and followed the normal proceudre for
updates (which is automated.) I did this because I had NEVER received a
Microsoft update in the e-mail.

Finally, today I checked the e-mail full header, and noticed that the
return address was faked. I sent a copy of the message off to both
Microsoft and the Internet service provider of the person sending me the
fake update. I would urge you to do the same.

Glad to have you with us on LM_NET!

Peter Milbury, Co-Moderator of LM_NET      pmilbury@ericir.syr.edu
School Librarian - CA TeleMentor              Chico HS, Chico, CA
Now With 14,000+ Members      See: http://ericir.syr.edu/lm_net/
...............................................................
          See also: Peter Milbury's School Librarian Web Pages
                              http://www.School-Libraries.Net
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=
All postings to LM_NET are protected under copyright law.
To quit LM_NET (or set-reset NOMAIL or DIGEST, etc.) send email to:
listserv@listserv.syr.edu   In the message write EITHER:
1) SIGNOFF LM_NET 2) SET LM_NET NOMAIL or 3) SET LM_NET DIGEST
4) SET LM_NET MAIL  * Please allow for confirmation from Listserv.
For LM_NET Help see: http://ericir.syr.edu/lm_net/
Archives: http://askeric.org/Virtual/Listserv_Archives/LM_NET.shtml
 See also EL-Announce for announcements from library media vendors:
    http://www.mindspring.com/~el-announce/
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=