Got this e-mail the other day warning me that i was sending out virii. Firstly here is the text of the mail.
Obviously this mail won't catch anyone with a bit of computer security sense but it is the type of mail that could cause a minor headache in a company where the users havent been traumatised enought by the IT department. The virus is of course in the zip file that the customer support has kindly attached.Quote:
Mail server report.
Our firewall determined the e-mails containing worm copies are being sent from your computer.
Nowadays it happens from many computers, because this is a new virus type (Network Worms).
Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail addresses
Please install updates for worm elimination and your computer restoring.
Best regards,
Customers support service
One of the things I find interesting is that "they" have changed the presentation slightly. The malicious e-mails are been sent by the computer and not the person. That way it is not the users fault. They explain what the virii are doing and how they are doing it so that it is unnoticable to the end user. Once again it is not the users fault. Haveing said that the user can simply fix the problem by installing the required patch which is kindly supplied. Without having to call the geeks in computer support.
Of course for most anglophones the fact that the mail have a few obivious grammer mistakes would start warning bells ringing for non anglophones the mail would seem correct. It is no worst than a lot of mail I see from non aglophone support sites and it is a few steps up form the usual mail of this type.
Ok this is an old style attempt to infect a computer. Still an old trick with new users works more often than we like.
It also needs the user to install the "patch". We all know there nothing more dangerous than a user being smarter than their tech support.
Nothing really new here but sometimes it is good to be reminded of the basics.
cheers
Muracu.
Ps if any one wants the virus to study it or reverse engineer it let me know and i may attach it.
Also on the topic what tools do you use to study virii?
