Skip to main content

Were you hit by MsBlast

More
20 years 6 months ago #920 by GhostCert
Tfs, I get the same e-mail. It is very annoying. Though I think it was very effective at first. I am sure "Joe computer user" actually thought he was updating his Windows OS with a "security patch."
More
20 years 6 months ago #924 by tfs
Replied by tfs on topic Re: Were you hit by MsBlast
I don't thinks so (at least in my case).

I get the same email - looks like a legitimate Microsoft post of a patch update (which it probably originally was) and about 5 or 6 different address all addressed to someone else. My ISP looked at it and apparently my address is in the BCC field.

The same email will from various places such as:

"Microsoft Corporation Security Center" <birsuwvhpxzhvo@technet.com>

with subject:

: Last Network Security Update

and at the bottom Norton will have a message:

Norton AntiVirus removed the attachment: PACK.exe.
The attachment was infected with the W32.Swen.A@mm virus.

or

"Microsoft Internet Security Section" <mkcvwlhdfzn@support_msdn.com>

subject: Last Network Upgrade

bottom of page:

Norton AntiVirus removed the attachment: qsvd.exe.
The attachment was infected with the W32.Swen.A@mm virus.

or

"MS Customer Support" <jikuwmyor_zdvmymdm@technet.net>

subject: Internet Critical Update

Norton AntiVirus removed the attachment: Q861361.exe.
The attachment was infected with the W32.Swen.A@mm virus.

or I will get bounce back messages such as:

"Administrator" <maildaemon@freemail.com>

subject: Undelivered Message

and the message will be:

**************************************************
This is the qmail program

I'm sorry to have to inform you that I wasn't able to deliver your message to one or more destinations.



Undeliverable mail to uxmwgjsfw@freemail.com
Content-Type: plain/text;
name="Norton AntiVirus Deleted1.txt"
Content-Id: <ttciclstjogaet>


Norton AntiVirus removed the attachment: fpmwv.exe.
The attachment was infected with the W32.Swen.A@mm virus.
****************************************************

I get about 300 Spam messages of which about 40 or more are these 2 types.

Very irritating.

Thanks,

Tom
More
20 years 5 months ago #1651 by Chris
Replied by Chris on topic Re: Were you hit by MsBlast
I've received that same email Tom.

When I first saw it, I thought "wow, this must be a new MS service, notifing users about new patches" and then I came back into reality, realising it was a virus of some sort.

I'm pretty confident it must have fooled a lot of people.

Its been a few weeks now that we haven't recieved any such emails.

Chris Partsenidis.
Founder & Editor-in-Chief
www.Firewall.cx
More
20 years 5 months ago #1663 by tfs
Replied by tfs on topic Re: Were you hit by MsBlast
I am still getting them.

Eudora pretty much filters them out, but they are a hassle. Not much I can do about it, though. At least, not as far as I can figure out.

If I could catch the little ......, I would hang him by his ....

Some people think this is funny. But it takes me a ton of time going through that Eudora filters (both the spam and this junk) to make sure it didn't junk a valid email, which it does about 1% of the time. But that 1%, could be really important.

Thanks,

Tom
Time to create page: 0.145 seconds