[FARC] Just in Time for Halloween - Another Windows Worm

[Bob Moroney]

Kirk,
Yes, the KB958644 is the MS patch for the worm and variants that have 
been observed recently.  Your anti virus program may also be looking for 
signs of the worm, but apparently MS had to plug the hole that the worm 
exploited to prevent an infection.  Thus the patch. 

I'm not sure what Scott was referring to, although there are plenty of 
hoaxes out there, as a visit to snopes.com will confirm, if you look 
under the "Computer" listing.  There was a phishing hoax a few years 
back that looked like an official Microsoft email that sucked some folks 
in, similar to the ones you probably get every day from various banks 
and credit unions. 

73, Bob K9CMR
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Kirk Talbott wrote:
> Couple of questions Bob.   Does the KB958644 patch address the worm 
> alert you were talking about and if not is this worm a hoax as Scott 
> suggested?
>
> 73
> KB3ONM
> Kirk
>
> --------------------------------------------------
> From: "Bob Moroney" <windbrkr at erols.com>
> Sent: Monday, October 27, 2008 3:38 PM
> To: <mcfadyenusa at yahoo.com>; "Frederick, Maryland ARC" 
> <farc at mailman.qth.net>
> Subject: Re: [FARC] Just in Time for Halloween - Another Windows Worm
>
>> I can see how the links could have been misleading.  I didn't think 
>> to clean them up before sending the list out.
>> But the "windowssecrets.com" site is fine.  All they're doing is 
>> passing you through to the MS site, possibly getting some "click" 
>> points along the way that they can show their advertisers.
>>
>> You do have to watch where you'll be ending up when you click on a 
>> link, but those were straightforward, just going via the Windows 
>> Secrets site. From their point of view, it's probably the safest way 
>> to go, since the end link remains under their control.
>>
>> 73, Bob K9CMR  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> Iain McFadyen wrote:
>>> I think you have just hit the home run here:
>>>
>>> KB958644 is indeed valid, as long as you download it from 
>>> microsoft.com, NOT the "windowssecrets.com" website listed in the 
>>> original email.
>>>
>>> Iain    KI4HLV/6Y5   Kingston, Jamaica.
>>>
>>>
>>> --- On Sat, 10/25/08, Kirk Talbott <kirktal7237 at msn.com> wrote:
>>>
>>>
>>>> Info for Windows Vista Security Update KB958644
>>>>
>>>> http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
>>>>
>>>> 73
>>>> KB3ONM