[FARC] Just in Time for Halloween - Another Windows Worm

[Kirk Talbott]

QSL

73
KB3ONM
Kirk

--------------------------------------------------
From: "Bob Moroney" <windbrkr at erols.com>
Sent: Monday, October 27, 2008 4:03 PM
To: "Frederick, Maryland ARC" <farc at mailman.qth.net>
Subject: Re: [FARC] Just in Time for Halloween - Another Windows Worm

> Kirk,
> Yes, the KB958644 is the MS patch for the worm and variants that have 
> been observed recently.  Your anti virus program may also be looking for 
> signs of the worm, but apparently MS had to plug the hole that the worm 
> exploited to prevent an infection.  Thus the patch. 
> 
> I'm not sure what Scott was referring to, although there are plenty of 
> hoaxes out there, as a visit to snopes.com will confirm, if you look 
> under the "Computer" listing.  There was a phishing hoax a few years 
> back that looked like an official Microsoft email that sucked some folks 
> in, similar to the ones you probably get every day from various banks 
> and credit unions. 
> 
> 73, Bob K9CMR
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Kirk Talbott wrote:
>> Couple of questions Bob.   Does the KB958644 patch address the worm 
>> alert you were talking about and if not is this worm a hoax as Scott 
>> suggested?
>>
>> 73
>> KB3ONM
>> Kirk
>>
>> --------------------------------------------------
>> From: "Bob Moroney" <windbrkr at erols.com>
>> Sent: Monday, October 27, 2008 3:38 PM
>> To: <mcfadyenusa at yahoo.com>; "Frederick, Maryland ARC" 
>> <farc at mailman.qth.net>
>> Subject: Re: [FARC] Just in Time for Halloween - Another Windows Worm
>>
>>> I can see how the links could have been misleading.  I didn't think 
>>> to clean them up before sending the list out.
>>> But the "windowssecrets.com" site is fine.  All they're doing is 
>>> passing you through to the MS site, possibly getting some "click" 
>>> points along the way that they can show their advertisers.
>>>
>>> You do have to watch where you'll be ending up when you click on a 
>>> link, but those were straightforward, just going via the Windows 
>>> Secrets site. From their point of view, it's probably the safest way 
>>> to go, since the end link remains under their control.
>>>
>>> 73, Bob K9CMR  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>> Iain McFadyen wrote:
>>>> I think you have just hit the home run here:
>>>>
>>>> KB958644 is indeed valid, as long as you download it from 
>>>> microsoft.com, NOT the "windowssecrets.com" website listed in the 
>>>> original email.
>>>>
>>>> Iain    KI4HLV/6Y5   Kingston, Jamaica.
>>>>
>>>>
>>>> --- On Sat, 10/25/08, Kirk Talbott <kirktal7237 at msn.com> wrote:
>>>>
>>>>
>>>>> Info for Windows Vista Security Update KB958644
>>>>>
>>>>> http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
>>>>>
>>>>> 73
>>>>> KB3ONM 
> _______________________________________________
> FARC mailing list
> FARC at mailman.qth.net
> http://mailman.qth.net/mailman/listinfo/farc
>