Watch out for this b*****d (I'm sure none of you would believe it but thought I should post anyway), oh this is from my Uni's IS department. Note though that this was sent to my department which only has 3 windows machines in it, the rest of Debian / Solaris...
We have had several reports of emails claiming to be from Microsoft.
They invite people to click on a link to what looks like the Windows
update site with the following subject
URGENT MICROSOFT WINDOWS UPDATE PLUG N PLAY PATCH MS05-4791
These contain a link which claims to be the Microsoft update site.
They are fairly obvious forgeries. The full headers indicate that
the message has not come from Microsoft and examination of the
message source or even hovering the cursor over the link indicate
that the site is not the Microsoft update site.
If the link is clicked, a browser opens with a fake windows update
site, complete with Microsoft logos, and invites you to download and
update a file called "plugandplayfix.exe". This is a trojan that is
believed to allow remote control of the PC using IRC.
We would not normally send specific warnings about such emails, but
are doing so in this case because of the publicity surrounding Windows
vulnerabilities which has led to a greater risk that people may misled
by this particular email.
If there is any specific action that is recommended for the current
vulnerabilities IS will send a message via this list indicating what
action should be taken. Fixes are expected via the normal Microsoft
update mechanism which should be applied when available.
If any PCs have run this trojan, they should be disconnected from the
network until they have been cleaned and the trojan code removed.
The helpdesk should be the initial point of contact for any advice
on trojan removal.
Topic: URGENT MICROSOFT WINDOWS UPDATE PLUG N PLAY PATCH MS05-4791 (Read 894 times)