Falsk Microsoft-advarsel udvikler sig til stortrussel

Antivirusselskaberne advarede i sidste uge mod en ny virus, der forklæder sig som en advarsel fra Microsoft. Virussen har allerede formået at inficere 200.000 maskiner. Eksperter frygter, at den vil sprede sig til millioner computere i løbet af denne uge.

Mikael Albrecht, analytiker hos F-Secure, kan dog berolige urolige brugere med, at ormen ikke kommer til at forvolde så stor gene som sidste måneds virusplager.

Virussen har fået kaldenavnet Swen, men findes også med følgende betegnelser: Worm.Swen, W32/Swen.AAmm, W32/Gibe.EAMM, og Gibe.E.

Swen blev opdaget den 18. september. Den har mange lighedspunkter med Gibe-orme og vurderes at være fremstillet af den samme skribent.

Som sagt udgiver ormen sig for at være en sikkerhedsadvarsel fra Microsoft. Der verserer flere af denne type advarsler, som altid bør ignoreres, da Microsoft aldrig udsender sikkerhedsvarsler pr. e-mail.

Sådan ser den ud:

Afsender: "MS Technical Assistance"

Emne: 2 mellemrum

Body: MS User

this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three newly discovered vulnerabilities. Install now to help protect your computer from these vulnerabilities, the most serious of which could allow an attacker to run code on your computer. This update includes the functionality of all previously released patches.

System requirements Windows 95/98/Me/2000/NT/XP
This update applies to MS Internet Explorer, version 4.01 and later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later
Recommendation Customers should install the patch at the earliest opportunity.
How to install Run attached file. Choose Yes on displayed dialog box.
How to use You don't need to do anything after installing this item.

Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact Us.

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies.