Forum Home
Press F1
 
Thread ID: 33602 2003-05-20 05:28:00 "Cool screensaver" from "support@microsoft.com" Susan B (19) Press F1
Post ID Timestamp Content User
145950 2003-05-20 05:28:00 Received an email "Cool screensaver" from "support@microsoft.com" with an attachment named screen_doc.pif and the message: All information is in the attached file.

As I expected AVG detects this as a virus, namely I-Worm/Palyh.A and Symantec has information and a removal tool for this virus here (securityresponse.symantec.com).

Just a friendly reminder to those less-experienced computer users to exercise caution when receiving authentic-looking emails from "Microsoft". Microsoft do not send out emails such as this and it is wise to treat them very suspiciously and do not open them or the attachment.
Susan B (19)
145951 2003-05-20 05:40:00 Note: if has different file names & different Virus name
All the info you need is here: securityresponse.symantec.com
stu140103 (137)
145952 2003-05-21 03:21:00 My AVG didn't pick this up as a virus (and it had been updated earlier the same day) but I was suspicious and looked at Symantec's site. I couldn't fine anything about the emails but decided to delete them unopened anyway. There were three - the screensaver one, something about 'your details' and another one - but despite saying all information was in the attached file, there was no paperclip icon to indicate there was an attachment anyway. I figured as I hadn't emailed Microsoft about anything, it was highly likely the emails weren't from them - and I was obviously right! write-click (2248)
145953 2003-05-21 03:26:00 It's all here in the PCWorld News Pages

Microsoft Warning (computerworld.co.nz)
Chris Randal (521)
145954 2003-05-21 03:37:00 I saw that in my junk folder. I remember thinking that it was weird they would use an address like that, and why are Micirosoft telling people about screensavers? Never occurred to me it would be a virus, but never occurred to me to look at it, either.
robo.
robo (205)
145955 2003-05-21 03:49:00 This virus must be doing the rounds - I just received the email from 'microsoft.com'.

Oxie
Oxie (1318)
145956 2003-05-21 03:56:00 Symantec Security Response now rates this virus as:
Category 3, Moderate
stu140103 (137)
145957 2003-05-21 04:00:00 have a read of this it is about this virus (computerworld.co.nz) stu140103 (137)
145958 2003-05-21 04:17:00 Stu

See my post above

Chris :D
Chris Randal (521)
145959 2003-05-21 04:31:00 Whew - for once I did something right. I didnt open this and deleted as it seemed strange to me, and I dont recall giving them my email address.
I had 2 come through. My Nortons antivirus didnt detect it.
Ladybug (3129)
1 2 3