Who/What is Microsoft Internet Security Division

[Richard Kriss]

I am getting all kinds of 'junk' mail from

Microsoft Internet Security Division <[email protected]>

saying:
------------------------------------------------------------------
Microsoft Client
this is the latest version of security update, the "September 2003,
Cumulative Patch" update which eliminates all known security vulnerabilities
affecting MS Internet Explorer, MS Outlook and MS Outlook Express. Install
now to continue keeping your computer secure from these vulnerabilities, the
most serious of which could allow an attacker to run code on your computer.
This update includes the functionality of all previously released patches.
------------------------------------------------------------------

My Entourage junk mail filter is catching the messages and I have been
deleting them since they contain .exe files.

Is Microsoft Internet Security Division a valid Microsoft organization?

 

[Richard Kriss]

Now they are coming in from

MS Corporation Technical Support <[email protected]>

Sounds like a virus or worm to me so I am deleting all

 

[Bernard Rey]

Richard Kriss wrote :

I am getting all kinds of 'junk' mail from


saying:

And you were right! This was just another virus-hacking-spam. I think i
received at least ten of them tonight!!!

 

[Richard Kriss]

Went out to dinner and the Ent Junk Mail filter captured 41 new Microsoft
imposter messages and most had .exe files attached.

 

[Richard Kriss]

Heads up if you get anything from

MS Internet Security Center <[email protected]>

They are blasing out SPAM with bad .exe files attached.

 

[Mickey Stevens]

The ones I've been receiving seem to be coming from several addresses,
though all seem to have MS or Microsoft as the From address.

More information on the virus is here:
<http://securityresponse.symantec.com/avcenter/venc/data/[email protected]>

Here's another good read:
<http://www.microsoft.com/security/antivirus/authenticate_mail.asp>

 

[indago]

The ones I've been receiving seem to be coming from several addresses,
though all seem to have MS or Microsoft as the From address.

More information on the virus is here:
<http://securityresponse.symantec.com/avcenter/venc/data/[email protected]>

Here's another good read:
<http://www.microsoft.com/security/antivirus/authenticate_mail.asp>

I use Entourage, and it picks up the mail stored at my ISP -- Earthlink. My
Entourage system, when selected to download mail, started flooding with mail
about the Microsoft stuff, so I turned it off and went directly to the
Earthlink mail storage WebSite and saw that the 10Mb of mail storage was
filled up, and incoming mail was being rejected. I examined what was in the
Inbox and it was mostly all Microsoft stuff. I deleted all of it and exited
the site. About a couple of hours later I went back and saw that the Inbox
was full again, another 10Mb of mail in just 2 hours. I turned on the
SpamBlocker and entered some addresses that would bypass the SpamBlocker so
that only mail from people that I knew would get through. I haven't used
the Entourage for a couple of days now, just go directly to the Earthlink
site to see how the mail storage system is functioning. Now the junk
Microsoft mail goes into a Suspect Mail folder and it still fills up the
10Mb space rather rapidly, but at least I'm not downloading the mail into my
Microsoft Entourage program, just leaving it all there at Earthlink.

With my Email storage place at Earthlink full, an Email is generated back to
the sender notifying that their Email cannot be delivered. With the Suspect
Mail system on, and the Email storage not full, an Email is generated
telling the sender to request that the their Email address be added to my
by-pass list so that I can receive the Email into my Inbox, and not go into
the Suspect Mail storage. I can examine the Email that goes into the
Suspect Mail storage to see what it is and if there is one that I do want to
read I can open it. The problem with all of this is that more Email is
generated back and forth, clogging up the networks, and it is all
self-generating. I don't know what it will take to stop all this, but it
surely is a pain until it is stopped.

 

[Dick, AA5VU]

I also use Entourage and have been flooded with email for two days from
all kinds of Microsoft related patches and nasty .exe attachments. The
only good news is my Entourage junk mail filter put all of the spam in
the Junk mail folder and I selected all and did a mass delete several
times. I have not been able to figure out how to stop the flood of
incoming messages.

FYI, I started a list of the various addresses sending the SPAM and they
are:

Microsoft <[email protected]>
Public Services <[email protected]>
Public Services <[email protected]>
Internet Security Section <[email protected]>
Microsoft Internet Service <[email protected]>
MS Network Security Division <[email protected]>
Microsoft Technical Services <[email protected]>
Microsoft Internet Mail Storage System <[email protected]>
Microsoft Corporation Consumer <[email protected]>
MS Technical Support <zadfyjibflezyel@support_ms.net>
Microsoft Corporation Technical Support <[email protected]>
MS Public Services <[email protected]>
Commercial Customer <plebj_xhfuhm@newsletters_ms.com>
Internet Security Section
MS Security Center <[email protected]>
Microsoft Net Message Service <[email protected]>
MS Program Security Center <[email protected]>
Microsoft Corporation Public Services <[email protected]>
Network Security Center <[email protected]>
MS Internet Security Center <[email protected]>
Security Services <[email protected]>
Microsoft Corporation Public Services <vrdjhdeadjgfbem@technet_microsoft.com>
Microsoft Customer Assistance <[email protected]>
MS Corporation Security Support <[email protected]>
Security Assistance <[email protected]>
MS Corporation Internet Security Division <[email protected]>
Microsoft <[email protected]>
MS Corporation Technical Bulletin <[email protected]>
MS Corporation Public Support <[email protected]>
Microsoft <[email protected]>
Microsoft Program Security Center <[email protected]>
MS Internet Security Division <[email protected]>
MS Corporation Security Division <[email protected]>
MS Corporation Network Security Department
oiihewygj@advisor_microsoft.com
(e-mail address removed)
(e-mail address removed)>
Microsoft Public Support <[email protected]>
MS Program Security Center <[email protected]>
MS Public Support <[email protected]>
MS Corporation Public Assistance <[email protected]>
MS Corporation Security Division <[email protected]>
Microsoft Technical Services <[email protected]>
(e-mail address removed)
(e-mail address removed)
(e-mail address removed)
(e-mail address removed)
(e-mail address removed)

I had over 450 incoming messages with the Outlookd and Outlook Express
PC virus attached and have sent them all to trash. I really do not know
how to stop the flood of messagaes. They have slowed down but now I am
getting all kinds of error messages from ISPs saying there SPAM filter
went off on the .exe attachement I was sending to certain stations. I
have not sent anything and don't really understand what is going on

 

[Mickey Stevens]

We're lucky that Macs don't seem to be affected by this virus. They don't
spread it either. When the virus reproduces and gets sent out, it uses
random addresses. Apparently, when sent from someone else's computer, the
virus used your return address, so you end up getting the bounce or error
message.

More information on the virus is here:
<http://securityresponse.symantec.com/avcenter/venc/data/[email protected]>

Here's another good read:
<http://www.microsoft.com/security/antivirus/authenticate_mail.asp>

I'm guessing that the junk mail filters on a lot of the major servers are
being upgraded and adjusted to prevent the spread of this virus, explaining
the recent apparent slowdown. I'm still getting them though. I have some
rules set up on my computer to further eliminate these messages. Here are a
few of the criteria I'm using:

If From Starts with MS
If From Starts with Microsoft
If Any Recipient Contains Microsoft Customer
If Attachment Name starts with Patch
If Attachment Name starts with Upgrade
If Attachment Name starts with Update
If Attachment Name starts with Installer
If Attachment Name starts with Install
If Attachment Name starts with Pack
If Any Header Contains mxdomain.com
If Message Body Contains I'm sorry I wasn't able to deliver

Create a rule with these criteria, set to execute actions if any criteria
are met. I've got my rule set to move messages meeting these criteria to
the Junk Mail folder so I don't inadvertently delete any good mail.

I also use Entourage and have been flooded with email for two days from
all kinds of Microsoft related patches and nasty .exe attachments. The
only good news is my Entourage junk mail filter put all of the spam in
the Junk mail folder and I selected all and did a mass delete several
times. I have not been able to figure out how to stop the flood of
incoming messages.

FYI, I started a list of the various addresses sending the SPAM and they
are:

Microsoft <[email protected]> [...]

I had over 450 incoming messages with the Outlookd and Outlook Express
PC virus attached and have sent them all to trash. I really do not know
how to stop the flood of messagaes. They have slowed down but now I am
getting all kinds of error messages from ISPs saying there SPAM filter
went off on the .exe attachement I was sending to certain stations. I
have not sent anything and don't really understand what is going on

I use Entourage, and it picks up the mail stored at my ISP -- Earthlink. My
Entourage system, when selected to download mail, started flooding with mail
about the Microsoft stuff, so I turned it off and went directly to the
Earthlink mail storage WebSite and saw that the 10Mb of mail storage was
filled up, and incoming mail was being rejected. I examined what was in the
Inbox and it was mostly all Microsoft stuff. I deleted all of it and exited
the site. About a couple of hours later I went back and saw that the Inbox
was full again, another 10Mb of mail in just 2 hours. I turned on the
SpamBlocker and entered some addresses that would bypass the SpamBlocker so
that only mail from people that I knew would get through. I haven't used
the Entourage for a couple of days now, just go directly to the Earthlink
site to see how the mail storage system is functioning. Now the junk
Microsoft mail goes into a Suspect Mail folder and it still fills up the
10Mb space rather rapidly, but at least I'm not downloading the mail into my
Microsoft Entourage program, just leaving it all there at Earthlink.

With my Email storage place at Earthlink full, an Email is generated back to
the sender notifying that their Email cannot be delivered. With the Suspect
Mail system on, and the Email storage not full, an Email is generated
telling the sender to request that the their Email address be added to my
by-pass list so that I can receive the Email into my Inbox, and not go into
the Suspect Mail storage. I can examine the Email that goes into the
Suspect Mail storage to see what it is and if there is one that I do want to
read I can open it. The problem with all of this is that more Email is
generated back and forth, clogging up the networks, and it is all
self-generating. I don't know what it will take to stop all this, but it
surely is a pain until it is stopped.

 

[indago]

We're lucky that Macs don't seem to be affected by this virus. They don't
spread it either. When the virus reproduces and gets sent out, it uses
random addresses. Apparently, when sent from someone else's computer, the
virus used your return address, so you end up getting the bounce or error
message.

More information on the virus is here:
<http://securityresponse.symantec.com/avcenter/venc/data/[email protected]>

Here's another good read:
<http://www.microsoft.com/security/antivirus/authenticate_mail.asp>

I'm guessing that the junk mail filters on a lot of the major servers are
being upgraded and adjusted to prevent the spread of this virus, explaining
the recent apparent slowdown. I'm still getting them though. I have some
rules set up on my computer to further eliminate these messages. Here are a
few of the criteria I'm using:

If From Starts with MS
If From Starts with Microsoft
If Any Recipient Contains Microsoft Customer
If Attachment Name starts with Patch
If Attachment Name starts with Upgrade
If Attachment Name starts with Update
If Attachment Name starts with Installer
If Attachment Name starts with Install
If Attachment Name starts with Pack
If Any Header Contains mxdomain.com
If Message Body Contains I'm sorry I wasn't able to deliver

Create a rule with these criteria, set to execute actions if any criteria
are met. I've got my rule set to move messages meeting these criteria to
the Junk Mail folder so I don't inadvertently delete any good mail.

I also use Entourage and have been flooded with email for two days from
all kinds of Microsoft related patches and nasty .exe attachments. The
only good news is my Entourage junk mail filter put all of the spam in
the Junk mail folder and I selected all and did a mass delete several
times. I have not been able to figure out how to stop the flood of
incoming messages.

FYI, I started a list of the various addresses sending the SPAM and they
are:

Microsoft <[email protected]> [...]

I had over 450 incoming messages with the Outlookd and Outlook Express
PC virus attached and have sent them all to trash. I really do not know
how to stop the flood of messagaes. They have slowed down but now I am
getting all kinds of error messages from ISPs saying there SPAM filter
went off on the .exe attachement I was sending to certain stations. I
have not sent anything and don't really understand what is going on

I use Entourage, and it picks up the mail stored at my ISP -- Earthlink. My
Entourage system, when selected to download mail, started flooding with mail
about the Microsoft stuff, so I turned it off and went directly to the
Earthlink mail storage WebSite and saw that the 10Mb of mail storage was
filled up, and incoming mail was being rejected. I examined what was in the
Inbox and it was mostly all Microsoft stuff. I deleted all of it and exited
the site. About a couple of hours later I went back and saw that the Inbox
was full again, another 10Mb of mail in just 2 hours. I turned on the
SpamBlocker and entered some addresses that would bypass the SpamBlocker so
that only mail from people that I knew would get through. I haven't used
the Entourage for a couple of days now, just go directly to the Earthlink
site to see how the mail storage system is functioning. Now the junk
Microsoft mail goes into a Suspect Mail folder and it still fills up the
10Mb space rather rapidly, but at least I'm not downloading the mail into my
Microsoft Entourage program, just leaving it all there at Earthlink.

With my Email storage place at Earthlink full, an Email is generated back to
the sender notifying that their Email cannot be delivered. With the Suspect
Mail system on, and the Email storage not full, an Email is generated
telling the sender to request that the their Email address be added to my
by-pass list so that I can receive the Email into my Inbox, and not go into
the Suspect Mail storage. I can examine the Email that goes into the
Suspect Mail storage to see what it is and if there is one that I do want to
read I can open it. The problem with all of this is that more Email is
generated back and forth, clogging up the networks, and it is all
self-generating. I don't know what it will take to stop all this, but it
surely is a pain until it is stopped.

Anyone who is using Entourage, Outlook Express, or Outlook, or any other
such Email program should stop using it and go directly to the Online ISP
mail storage system. There you can examine into the Emails and delete what
you want to before it is downloaded onto your computer.

 

[aRKay]

Anyone who is using Entourage, Outlook Express, or Outlook, or any other
such Email program should stop using it and go directly to the Online ISP
mail storage system. There you can examine into the Emails and delete what
you want to before it is downloaded onto your computer.

Ditto

That is what I had to do after way too many downloads.
--
======================================
Richard (Dick) Kriss Email: (e-mail address removed)
904 Dartmoor Cove Web page: http://www.qsl.net/kd5vu/
Austin, Texas 78746 Phone: 512-327-9566 ======================================
OO

 

[Melba's Jammin']

Anyone who is using Entourage, Outlook Express, or Outlook, or any
other such Email program should stop using it and go directly to the
Online ISP mail storage system. There you can examine into the
Emails and delete what you want to before it is downloaded onto your
computer.

I have set Entourage to only partially download to my machine any
message larger than 100kb; it is faster for me to do that (have them
come to my machine for review) and examine them than to wade through the
Suspect Mail folder on Earthlink's webmail site and delete them 20 at a
time (I'm on a dial-up account) because there have been a few other
messages that have ended up in that folder that do not belong there.
This is starting to wear on my good nature.

 

[indago]

I have set Entourage to only partially download to my machine any
message larger than 100kb; it is faster for me to do that (have them
come to my machine for review) and examine them than to wade through the
Suspect Mail folder on Earthlink's webmail site and delete them 20 at a
time (I'm on a dial-up account) because there have been a few other
messages that have ended up in that folder that do not belong there.
This is starting to wear on my good nature.

In my Suspect Mail folder they are viewed 50 at a time, and there are
usually around 112 in there before the 10Mb red alert is enabled. I can
view them 50 at a time, and select the ones that I want transferred to my
Inbox, and then just delete all the rest with the one button and clean out
the Suspect Mail folder.

But that was then; I have since changed my Email name and now I have to
reconfigure some things. At least I don't get any more spam mail.

 

[Melba's Jammin']

In my Suspect Mail folder they are viewed 50 at a time, and there are
usually around 112 in there before the 10Mb red alert is enabled. I can
view them 50 at a time, and select the ones that I want transferred to my
Inbox, and then just delete all the rest with the one button and clean out
the Suspect Mail folder.

Oy! Duh-ME! (I didn't realize I had choices in the number of messages
displayed at one time. . . . thank you for that!)
-Barb

 

[Mickey Stevens]

Another option would be to enable Online Access for POP accounts (Tools ->
Accounts / Options). That allows one to view the server contents and delete
messages from the server before they're downloaded. However, this won't
allow EarthLink customers to access their Suspect Email folder - only
EarthLink WebMail permits that.