Daniel,
Thanks! Couldn't get the link but enough to get I wasn't paranoid :)
Cetin

>Cetin,
>
>It's a worm. See http://www.symantec.com/avcenter/venc/data/w32.gibe@mm.html
>
>>I got an email today from MS but I have real doubts it's really from MS.
>>
>>"Microsoft Customer,
>>
>> this is the latest version of security update, the
>>known security vulnerabilities affecting Internet Explorer and
>>MS Outlook/Express as well as six new vulnerabilities, and is
>>discussed in Microsoft Security Bulletin MS02-005. Install now to
>>protect your computer from these vulnerabilities, the most serious of which
>>could allow an attacker to run code on your computer.
>>...."
>>
>>It has an attachment with name q216309.exe and claims it's for some security update. Why would MS attach and not just say something like 'read details from ... and download to install patch'. Furthermore I searched for q216309 and didn't find anything about it (MSDN lib and MS support KB site).
>>I checked the content in hex editor and how to say - doesn't really seem to be trustable (nothing specific but I just didn't like the strings in it).
>>Some other users also should have got this email. I won't trust this mail unless someone gives a good reason to do so :)
>>Cetin