Critical Updates

[Les]

I received a message with the Subject: Latest Network
Critical Update. Attached was a file
called "Update52.exe" and the recommendation, under
Microsoft's banner to run. The email included links to
the MS website.

When I scanned for updates at MS, I received no critical
updates. Is the .exe file for real or a hoax? I thought
MS never sent updates by email. Is this still the case?
The email address was "Microsoft Corporation Customer
Assistance [[email protected]]" and the
message said:
"Install now to maintain the security of your computer
from these vulnerabilities, the most serious of which
could allow an attacker to run executable on your system.
This update includes the functionality of all previously
released patches."

 

[Kespoosh]

Does it look like it's from Microsoft? Not really. I'm
pretty sure Microsoft names their updates something weird
like ABK8802 because there are so many of them. They've
never sent E-mails before, as far as I know. [gnycbhj-
(e-mail address removed)] is obviously a spoofed address.
Delete the E-mail, don't bother blocking the sender.

 

[Jupiter Jones [MVP]]

Les;
Worse than a hoax, probably a virus.

Microsoft NEVER sends Email with attachments.
http://www.microsoft.com/security/antivirus/authenticate_mail.asp
NEVER open a unexpected attachment.
Verify with sender before opening an attachment.
Delete the mail and the attachment immediately if not verifiable.

Swen Removal:
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.
removal.tool.html

To protect the safety and security of your computer:
Install or enable a firewall IMMEDIATELY, before connecting to the
internet:
http://support.microsoft.com/?kbid=283673

Install ALL Critical Updates IMMEDIATELY.
Start/All Programs/Windows Update

Install an antivirus application
Update it weekly
Run it at least weekly

Also see:
http://www.microsoft.com/security/protect/default.asp
http://www.microsoft.com/security/home/
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/col
umns/security/5min/5min-105.asp
http://www.microsoft.com/security/articles/spam.asp

 

[Greg]

As a matter of fact, I received one of these types of
files the other day and double clicked on it without
thinking.

Up pops a message saying "Install Microsoft Patch? OK
Cancel". I didn't like the look of the message so I
cancelled it, but, from the hard drive activity, it looked
like it installed anyways.

The next thing I know, I'm getting this wierd MAPI error
window, saying that my MAPI settings were corrupted and
would I please re-enter my email account, user name,
password and email server.

Hah hah. Yeah right.

So I wiped my computer and rebuilt it. No biggie, I wipe
it every few months, anyways.

Careful with these patches. Bleh.


Greg

-----Original Message-----
Does it look like it's from Microsoft? Not really. I'm
pretty sure Microsoft names their updates something weird
like ABK8802 because there are so many of them. They've
never sent E-mails before, as far as I know. [gnycbhj-
(e-mail address removed)] is obviously a spoofed address.
Delete the E-mail, don't bother blocking the sender.

-----Original Message-----
I received a message with the Subject: Latest Network
Critical Update. Attached was a file
called "Update52.exe" and the recommendation, under
Microsoft's banner to run. The email included links to
the MS website.

When I scanned for updates at MS, I received no critical
updates. Is the .exe file for real or a hoax? I thought
MS never sent updates by email. Is this still the case?
The email address was "Microsoft Corporation Customer
Assistance [[email protected]]" and the
message said:
"Install now to maintain the security of your computer
from these vulnerabilities, the most serious of which
could allow an attacker to run executable on your system.
This update includes the functionality of all previously
released patches."
.

.

 

[Jupiter Jones [MVP]]

Greg;
The only difference between agreeing or canceling is if you agree, you
see a few typical installation boxes.
If you cancel, it still installs, but the installation process is
hidden.

It was not from Microsoft.
Microsoft NEVER sends Email with attachments.
http://www.microsoft.com/security/antivirus/authenticate_mail.asp
NEVER open a unexpected attachment.
Verify with sender before opening an attachment.
Delete the mail and the attachment immediately if not verifiable.

Swen Removal:
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.
removal.tool.html

To protect the safety and security of your computer:
Install or enable a firewall IMMEDIATELY, before connecting to the
internet:
http://support.microsoft.com/?kbid=283673

Install ALL Critical Updates IMMEDIATELY.
Start/All Programs/Windows Update

Install an antivirus application
Update it weekly
Run it at least weekly

Also see:
http://www.microsoft.com/security/protect/default.asp
http://www.microsoft.com/security/home/
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/col
umns/security/5min/5min-105.asp
http://www.microsoft.com/security/articles/spam.asp

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html

As a matter of fact, I received one of these types of
files the other day and double clicked on it without
thinking.

Up pops a message saying "Install Microsoft Patch? OK
Cancel". I didn't like the look of the message so I
cancelled it, but, from the hard drive activity, it looked
like it installed anyways.

The next thing I know, I'm getting this wierd MAPI error
window, saying that my MAPI settings were corrupted and
would I please re-enter my email account, user name,
password and email server.

Hah hah. Yeah right.

So I wiped my computer and rebuilt it. No biggie, I wipe
it every few months, anyways.

Careful with these patches. Bleh.


Greg

-----Original Message-----
Does it look like it's from Microsoft? Not really. I'm
pretty sure Microsoft names their updates something weird
like ABK8802 because there are so many of them. They've
never sent E-mails before, as far as I know. [gnycbhj-
(e-mail address removed)] is obviously a spoofed address.
Delete the E-mail, don't bother blocking the sender.

-----Original Message-----
I received a message with the Subject: Latest Network
Critical Update. Attached was a file
called "Update52.exe" and the recommendation, under
Microsoft's banner to run. The email included links to
the MS website.

When I scanned for updates at MS, I received no critical
updates. Is the .exe file for real or a hoax? I thought
MS never sent updates by email. Is this still the case?
The email address was "Microsoft Corporation Customer
Assistance [[email protected]]" and the
message said:
"Install now to maintain the security of your computer
from these vulnerabilities, the most serious of which
could allow an attacker to run executable on your system.
This update includes the functionality of all previously
released patches."
.

.