Getting Viruses Disguised as Microsoft Security Updates

[Cam]

For the last few Months I have been receiving more and
more viruses coming via Hotmail that are disguised as
Microsoft Security updates. They're coming into my
Hotmail's "Junk Mail", but the thing about them is they
look very much like a real Microsoft email.

I'm running XP HE and I do have all of my Dial up
connections using the ICF option. I'm up to date on my
NAV as well, but want to know what else can I do to
protect myself?

I'm also getting alot of popups now. I delete all my
junk mail on a reular basis. Is there something that I'm
missing as regards to protection?

 

[Bobby McMillan [MSFT]]

1) Use Automatic Updates
306525 HOW TO: Configure and Use Automatic Updates in Windows XP
http://support.microsoft.com/?id=306525

2) Microsoft does not send out patches via e-mail. To check to see if you
are up to date, visit http://windowsupdate.microsoft.com


This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Touch Base]

Hi "Cam",
Microsoft does not email security patches to you.

If you get an email that appears to come from Microsoft with a security
update attached, do not open the attachment. It is a virus. No matter how
official the email looks, it is a hoax.

See this article:
http://www.microsoft.com/technet/security/news/patch_hoax.asp

"Is there something that I'm missing as regards to protection?"

Here is another layer or two

Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm
http://www.wilderssecurity.net/spywareblaster.html (Free)
SPYWAREBLASTER doesn't scan and clean for spyware - it prevents it from ever
being installed. How? By setting a "kill bit" for the spyware ActiveX
controls, it prevents the installation of any of them from a webpage. You
can run Internet Explorer with Active-X enabled, but you will never even get
a "Yes/No" box popped up, asking you to install a spyware Active-X control
(Internet Explorer will never download or run it!). All other Active-X
controls or plug-ins will work fine. The SpywareBlaster database contains
information on these known spyware Active-X controls. Make sure you run the
Check For Updates feature frequently to get the latest database! (And make
sure you check the new items to protect your system against them!)

A wealth of information on many of the spyware items that SpywareBlaster
protects against can be accessed here: http://www.doxdesk.com/parasite/ This
site can also check any scum/spyware you might have acquired (in some cases
unknowingly) in trips around the internet.
http://www.wilderssecurity.com/bhblaster.html (Free)
BROWSER HIJACK BLASTER protects your system from browser hijackers and
spyware that alters your Internet Explorer settings. Running silently in the
background, Browser Hijack Blaster only springs into action when an attempt
is made. It watches and protects the following items: IE Homepage, IE
Default Page, IE Search Page, BHOs. Whenever one of the above items is
changed, or a BHO is added, you are immediately provided with information on
the item, along with the option to keep the change, or revert to your
previous settings.

POW! popup stopper (Free)
http://www.analogx.com/contents/download/network/pow.htm
POW popup blocker is classed as a 'trainable' popup stopper. When a window
pops up you can decide if you want to see those type of popups and if not
you can have it shutdown immediately and not see it's ugly head again. It is
also reversible in case you change your mind.