Received MS Critical Upgrade....genuine? or phishing?

L

Lanwench [MVP - Exchange]

you're welcome.
the information you
provided is valuable.

Except that there's no hope of pursuing spam originating from a Japanese
mail server.
db ·´¯`·.¸. said:
<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>


.


Adela said:
Hi db and thanks. Are the headers what you see by clicking on the
email and then on "properties"? Then here they are:

Return-Path: <[email protected]>
Received: from mr06.lnh.mail.rcn.net (EHLO mr06.lnh.mail.rcn.net)
([207.172.157.26])
by ms16.lnh.mail.rcn.net (MOS 3.8.5-GA FastPath queued)
with ESMTP id AQT61407;
Sat, 15 Dec 2007 06:19:17 -0500 (EST)
Received: from mx04.lnh.mail.rcn.net (mx04.lnh.mail.rcn.net
[207.172.157.54]) by mr06.lnh.mail.rcn.net (MOS 3.8.5-GA)
with ESMTP id HNR97028;
Sat, 15 Dec 2007 06:19:16 -0500 (EST)
Received: from viola.ocn.ne.jp (HELO smtp.viola.ocn.ne.jp)
([122.1.235.101]) by mx04.lnh.mail.rcn.net with ESMTP; 15 Dec 2007
06:19:10 -0500 Received: from ltiwfl
(p1078-dng08motoma.hiroshima.ocn.ne.jp
[61.112.137.79]) by smtp.viola.ocn.ne.jp (Postfix) with SMTP
id CB6A22B6D; Sat, 15 Dec 2007 20:17:25 +0900 (JST)
From: "Microsoft Network Security Center" <>
To: "Commercial Client" <[email protected]>
SUBJECT: Network Critical Upgrade
Message-Id: <[email protected]>
Date: Sat, 15 Dec 2007 20:17:25 +0900 (JST)
X-Junkmail-Status: score=10/50, host=mr06.lnh.mail.rcn.net
X-Junkmail-SD-Raw: score=unknown,
refid=str=0001.0A010207.4763B716.00B4,ss=1,vtr=str,vl=3,fgs=16,
ip=122.1.235.101,
so=2007-07-31 18:51:00,
dmn=5.4.3/2007-11-16
X-Antivirus: AVG for E-mail 7.5.503 [269.17.2/1184]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=uchuyxbxzjv

Ohhhhh, my goodness! It came from Japan? Although MS is all over
the world.
o) This is the only thing I could decipher! I'd be very much
interested in
knowing what you discovered, for which, thank you! Adela




" db ´¯`·.. ><)))º>` .. ."
you should post the
headers of that msg
on this thread.



--

db ·´¯`·.¸. , . .·´¯`·..><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>¸.
<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>


.


Please forgive my taking so much space here, but I hope someone
could tell me how to find out if the following is a GENUINE
Microsoft msg, or a phishing? Also, if this isn't the proper
newsgroup, please let me know to which I should send this post. I
clicked on "contact" and there wasn't any contact there.
Thanks so very much!: Adela

I received the following email, supposedly from Microsoft, on Dec.
15, 2007 at 6:19am but I'm afraid to act on it for fear it's a
phishing: FROM: Microsoft Network Security Center
TO: Commercial Client
SUBJECT: Network Critical Upgrade

Microsoft Client

this is the latest version of security update, the "December 2007,
Cumulative Patch" update which resolves all known security
vulnerabilities affecting MS Internet Explorer, MS Outlook and MS
Outlook Express. Install now to protect your computer from these
vulnerabilities, the most serious of which could allow an
malicious user to run code on your computer. This update includes
the functionality of all previously released patches. Then it lists on
a table:

Requirements:
This update applies to:
Recommendations:
How to install:
How to use:

Microsoft Product Support Services and Knowledge Base
articles can be found on the Microsoft Technical Support web site.
For security-related information about Microsoft products, please
visit the Microsoft Security Advisor web site, or Contact Us.

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an
unmonitored e-mail address and we are unable to respond to any
replies. --------------------------------------------------------------------------
The names of the actual companies and products mentioned
herein are the trademarks of their respective owners.

Contact Us | Legal | TRUSTe
©2007 Microsoft Corporation. All rights reserved. Terms of Use
| Privacy Statement | Accessibility
 
A

Adela

thanks Lanwench, but I thought that email communications of any kind are
internaitonal....Not so? Thansk again. Adela

"Lanwench [MVP - Exchange]"
you're welcome.

the information you
provided is valuable.

Except that there's no hope of pursuing spam originating from a Japanese
mail server.
db ·´¯`·.¸. said:
<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>


.


Adela said:
Hi db and thanks. Are the headers what you see by clicking on the
email and then on "properties"? Then here they are:

Return-Path: <[email protected]>
Received: from mr06.lnh.mail.rcn.net (EHLO mr06.lnh.mail.rcn.net)
([207.172.157.26])
by ms16.lnh.mail.rcn.net (MOS 3.8.5-GA FastPath queued)
with ESMTP id AQT61407;
Sat, 15 Dec 2007 06:19:17 -0500 (EST)
Received: from mx04.lnh.mail.rcn.net (mx04.lnh.mail.rcn.net
[207.172.157.54]) by mr06.lnh.mail.rcn.net (MOS 3.8.5-GA)
with ESMTP id HNR97028;
Sat, 15 Dec 2007 06:19:16 -0500 (EST)
Received: from viola.ocn.ne.jp (HELO smtp.viola.ocn.ne.jp)
([122.1.235.101]) by mx04.lnh.mail.rcn.net with ESMTP; 15 Dec 2007
06:19:10 -0500 Received: from ltiwfl
(p1078-dng08motoma.hiroshima.ocn.ne.jp
[61.112.137.79]) by smtp.viola.ocn.ne.jp (Postfix) with SMTP
id CB6A22B6D; Sat, 15 Dec 2007 20:17:25 +0900 (JST)
From: "Microsoft Network Security Center" <>
To: "Commercial Client" <[email protected]>
SUBJECT: Network Critical Upgrade
Message-Id: <[email protected]>
Date: Sat, 15 Dec 2007 20:17:25 +0900 (JST)
X-Junkmail-Status: score=10/50, host=mr06.lnh.mail.rcn.net
X-Junkmail-SD-Raw: score=unknown,
refid=str=0001.0A010207.4763B716.00B4,ss=1,vtr=str,vl=3,fgs=16,
ip=122.1.235.101,
so=2007-07-31 18:51:00,
dmn=5.4.3/2007-11-16
X-Antivirus: AVG for E-mail 7.5.503 [269.17.2/1184]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=uchuyxbxzjv

Ohhhhh, my goodness! It came from Japan? Although MS is all over
the world.
o) This is the only thing I could decipher! I'd be very much
interested in
knowing what you discovered, for which, thank you! Adela




" db ´¯`·.. ><)))º>` .. ."
<databaseben.public.newsgroup.microsoft.com> wrote in message
you should post the
headers of that msg
on this thread.



--

db ·´¯`·.¸. , . .·´¯`·..><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>¸.
<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>


.


Please forgive my taking so much space here, but I hope someone
could tell me how to find out if the following is a GENUINE
Microsoft msg, or a phishing? Also, if this isn't the proper
newsgroup, please let me know to which I should send this post. I
clicked on "contact" and there wasn't any contact there.
Thanks so very much!: Adela

I received the following email, supposedly from Microsoft, on Dec.
15, 2007 at 6:19am but I'm afraid to act on it for fear it's a
phishing: FROM: Microsoft Network Security Center
TO: Commercial Client
SUBJECT: Network Critical Upgrade

Microsoft Client

this is the latest version of security update, the "December 2007,
Cumulative Patch" update which resolves all known security
vulnerabilities affecting MS Internet Explorer, MS Outlook and MS
Outlook Express. Install now to protect your computer from these
vulnerabilities, the most serious of which could allow an
malicious user to run code on your computer. This update includes
the functionality of all previously released patches. Then it lists on
a table:

Requirements:
This update applies to:
Recommendations:
How to install:
How to use:

Microsoft Product Support Services and Knowledge Base
articles can be found on the Microsoft Technical Support web site.
For security-related information about Microsoft products, please
visit the Microsoft Security Advisor web site, or Contact Us.

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an
unmonitored e-mail address and we are unable to respond to any
replies. --------------------------------------------------------------------------
The names of the actual companies and products mentioned
herein are the trademarks of their respective owners.

Contact Us | Legal | TRUSTe
©2007 Microsoft Corporation. All rights reserved. Terms of Use
| Privacy Statement | Accessibility
 
L

Lanwench [MVP - Exchange]

Adela said:
thanks Lanwench, but I thought that email communications of any kind
are internaitonal....Not so? Thansk again. Adela

Nope. And since "spam" laws are not international laws, good luck going
after someone sending you v1agra spam from Korea. Futile.


"Lanwench [MVP - Exchange]"
you're welcome.

the information you
provided is valuable.

Except that there's no hope of pursuing spam originating from a
Japanese mail server.
db ·´¯`·.¸. , . .·´¯`·..><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>¸.
<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>


.


Hi db and thanks. Are the headers what you see by clicking on the
email and then on "properties"? Then here they are:

Return-Path: <[email protected]>
Received: from mr06.lnh.mail.rcn.net (EHLO mr06.lnh.mail.rcn.net)
([207.172.157.26])
by ms16.lnh.mail.rcn.net (MOS 3.8.5-GA FastPath queued)
with ESMTP id AQT61407;
Sat, 15 Dec 2007 06:19:17 -0500 (EST)
Received: from mx04.lnh.mail.rcn.net (mx04.lnh.mail.rcn.net
[207.172.157.54]) by mr06.lnh.mail.rcn.net (MOS 3.8.5-GA)
with ESMTP id HNR97028;
Sat, 15 Dec 2007 06:19:16 -0500 (EST)
Received: from viola.ocn.ne.jp (HELO smtp.viola.ocn.ne.jp)
([122.1.235.101]) by mx04.lnh.mail.rcn.net with ESMTP; 15 Dec 2007
06:19:10 -0500 Received: from ltiwfl
(p1078-dng08motoma.hiroshima.ocn.ne.jp
[61.112.137.79]) by smtp.viola.ocn.ne.jp (Postfix) with SMTP
id CB6A22B6D; Sat, 15 Dec 2007 20:17:25 +0900 (JST)
From: "Microsoft Network Security Center" <>
To: "Commercial Client" <[email protected]>
SUBJECT: Network Critical Upgrade
Message-Id: <[email protected]>
Date: Sat, 15 Dec 2007 20:17:25 +0900 (JST)
X-Junkmail-Status: score=10/50, host=mr06.lnh.mail.rcn.net
X-Junkmail-SD-Raw: score=unknown,
refid=str=0001.0A010207.4763B716.00B4,ss=1,vtr=str,vl=3,fgs=16,
ip=122.1.235.101,
so=2007-07-31 18:51:00,
dmn=5.4.3/2007-11-16
X-Antivirus: AVG for E-mail 7.5.503 [269.17.2/1184]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=uchuyxbxzjv

Ohhhhh, my goodness! It came from Japan? Although MS is all over
the world.
o) This is the only thing I could decipher! I'd be very much
interested in
knowing what you discovered, for which, thank you! Adela




" db ´¯`·.. ><)))º>` .. ."
<databaseben.public.newsgroup.microsoft.com> wrote in message
you should post the
headers of that msg
on this thread.



--

db ·´¯`·.¸. , . .·´¯`·..><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>¸.
<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>


.


Please forgive my taking so much space here, but I hope someone
could tell me how to find out if the following is a GENUINE
Microsoft msg, or a phishing? Also, if this isn't the proper
newsgroup, please let me know to which I should send this post. I
clicked on "contact" and there wasn't any contact there.
Thanks so very much!: Adela

I received the following email, supposedly from Microsoft, on
Dec. 15, 2007 at 6:19am but I'm afraid to act on it for fear
it's a phishing: FROM: Microsoft Network Security Center
TO: Commercial Client
SUBJECT: Network Critical Upgrade

Microsoft Client

this is the latest version of security update, the "December
2007, Cumulative Patch" update which resolves all known security
vulnerabilities affecting MS Internet Explorer, MS Outlook and MS
Outlook Express. Install now to protect your computer from these
vulnerabilities, the most serious of which could allow an
malicious user to run code on your computer. This update includes
the functionality of all previously released patches. Then it
lists on a table:

Requirements:
This update applies to:
Recommendations:
How to install:
How to use:

Microsoft Product Support Services and Knowledge Base
articles can be found on the Microsoft Technical Support web
site. For security-related information about Microsoft products,
please
visit the Microsoft Security Advisor web site, or Contact Us.

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an
unmonitored e-mail address and we are unable to respond to any
replies.
--------------------------------------------------------------------------
The names of the actual companies and products mentioned herein are
the trademarks of their respective owners.

Contact Us | Legal | TRUSTe
©2007 Microsoft Corporation. All rights reserved. Terms of
Use
Privacy Statement | Accessibility
 
T

Terry

Well, you are not the only one who received this email, and I got one in
official looking Microsoft online stationary, along with 3 attachments of
downloads of supposed updates. I checked the other links in the email, to
see if they took me to real Microsoft pages, which it seems to do, but the
Live Hotmail warned against use of the attachments in a comment at the top:

"Windows Live Hotmail has blocked some attachments in this mail because they
appear unsafe."

I had received a similar email months before, but deleted it because it
looked Phishy. I have tried to contact Microsoft directly about it, but I am
sure any correspondence I send will be ignored. I figured I may as well be
safe and research this before deleting it again. I also had my XP searched
for needed updates, but none were found, nor none in the history of updates
showed up with these similar credentials.

If this is a real attempt at phishing, then Microsoft needs to find and stop
this copyright infringement on their name and stationary use.
 
U

Uncle Grumpy

There are a few exceptions to that.
Like most absolutes, Never, Always etc, there are exceptions.

SHOW ME ONE.

Note that I said that unless one was subscribed to security updates
from MS, NO notice from MS would EVER be found in an email message.
 
J

Jupiter Jones [MVP]

They are very rare and I can not show you one.

But the few I have known have been where someone was working with
Microsoft on a specific issue.
The solution was a small file that needed to be run.
In these cases, Microsoft also wanted the person to provide feedback.

But at this point, the receiver of the file knew in advance it was
coming and from who.
In this case the question would not be asked since the file was
expected.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar


On Dec 16, 3:59 pm, "Jupiter Jones [MVP]"
SHOW ME ONE.

Note that I said that unless one was subscribed to security updates
from MS, NO notice from MS would EVER be found in an email message.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top