microsoft update E mails

  • Thread starter Thread starter wes
  • Start date Start date
W

wes

Today, I have received about 5 E-mails with the Microscope logo and an
attachment for the security update. Is this a fake? I didn't think that
Microsoft E-mailed updates this way. If it is a fake, what can be done about
it if anything? So far, I just delete them.
 
In
wes said:
Today, I have received about 5 E-mails with the Microscope logo and an
attachment for the security update. Is this a fake? I didn't think
that Microsoft E-mailed updates this way.
Click to expand...


You are correct. Microsoft *never* sends patches via E-mail. The
messages are fakes, and the attachments they contain almost
certainly contain viruses. These fakes have been widespread
recently.

If it is a fake, what can
be done about it if anything? So far, I just delete them.
Click to expand...


Unfortunately there's nothing you can do to stop it. Just delete
the messages.
 
good for you, they are viruses.

MS has a warning on support page.


| Today, I have received about 5 E-mails with the Microscope
logo and an
| attachment for the security update. Is this a fake? I
didn't think that
| Microsoft E-mailed updates this way. If it is a fake, what
can be done about
| it if anything? So far, I just delete them.
|
|
 
Thanks all. They are still coming fast and furiously. I will start
automatically deleting them.
 
Jim said:
good for you, they are viruses.

MS has a warning on support page.

| Today, I have received about 5 E-mails with the Microscope
logo and an
| attachment for the security update. Is this a fake? I
didn't think that
| Microsoft E-mailed updates this way. If it is a fake, what
can be done about
| it if anything? So far, I just delete them.
|
|
Click to expand...

I have had about 30 of them so far today; also deleted all!!!
 
PSS Security Response Team Alert - New E-Mail Worm: W32/Swen@MM

SEVERITY: MODERATE
DATE: September 18, 2003
PRODUCTS AFFECTED: Microsoft Outlook, Microsoft Outlook Express, and
Web-based e-mail

**********************************************************************

WHAT IS IT?
W32/Swen@MM spreads via e-mail and network shares. The Microsoft
Product Support Services Security Team is issuing this alert to advise
customers to be on the alert for this virus as it spreads in the wild.
Customers are advised to review the information and take the appropriate
action for their environments.

IMPACT OF ATTACK: Mass Mailing, disabling processes related to security
software such as antivirus and firewall software

TECHNICAL DETAILS:
For additional details on this worm from anti-virus software vendors
participating in the Microsoft Virus Information Alliance (VIA) please
visit the following links:

Network Associates:

http://vil.nai.com/vil/content/v_100662.htm

Trend Micro:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SWE
N.A

Symantec

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
ml

Computer Associates:

http://www3.ca.com/virusinfo/virus.aspx?ID=36939

For more information on Microsoft's Virus Information Alliance please
visit this link: http://www.microsoft.com/technet/security/virus/via.asp


Please contact your Antivirus Vendor for additional details on this
virus.


PREVENTION:

1. This worm is exploiting a previously patched vulnerability. The
vulnerability exploited is related to the following Microsoft Security
Bulletin:
http://www.microsoft.com/technet/security/bulletin/ms01-020.asp

As always, customers are advised to install the latest security patch
for Internet Explorer. Information on the latest cumulative security
patch for
Internet Explorer can be found here:
http://www.microsoft.com/technet/security/bulletin/MS03-032.asp

2. Outlook 2000 post SP2 and Outlook XP SP1 include the most recent
updates to improve the security in Outlook and other Office programs.
This includes the functionality to block potentially harmful attachment
types. If you are running either of these versions, they will (by
default) block the attachment, and you will be unable to open it.

To ensure you are using the latest version of Office click here:
http://office.microsoft.com/ProductUpdates/default.aspx

By default, Outlook 2000 pre SR1 and Outlook 98 did not include this
functionality, but it can be obtained by installing the Outlook E-mail
Security Update. More information about the Outlook E-mail Security
Update can be found here:

http://office.microsoft.com/Downloads/2000/Out2ksec.aspx

Outlook Express 6 can be configured to block access to
potentially-damaging attachments. Information about how to configure
this can be found here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q291387

Outlook Express all other versions: Previous versions of Outlook Express
do not contain attachment-blocking functionality. Please exercise
extreme caution when opening unsolicited e-mail messages with
attachments.

Web-based e-mail programs: Use of a program-level firewall can protect
you from being infected with this virus through Web-based e-mail
programs.

RECOVERY:
If your computer has been infected with this virus, please contact your
preferred antivirus vendor or Microsoft Product Support Services for
assistance with removing it.

TECHNET SECURITY LINK:
http://www.microsoft.com/technet/security/virus/alerts/swen.asp

As always please make sure to use the latest Anti-Virus detection from
your Anti-Virus vendor to detect new viruses and their variants.

If you have any questions regarding this alert please contact your
Microsoft representative or 1-866-727-2338 (1-866-PCSafety) within the
US, outside of the US please contact your local Microsoft Subsidiary.
Support for virus related issues can also be obtained from the Microsoft
Virus Support Newsgroup which can be located by clicking on the
following link
news://msnews.microsoft.com/microsoft.public.security.virus.

PSS Security Response Team

--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -
 
Greetings --

What you received is either a very common malicious hoax or the
output of a computer infected by one of several wide-spread, mass
emailing worms. The most widely-known are:

W32.Gibe_mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Dumaru_mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Swen.A_mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Microsoft never has, does not currently, and never will email
unsolicited security patches. At the most, if, and only if, you
subscribe to their security notification newsletter, they will send
you an email informing you that a new patch is available for
downloading.

Microsoft Policies on Software Distribution
http://www.microsoft.com/technet/treeview/?url=/technet/security/policy/swdist.asp

Information on Bogus Microsoft Security Bulletin Emails
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/patch_hoax.asp

Any and all legitimate patches and updates are readily available
at http://windowsupdate.microsoft.com/. (Notice that this is the true
URL, rather than the bogus one that may have been contained in the
email you received.) Any messages that point to any other source(s) or
claim to have the patch attached are bogus.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Wes,
Yes they are fakes and contain Worms/Bugs/Viruses which your fully updated
Anti-Virus program should have identified and notified you of the content.
So far today, I personally have received about twenty-five/thirty.
Gene K
 
Thanks Gene, it looks like I am beginning to get a handle on the rash of
fakes. I have included them in the message rules so they are beginning to
disappear. I have my virus program update daily so it should be up to date.
So far I have just been deleting them as fast as they come. In this session,
I haven't received any yet. Thanks for the reply.
 
I think Hotmail and probably other servers are now stripping
these because I haven't had one this afternoon, but I had
another dozen this morning/overnight.


| Thanks Gene, it looks like I am beginning to get a handle
on the rash of
| fakes. I have included them in the message rules so they
are beginning to
| disappear. I have my virus program update daily so it
should be up to date.
| So far I have just been deleting them as fast as they
come. In this session,
| I haven't received any yet. Thanks for the reply.
|
| | > Wes,
| > Yes they are fakes and contain Worms/Bugs/Viruses which
your fully updated
| > Anti-Virus program should have identified and notified
you of the content.
| > So far today, I personally have received about
twenty-five/thirty.
| > Gene K
| > | > > Today, I have received about 5 E-mails with the
Microscope logo and an
| > > attachment for the security update. Is this a fake? I
didn't think that
| > > Microsoft E-mailed updates this way. If it is a fake,
what can be done
| > about
| > > it if anything? So far, I just delete them.
| > >
| > >
| >
| >
|
|
 
Back
Top