Re: email from Microsoft - security patch

From: helper (there)
Date: 09/26/03


Date: Thu, 25 Sep 2003 19:40:12 -0400


DON'T open any attachments.

Always REMEMBER:
"If a BAD GUY can persuade you to run his program on
your computer, its NOT your computer anymore."

Microsoft does NOT send updates as email attachments.

"Authentic security bulletin mailers never provide the
patch itself or a link to the patch; instead, they refer the
reader to the complete version of the bulletin on our
web site, which provides a link to the patch"

http://www.microsoft.com/security/antivirus/authenticate_mail.asp
http://www.microsoft.com/technet/security/policy/swdist.asp
http://www.microsoft.com/technet/security/news/patch_hoax.asp

PLEASE Don't click on any email attachment you don't
know about. Because it will most likely be a VIRUS!!!!!!!
Even if you're all protected don't click on any unknown
email attachments.

Consider using these (free for home use) tools:
http://www.grisoft.com/us/us_dwnl_free.php
http://www.kerio.com/us/kpf_download.html

DON'T open any attachments.

Consider using these settings in Outlook Express:

Tools | Options | Security | Virus Protection

Choose "Restricted Zone"
Enable "Warn me when other applications trying to send mail as me"
Enable "Do not allow attachments to be saved..."

DON'T open any attachments.

If you get infected, follow EXACT instructions from:
http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.tool.html
http://www.f-secure.com/v-descs/swen.shtml#disinf
http://vil.nai.com/vil/stinger/

On Windows XP enable firewall:
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Keep up to date with:
http://windowsupdate.microsoft.com/

DON'T open any attachments.

http://www.microsoft.com/security/home/basics.asp
http://www.microsoft.com/security/home/beyond_basics.asp

DON'T open any attachments.

"Darlene" <> wrote in message news:1e8601c3839e$9a744b50$a001280a@phx.gbl...
I received this email telling me that this is a patch.
When I go to install the patch I get a message that says:
"Unsigned Program Download" and gives me the message
below. Is this a legit software from Microsoft? I have
XP.
================================
This software does not have a certificate, so it might
not be safe to install and run on your computer.
A certificate contains information that a specific
software program is genuine. This ensures that no other
program can assume the identity of the original program.
The software publisher has not obtained a certificate for
this software from a recognized certification authority,
so the authenticity of this software cannot be verified.
Given what you know about this software, its publisher,
and your computer, you must decide whether to proceed
with installing and running this software.

If, given this information, you still do not feel
confident about installing this software, then click No.
==========================================================
This is the email I recieved:
============================================
Microsoft Consumer

this is the latest version of security update,
the "September 2003, Cumulative Patch" update which fixes
all known security vulnerabilities affecting MS Internet
Explorer, MS Outlook and MS Outlook Express. Install now
to help protect your computer from these vulnerabilities,
the most serious of which could allow an attacker to run
code on your computer. This update includes the
functionality of all previously released patches.

 System requirements Windows 95/98/Me/2000/NT/XP
 This update applies to MS Internet Explorer, version
4.01 and later
MS Outlook, version 8.00 and later
MS Outlook Express, version 4.01 and later
 Recommendation Customers should install the patch at the
earliest opportunity.
 How to install Run attached file. Choose Yes on
displayed dialog box.
 How to use You don't need to do anything after
installing this item.

Microsoft Product Support Services and Knowledge Base
articles can be found on the Microsoft Technical Support
web site. For security-related information about
Microsoft products, please visit the Microsoft Security
Advisor web site, or Contact Us.

Thank you for using Microsoft products.

 Contact Us | Legal | TRUSTe
 ©2003 Microsoft Corporation. All rights reserved. Terms
of Use | Privacy Statement | Accessibility



Relevant Pages

  • Re: Critical Alert Update - W32.Slammer
    ... The .net SDK 1.0 sp1 comes with a very basic SQL Server engine for testing ... >> Microsoft SQL Desktop ... >>>cumulative SQL security patch, is completely safe from ... >> may install SQL ...
    (microsoft.public.security)
  • Critical Alert Update - W32.Slammer
    ... It's not clear if SQL Server 2000 SP1/SP2 includes the ... Microsoft SQL Desktop ... and all applications that install ... >most recent cumulative SQL Server security patch, ...
    (microsoft.public.security)
  • Re: Problems installing critical update
    ... this patch (Security Update for Microsoft XML Core Services 4.0 for Service ... the message is still there when I reboot. ... Microsoft Update to require me to install both KB936181 and KB933579. ...
    (microsoft.public.windowsupdate)
  • Re: Microsoft notice on W32.Slammer
    ... >PSS Security Response Team Alert - New Worm: ... >1434 utilizing a vulnerability that was patched in Microsoft Security ... > Microsoft, however, recommends that customers install the most recent ... >cumulative security patch for Microsoft SQL Server 2000 which is Microsoft ...
    (microsoft.public.sqlserver.security)
  • Re: email from Microsoft - security patch
    ... Microsoft does NOT send updates as email attachments. ... patch itself or a link to the patch; ... When I go to install the patch I get a message that says: ...
    (microsoft.public.security)

Quantcast