Microsoft Debunks Fake E-mails

[DaveH]

From time to time malicious individuals circulate e-mails that purport to be a Microsoft Security Bulletin or Patch. Some of the emails direct the reader to download an executable file from a web site- while others include an executable file which contains a virus. Customers who receive such an email should delete it, and under no circumstances should they download or run the executable.

Some of the emails claim to be a security patch for Windows or Internet Explorer, others are more generic. There are several clues which indicate that the e-mails aren’t a bona fide security bulletin or patch:

The e-mail isn't signed using the Microsoft Security Response Center’s digital signature.

The Microsoft Security Response Center always signs its bulletins before mailing them, and you can verify the signature using the key we publish at http://www.microsoft.com/technet/security/...etin/notify.asp. If you are ever in doubt about the authenticity of a bulletin mailer you’ve received, consult the web-hosted bulletins on the Microsoft Security web site – the versions there are the authoritative source for information on Microsoft Security Bulletins.

The e-mail contains a patch.

Authentic security bulletin mailers never provide the patch itself or a link to the patch; instead, they refer the reader to the complete version of the bulletin on our web site, which provides a link to the patch. More information on the Microsoft policy on software distribution is available at: http://microsoft.com/technet/security/poli...licy/swdist.asp

The "patch" contained in the bogus bulletin isn't digitally signed by Microsoft.

Microsoft always digitally signs the patches it releases. Always be sure you check the signature of any executable before installing it on your system.

Microsoft urges customers to always verify any mail that claims to be a Microsoft security bulletin by using the steps described above and by always checking the Microsoft Web site for the definitive source of information on Microsoft Security Bulletins:

More Information on viruses and anti-virus software is available at:

How to help protect your computer from viruses:

http://microsoft.com/security/articles/rem...ies_viruses.asp

Antivirus software:

http://microsoft.com/security/articles/antivirus.asp