Clusterheadaches.com Message Board


    
      
        Clusterheadaches.com Message Board
        (http://www.clusterheadaches.com/cgi-bin/yabb/YaBB.cgi)
      

        New Message Board Archives >> 2004 Posts >> Bogus MS email??? non CH
        
(Message started by: alleyoop on Aug 10^th, 2004, 6:01pm)

Title: Bogus MS email??? non CH
Post by alleyoop on Aug 10^th, 2004, 6:01pm

I got this email today. when I tried to follow the link, I got an error message saying, "Website certified by an unknown authority." I refused the certificate, rather than take any chances on the site. When I typed the address into my browser, I got, "We're sorry, but there is no Microsoft.com Web page matching your entry."

How 'bout it puter geeks, is this one of those attempts to plant a worm or trojan in my puter? I'm going to try and paste the email to this post, but until someone who knows more about this than me checks it out, I wouldn't go to the site. And whatever you do, don't click on anything on the page it takes you to.

Here's what I got:

Subject: Microsoft Security Update

-----BEGIN PGP SIGNED MESSAGE-----

MICROSOFT SECURITY UPDATE

August 10, 2004

SECURITY UPDATE SUMMARY FOR AUGUST 2004
Microsoft has released an update for Microsoft Exchange Server
that
addresses newly discovered issues with Outlook Web Access technology.

LEARN MORE
To learn about this update and which software is affected, review
the notice on Microsoft.com:
https://www.microsoft.com/security/bulletins/200408_exchange.mspx

______________________________________________________________________

HOW TO VERIFY THE AUTHENTICITY OF A MICROSOFT SECURITY E-MAIL MESSAGE
Before you take any advice on downloading software or updating
your
computer, make sure you can trust the source. Learn the warning signs
for spotting a fraudulent security bulletin, as well as how to
check the security certificate for any Web site:
https://www.microsoft.com/verifymail/

______________________________________________________________________
_

ABOUT THE MICROSOFT SECURITY UPDATE
The Microsoft Security Update is an e-mail alert service designed
for home users and small businesses that provides information about
Microsoft security updates and virus alerts. Microsoft also uses this
service to make subscribers aware that they might need to take action
to guard against a circulating security threat.

You have received this update because you are a subscriber. If you
would like to unsubscribe, follow the instructions at the bottom
of this page.
______________________________________________________________________
_

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQEVAwUBQRkJHo0ZSRQxA/UrAQHGbAf8DfUoLemSG2ZntpR2/3n4+pDaItkoVQ6/
IP68Vg/BD8vwZiWgu80nfRKZLkcq/R/xrnf/IH5lf1IghY4vwvWPoyf5gPklpzQh
McdUvfce+QT4m37hfcuBv7YCL4ii3UVAPN2nm4UxgRZgF0UmFn2FuTasDm6blRW6
Y6snPL4A+2P9rUgVkEvFOsz4XU1dmqHAxFx4YJtc4uxo5wp1zS2Iuyd71D+cr7cr
Zrg5ypmQGyAlKbl+JGqCz42FjFFUkXY1kEQdz2dOCBUBkfq/96Qbh550/3cOHZEj
ibqdUyBCGX/ISGRABdbaVDPuQh5lA/Xvd9Q6h44AlX/lrkxy6Qdf6w==
=64h7
-----END PGP SIGNATURE-----
To cancel your subscription to this newsletter, reply to this message with the word UNSUBSCRIBE in the Subject line. You can also unsubscribe at the Microsoft.com web site <http://www.microsoft.com/misc/unsubscribe.htm>. You can manage all your Microsoft.com communication preferences at this site.

Legal Information <http://www.microsoft.com/info/legalinfo/default.mspx>.

This newsletter was sent by the Microsoft Corporation
1 Microsoft Way
Redmond, Washington, USA
98052

Title: Re: Bogus MS email??? non CH
Post by Rock_Lobster on Aug 10^th, 2004, 7:37pm

Microsoft will send Security Update emails only if you have signed up for them.

That said, yours appears to be real. An update was released today at the link you listed...
https://www.microsoft.com/security/bulletins/200408_exchange.mspx

Title: Re: Bogus MS email??? non CH
Post by john_d on Aug 10^th, 2004, 7:41pm

Unless there is someone working from inside Microsoft, it's real. All of those web links go to microsoft.com and that belongs to Mr. Bill Gates. If someone could spoof that, the Internet would be screwed.

Title: Re: Bogus MS email??? non CH
Post by alleyoop on Aug 10^th, 2004, 8:21pm

Thanks Guys,

After reading your answers, I went back and tried clicking on the link again. Went right to the page (no error messages). I don't know what happened! I feel like an idiot! I didn't even want to post on this thread again. Just wanted it to fade on down the board! But, I wanted to thank you guys for taking time to check it out.

Thanks!..........................................

.....................................................alley :-[

Title: Re: Bogus MS email??? non CH
Post by Gator on Aug 11^th, 2004, 12:21am

'Tis better to be a happy idiot than an "intelligent" person with a crashed computer.

Gator

Title: Re: Bogus MS email??? non CH
Post by Robert_C. on Aug 11^th, 2004, 8:42am

Quote:

Microsoft will send Security Update emails only if you have signed up for them.

Alley,

You did the right thing by asking first. There's at leats 4 viruses that I knows of that goes around thru e-mails similar to this one. :o

What you should do (and everybody else using Windows), is go to the www.microsoft.com and click on 'Windows Updates' in the left column. Then have it do a scan of your computer for updates and install them.

If you do this on a regular basis, you'll be able to disregard those e-mails. It could have been a virus!

Internet security is part of what I do, and trust me, you can never be to prudent. ;)

Robert

Title: Re: Bogus MS email??? non CH
Post by ExplodingEyeBall on Aug 11^th, 2004, 9:05am

Alley,

There's no need to feel like an idoit.

Being careful like this insures that your systems doesn't get all screwed up.

I wish more people would be as careful as you.

If you ever have a question about this kind of stuff, feel free to send me a message.

I'll NEVER think your an idiot for it.

Pat

Title: Re: Bogus MS email??? non CH
Post by alleyoop on Aug 11^th, 2004, 9:19am

Thanks guys. I feel a little less stupid, now!

................................................alley [smiley=laugh.gif]

Title: Re: Bogus MS email??? non CH
Post by john_d on Aug 11^th, 2004, 11:16am

I work in an office full of computer scientists and we still get nailed by those things on a regular basis (probably more so :P) I would call you smart.

Title: Re: Bogus MS email??? non CH
Post by Gator on Aug 11^th, 2004, 12:21pm

on 08/11/04 at 09:19:39, alleyoop wrote:

Thanks guys. I feel a little less stupid, now!

................................................alley [smiley=laugh.gif]

Huh? Oh, you're still just as stupid. [smiley=laugh.gif] Just Kidding! LOL

Glad it was a false alarm.

Gator

Title: Re: Bogus MS email??? non CH
Post by Opus on Aug 11^th, 2004, 9:19pm

That's funny, MS has a bad security certificate on a security update page. It still could be a fake but a quick look shoes everything points to Microsoft domain. this download doesn't work through windows update and is probably meant for a sysadmin. either way always check your sums.

Opus/Paul