Beware - fake email, microsoft update notifications

**THE FOLLOWING MESSAGE I RECEIVED TO MY EMAIL INBOX**

**IF YOU RECEIVE THE SAME MESSAGE, **DO NOT DOWNLOAD IT** untill further checks have been done...................



Dear Microsoft Customer,

Please notice that Microsoft company has recently issued a Security Update for OS Microsoft Windows. The update applies to the following OS versions: Microsoft Windows 98, Microsoft Windows 2000, Microsoft Windows Millenium, Microsoft Windows XP, Microsoft Windows Vista.

Please notice, that present update applies to high-priority updates category. In order to help protect your computer against security threats and performance problems, we strongly recommend you to install this update.

Since public distribution of this Update through the official website http://www.microsoft.com would have result in efficient creation of a malicious software, we made a decision to issue an experimental private version of an update for all Microsoft Windows OS users.

As your computer is set to receive notifications when new updates are available, you have received this notice.

In order to start the update, please follow the step-by-step instruction:
1. Run the file, that you have received along with this message.
2. Carefully follow all the instructions you see on the screen.

If nothing changes after you have run the file, probably in the settings of your OS you have an indication to run all the updates at a background routine. In that case, at this point the upgrade of your OS will be finished.

We apologize for any inconvenience this back order may be causing you.


Thank you,

Steve Lipner
Director of Security Assurance
Microsoft Corp.


-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

QHC3BUMPV910D4BE27W8WRDEMUM0ZASZAWWPHRFDH8NPLVOC35GM8BZV732Y5FR3Y
8JKVF00KQ68L71QTSNWEDDJ8ITLJDAR4F72F2C0GM0TBNF30I52JZ6W1P95YRTZTZ
CJDTVMHAKX7MW0CHA05HJDQR8D3GX8LVI7X2NTH6TT0704RD6C0MO4EWU0P0DR4S1
35XEUO0K5953OZ9PNYQ9D5ADARMP35HXLS86OSI315WZJPT9L8WG49F1EM9SS1MFK
76KNM0KU8V6LQ51IKGQ7X9ZFG5IMMD0JS34==
-----END PGP SIGNATURE-----



there was also an attatched file, NAMED AS - KB320166.exe (33KB)

upon reviewing the email, i believe it may be fake due to the following:

**As your computer is set to receive notifications when new updates are available, you have received this notice.** TO AN EMAIL??? YOU WHAT...

.

WHEN YOUR COMPUTER IS CONFIGUED FOR MICROSOFT UPDATE, YOU DONT GET AN EMAIL TELLING YOU ABOUT THE UPDATE. YOU CAN HAVE UPDATE NOTIFICATION EMAILS (optional)... but check the email address the message came from...

the FAKE message i got was from: [email protected]

but.. the fact is, i only get notifications to a HOTMAIL account, so if this is a real notification, why did i receive it to a YAHOO.CO.UK account????????????????????????????????????????????????????????????????

not possible

if anyone knows if this is a real update, or has experimented with the file attached to the email, let me know how your computer is running and were you give any more info about it... e.g what is the update for...

might i also add that google cant find anything to do with: KB320166.exe

Thats really fake I'm suprised I haven't gotten that. (now I'll probably get since I said I haven't gotten it)

i know. its stupid, if they really want to trick us, they are gonna have to way better than that... it need's to be spot on, which they obviusly havnt got the brains to do... stupid criminals

If I don't know the email address I just click on report phishing scam button.

i was trying to but it seems there is not a button to do that, becuase i received it through yahoo.co.uk...however i do know that there is one with hotmail.co.uk/.com.

do you think i should forwared it to my hotmail account and then report it???

It wouldn't hurt I guess.

very true.. also i have just been looking at your PC specs.. i noticed you have a nVidia 8400gs did you install the update released through microsoft update about 1 or 2 weeks ago.... i did and i got loads of screen blinking and a slightly slower uptime... so i uninstalled and reinstalled and did not sort the problem out... so i have rolled back to original version and working fine... have you had any problems with yours

I never download through windows update I go directly to nvidia's site cause windows update drivers are like 2 versions behind

i currently have version 7.15.11.6369 i dont suppose you know what the latest is??

7.15.11.7813 is the lastest

GeForce Release 178

nice one for that mate, i just installed now... reputation added!

This is clearly a FAKE. There are a number of warning signs present. Firstly, as far as I am aware, Windows 98 is NO LONGER SUPPORTED, yet the message mentions that OS. Secondly, Microsoft DO NOT issue experimental private versions of updates. Thirdly, have a look here: HOW TO: Identify Encrypted Files in Windows XP. Notice the date, and also notice that it only applies to Windows XP Pro.

Another clue is the KB number. These are currently in the 8xxxxx and 9xxxxx range, whereas this is in the 3xxxxx range. Finally, Microsoft DO NOT issue updates by means of an attachment to an email.
As regards the PGP key, it is easy for someone to cut this from a genuine email notification and paste it into the rogue email. Also, NEVER click on links in emails, even from friends - ALWAYS manually type the address into your browser.

Hi,

That is certainly a fake - the poor English is a dead giveaway. Non native English speakers may not pick that up .

SIW2

In addition to my previous post, genuine notifications from Microsoft start with the following:

Also, compare these random sections of the PGP signature.
This is the genuine version. Note how it contains symbols (/ and + in this extract) as well as alphanumeric characters in both upper and lower case.

This is the fake version. Notice how it consists solely of alphanumeric characters (in UPPER case only) - there isn't a symbol in sight.

In addition to that, the length of the signature in the fake email is too short, also the PGP version is not current.

also guys, it has been confirmed on Technology News Headlines - Yahoo! News UK news as a fake aswell, go to technology section and read down the list and you will see Malware writers spoof Patch Tuesday currntly 2nd on the list

BEWARE LADS

they are pathetic

There is not a single serious company out there which would send you any kind of updates by email. End of story.

very true..