Re: Bogus MS 'critical update'

2005-07-27 Thread Thomas Cameron
On Mon, 2005-07-25 at 10:33 +0100, Nigel kendrick wrote:
 I have just had a bogus Microsoft update slip through the net. Is there a
 rule to combat these? In any case, here's the info in case it's of use:

snip

IMHO that's a virus, not spam.  You should prolly install ClamAV on your
mail server.
-- 
Thomas Cameron, RHCE, CNE, MCSE, MCT
512-241-0774 (office)
512-924-8592 (cell)



Bogus MS 'critical update'

2005-07-25 Thread Nigel kendrick
I have just had a bogus Microsoft update slip through the net. Is there a
rule to combat these? In any case, here's the info in case it's of use:


From: MS Technical Services [EMAIL PROTECTED]
Subject line: Newest Microsoft Critical Pack
The attachment was Upgrade9591.exe

Here's the body, minus HTML formatting:

  MicrosoftAll Products |  Support |  Search |  Microsoft.com Guide   
Microsoft Home
 
MS Customer

this is the latest version of security update, the July 2005, Cumulative
Patch update which eliminates all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express as well as three
newly discovered vulnerabilities. Install now to continue keeping your
computer secure from these vulnerabilities, the most serious of which could
allow an malicious user to run executable on your computer. This update
includes the functionality of all previously released patches.  


 System requirements  Windows 95/98/Me/2000/NT/XP 
 This update applies to  MS Internet Explorer, version 4.01 and later
MS Outlook, version 8.00 and later
MS Outlook Express, version 4.01 and later  
 Recommendation Customers should install the patch at the earliest
opportunity. 
 How to install Run attached file. Choose Yes on displayed dialog box. 
 How to use You don't need to do anything after installing this item. 

Microsoft Product Support Services and Knowledge Base articles can be found
on the Microsoft Technical Support web site. For security-related
information about Microsoft products, please visit the Microsoft Security
Advisor web site, or Contact Us. 

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an unmonitored e-mail
address and we are unable to respond to any replies.



The names of the actual companies and products mentioned herein are the
trademarks of their respective owners.  

 Contact Us  |  Legal  |  TRUSTe  
 C2005 Microsoft Corporation. All rights reserved. Terms of Use  |  Privacy
Statement |  Accessibility  




Bogus MS 'critical update' - PANIC OVER

2005-07-25 Thread Nigel kendrick
Apologies - just noticed that the mail was picked up from a third party
server, not our in-house one, and was dumped into the wrong folder due to an
Outlook rules error. 

I've just tried sending an .exe through our mail server and it was blocked.

NK