Visit The Hill right now and become a member - it's 100% free!

stationery | acpressions | funletters | quicknotes | screen savers | wallpaper | smileycons | calendarpal | foldermagic | contact us 

Windows Tips and Tricks by Cloudeight

Microsoft "Patch Tuesday" email is a hoax...and a trojan
Windows 2000, Windows XP and Windows Vista

Once again criminals and miscreants are banking on uninformed Windows users to help spread a new Trojan by email. The email appears to be from Microsoft, and even claims to be digitally signed by Microsoft. This new email hoax includes a new twist - quoting a real Microsoft employee, Steve Lipner, in an attempt to add credibility to it.

Premium readers are reminded that Microsoft never sends patches by email; they never have and they never will. In fact, no major company will ever send out a mass mailing with executable files (files that run when clicked) attached. If you receive an email that looks like it came from Microsoft with an attached file, delete the email immediately.

Sometimes, even though we know better, we get tired, or pre-occupied, and don't think things though before we do things. So even the well-informed can get stung by hoaxes like these. That's why it's important that we remind you that this email is being sent by the millions - so the likelihood that you'll see it soon is high.

Here is more information from a Microsoft source:

“We received some questions from customers about an e-mail that’s circulating that claims to be a security e-mail from Microsoft. The e-mail comes with an attached executable, which it claims is the latest security update, and encourages the recipient to run the attached executable so they can be safe. While malicious e-mails posing as Microsoft security notifications with attached malware aren’t new (we’ve seen this problem for several years) this particular one is a bit different in that it claims to be signed by our own Steve Lipner and has what appears to be a PGP signature block attached to it. While those are clever attempts to increase the credibility of the mail, I can tell you categorically that this is not a legitimate e-mail: it is a piece of malicious spam and the attachment is malware. Specifically, it contains Backdoor:Win32/Haxdoor.

Furthermore, this backdoor opens several TCP ports that allow remote attackers to connect to the compromised PC and execute files, steal information from it, or upload and download files. The attachment’s file name varies, but uses the convention(al) KBxxxxxx.exe, where xxxxxx is a random 6-digit number. Below are some of the file names we’ve seen, and are being used:

KB199250.exe
KB246586.exe
KB535548.exe
KB572906.exe
KB763412.exe..."

Those file names are typical Microsoft "KILOBYTE" (KB) file names. It does not matter of course; a file can be named anything the developer wants to name it. This is a very well planned and executed hoax - and one that is very dangerous to your computer - and your personal information. Be on your toes and remember - Microsoft never sends patches or executable files by email. Delete any email that appears to be from Microsoft which contains an attachment. You can be sure, no matter how authentic it may look, it is not from Microsoft.

As we remind you almost every week - keep your anti-virus and anti-spyware updated frequently. An outdated anti-virus or anti-spyware program is almost as bad as not having any anti-spyware or anti-virus protection. Scan your computer at least once a week using a good online anti-virus scanner to ensure your anti-virus software is doing its job. Use common sense and always carefully consider opening any attachments that come via email. Unless you were expecting an attachments and you are 100% certain you know who it is from, do not open it.  Forewarned is forearmed.

Infoave Premium readers get a lot more tips and tricks, answers to Windows questions, and other features not available in our free edition. Please subscribe to the best Windows newsletter on the Web  - Cloudeight InfoAve Premium! Only $11.95 for 52 issues.

Stop Computer Crashes!
Save 20% right now on the best-selling Cloudeight endorsed program!
Performing regular maintenance on your computer is just as important as keeping your car or your home in tip-top shape. You take care of your car with regular maintenance and you do the same for your home - and you should do the same for your computer. Registry Mechanic automates the task of keeping your Windows Registry clean and optimized - and all you have to do is click a button. It doesn't get much easier to keep your Windows Registry clean and optimized - and a clean optimized Windows Registry makes your computer run faster and helps prevent computer crashes. Registry Mechanic is the ONLY registry cleaner/optimizer we've tested that proved to be 100% SAFE and EFFECTIVE at keeping the Windows Registry free of errors and unnecessary entries. -causing. All Cloudeight Subscribers can save 20% off the regular retail price of Registry Mechanic. Visit this page for more information and save 20%!

Save 20% and lots of time too!

Saving time and aggravation is a great way to make your computer time more productive, have more fun, and make your PC more efficient. This week, we are offering all our subscribers a 20% savings on RoboForm Pro. With RoboForm you'll never have to worry about usernames or passwords again. Plus with RoboForm's SafeNotes, you can securely store personal information that only you can access. What a great time-saving program RoboForm is - and now it's a money-saver too!

RoboForm Pro is the world's most trusted password management and form-filling software. Buy RoboForm Pro now and save 20% PLUS you'll save yourself time, login to all your password protected sites with just a click and securely store all your personal information which can help you prevent identity theft. RoboForm Pro is THE FIRST program we install on a new computer.

Buy NOW and SAVE 20%. Click here to buy RoboForm Pro now

InfoAve Home Page | Contact Us

All content is copyright ©2008 by Cloudeight Internet LLC.

Above ads are provided in this space by Google Adsense. They are not placed by us. Please read our privacy policy concerning third-party advertising which appears on this site.