did anyone else get this ?

**Talonboy** · April 17th, 2003, 05:09 PM

I got this emails that just seems odd . it has an attached patch.exe file with it also asking me to run it :
what do u think ?

Microsoft Customer

this is the latest version of security update, the
"April 2003, Cumulative Patch" update which eliminates
all known security vulnerabilities affecting Internet Explorer,
Outlook and Outlook Express as well as five newly
discovered vulnerabilities. Install now to protect your computer
from these vulnerabilities, the most serious of which could allow
an attacker to run executable on your system. This update includes
the functionality of all previously released patches.

System requirements Win 9x/Me/2000/NT/XP
This update applies to Microsoft Internet Explorer, version 4.01 and later
Microsoft Outlook, version 8.00 and later
Microsoft Outlook Express, version 4.01 and later
Recommendation Customers should install the patch at the earliest opportunity.
How to install Run attached file. Click Yes on displayed dialog box.
How to use You don't need to do anything after installing this item.

Microsoft Product Support Services and Knowledge Base articles
can be found on the Microsoft Technical Support web site.
For security-related information about Microsoft products, please
visit the Microsoft Security Advisor web site, or Contact us.

Please do not reply to this message. It was sent from an unmonitored
e-mail address and we are unable to respond to any replies.

Thank you for using Microsoft products.

With friendly greetings,
Microsoft Corporation Network Security Division

**NooNoo** · April 17th, 2003, 05:16 PM

What's the email header say?

And no, M$ doesn't email people individually to apply a patch.

**DocPC** · April 17th, 2003, 05:18 PM

Microsoft will NEVER send you a patch via personal email, PERIOD.

Scan the attachment with Norton AV or one of the online scans such as www.pandasoftware.com.

Let us know what it shows......

**Mayet** · April 17th, 2003, 05:18 PM

Yeah and i am sure there was a warning about something similar to that.

**confus-ed** · April 17th, 2003, 05:23 PM

Oh I was just gonna say that Doc

No way are MS sending us all an e-mail each.... that's what windows update is for....

I think it might be this virus described here

**Talonboy** · April 17th, 2003, 05:23 PM

i scanned with norton. came up fine when you double click to install and i got error ..............temp internet files\content.IE5\GP8Z0Jc7\Patch994.exe is not a valid Win32 application.

not sure what it was for buy at least my system didnt blow up

**DocPC** · April 17th, 2003, 05:43 PM

Originally posted by confus-ed
Oh I was just gonna say that Doc

No way are MS sending us all an e-mail each.... that's what windows update is for....

I think it might be this virus described here

That has to be it confus-ed, since he apparently tried to execute the attachment and it did nothing.......Your link describes it has having no payload.

Lucky fella......

**Talonboy** · April 17th, 2003, 06:09 PM

i escaped deaths trap this time but next time i might be so lucky !

**confus-ed** · April 17th, 2003, 06:13 PM

Originally posted by Talonboy
i escaped deaths trap this time but next time i might be so lucky !

Aye! so no more opening 'strange' attachments

, they are only for people who can't use ftp !

**Talonboy** · April 17th, 2003, 07:39 PM

i know but its like that big red button that someone tells you you cant push... and it just sits there calling yuor name "Pushhhh meeeeeeee!!!!"

**techs** · April 18th, 2003, 11:26 AM

I do get MS notifications on a regular basis. This was the latest " Buffer Overrun in Windows Kernel Message Handling could lead to Elevated Privileges (811493)". As an oem I signed up for all the security notifications. All the emails refer me to the security bulletin with a link. If there is a patch the link is there or there is a link to an MS page that has the patch and I download it from there.

**NooNoo** · April 18th, 2003, 12:18 PM

Originally posted by techs
I do get MS notifications on a regular basis. This was the latest " Buffer Overrun in Windows Kernel Message Handling could lead to Elevated Privileges (811493)". As an oem I signed up for all the security notifications. All the emails refer me to the security bulletin with a link. If there is a patch the link is there or there is a link to an MS page that has the patch and I download it from there.

Yes, but they do not send the patch as an attachment, which is what is happening to Talonboy.

**techs** · April 18th, 2003, 01:40 PM

The previous posts could be read that MS never sends security alerts, I was just clearing that up.

**NooNoo** · April 18th, 2003, 03:04 PM

Originally posted by techs
The previous posts could be read that MS never sends security alerts, I was just clearing that up.

fair enough

**needalottahelp** · April 20th, 2003, 05:55 PM

patch.exe could b part of a program called netbus... im sure most of u have heard of it and knows what it can do, im not sure if people can still use that program to connect to other peoples computer and mess with them but patch.exe is the name of the file you need the client to run in order for you to connect to there computer... id b careful if i were you...

Thread: did anyone else get this ?

Thread Tools

Display

did anyone else get this ?

patch.exe

Bookmarks

Bookmarks

Posting Permissions