Microsoft Security Bulletin MS05-039

PCWorld.com - Beware of Fake Microsoft Security Alerts

Watch out! This email is not only a fake bulletin, it links to supposed patches that are actually Trojan viruses. The good part is that so many people have already tried to download the patch that the server has exceeded it's allowed bandwidth (you couldn't download it if you wanted to). The bad part is that these are becoming more common -- fake bulletins from Microsoft and fake notices from your bank that either try to trick you into downloading harmful software or get you to give up your financial information to identity thieves.

When you get messages like this in your email you should be suspicious unless you specifically subscribed to such bulletins. Even then, you should check the links before clicking on anything -- move your mouse over the page and watch which addresses display in the status bar of your browser. If the message looks like it's from Microsoft but the links go to something like http://k23iLeID30dkrl3.com be really careful. Clicking on the link can install the virus on your PC without any further action from you. The trojan mentioned in the article above isn't even recognized by your antivirus program yet because it's so new.

Just because you have the newest version of a popular antivirus program doesn't mean you're safe to click on whatever you see. Always use caution. You wouldn't drive down the street with your eyes closed just because you're wearing a seatbelt and have airbags...