Get Ready for More Microsoft Fixes Next Week

After a month off for good behavior, Microsoft will issue eight security alerts next week with patches, some critical, for Windows, Office, MSN Messenger, and Exchange.

Five of the security bulletins apply to Windows and at least one of those is deemed critical, Microsoft said in a notice posted to its Web site. Office, MSN Messenger, and Exchange, will get one bulletin each, all deemed critical. In Microsoft's rating system for security issues, vulnerabilities that could allow a malicious Internet worm to spread without any action required on the part of the user are rated critical.

Microsoft gave no further information, other than that some of the patches for Windows will require restarting patched computers, as may the MSN Messenger patch. The fixes for Office and Exchange will not require users to restart the applications.

The software maker provides information in advance of its monthly patch release day, every second Tuesday of the month, so users can prepare. Last month Microsoft did not release any patches, after a dozen security bulletins in February.

In addition to the patches, Microsoft on Tuesday through Windows Update plans to release an updated version of the Windows Malicious Software Removal Tool and two "high priority" updates for Windows that are not related to security issues. The Malicious Software Removal Tool detects and removes malicious code placed on computers.

In a related story, there is a fraudulent e-mail campaign underway to lure people to a fake Microsoft web site supposedly to download Windows patches. But instead of getting any patches, duped users will get a Trojan horse called Troj/DSNX-05. That little devil will let the attackers remotely take control of the infected PC.

Some people (not my readers, of course) are likely to click on the phony Microsoft update notices, given that they are making the rounds at the same time as Microsoft is poised to issue its regular monthly security update. Just be aware that Microsoft does not issue product fix notices in this way.