Fake Virus Notice Downloads Real Virus
The link actually looks like it goes to Microsoft, but it actually sends you to a site in Romania. Many computer problems are linked to Eastern Europe, but the originator could actually be located next door.
This particular attack requests you go to http://update.microsoft.go.ro. The last few letters give us insight as to the destination of a site. The letters “ro” indicate Romania.
If you are a Microsoft user, simply ask for automatic updates. This will require your computer to periodically check Microsoft’s database. If updates are available you will be notified by your web browser that the download is available. Microsoft does not send e-mails touting problems. In fact, Microsoft is very secretive about its software problems.