One Microsoft update you don’t want
Our friends at F-Secure found this phony, but realistic, Web site.
Watch out for this one. It’s not the real Microsoft Update site.
Note the real URL (cfm48.com) and the spelling errors (”Please intall”).
If you click the Urgent Install button, you’ll get a file called WindowsUpdateAgent30-x86-x64.exe, which is not signed by Microsoft. (i.e. Click the button — Download a Trojan-Dropper.)