"Network Security Pack" = Virus ?

[SpiceGuid]

I have received several of this "Network Security Pack" mail (with a joined executable file). The mail as an attached file that is executable, seems like a virus to me. In my opinion security patches are available on microsoft site, so why should I trust this mail?

Here is the mail text:

MS User

this is the latest version of security update, the

"July 2003, Cumulative Patch" update which eliminates

all known security vulnerabilities affecting Internet Explorer,

Outlook and Outlook Express as well as five newly

discovered vulnerabilities. Install now to protect your computer

from these vulnerabilities, the most serious of which could allow

an attacker to run executable on your system. This update includes

the functionality of all previously released patches.

System requirements Win 9x/Me/2000/NT/XP

This update applies to Microsoft Internet Explorer, version 4.01 and later

Microsoft Outlook, version 8.00 and later

Microsoft Outlook Express, version 4.01 and later

Recommendation Customers should install the patch at the earliest opportunity.

How to install Run attached file. Click Yes on displayed dialog box.

How to use You don't need to do anything after installing this item.

Microsoft Product Support Services and Knowledge Base articles

can be found on the Microsoft Technical Support web site.

For security-related information about Microsoft products, please

visit the Microsoft Security Advisor web site, or Contact us.

Please do not reply to this message. It was sent from an unmonitored

e-mail address and we are unable to respond to any replies.

Thank you for using Microsoft products.

With friendly greetings,

Microsoft Internet Security Department

--------------------------------------------------------------------------------

[Nyarlathotep]

You're right, don't trust it.

[gryphon]

Microsoft never sends security updates as *.EXE files or files of any other kind with their emails.

Only download links.