It is W32.Swen.A virus. I received over 100 day on may public e-mail address. Mailbox was full so maybe even more. It is designed to look authentic. First question always when you receive some patch is how they know Your e-mail address. If you are subscribed to MS security bulletin then You can authenticate it. MS messages are digitally signed. See http://www.microsoft.com/security/antivirus/authenticate_mail.asp Toomas ----- Original Message ----- From: "Cathy Pierce" <[log in to unmask]> Hi everyone, I just received the following email. The attachment is named "upgrade.exe". According to the PCsoft posts lately, Microsoft never sends an attachment for patches, but this looks so authentic. Is this for real or a virus? Thanks, Cathy Pierce Do you want to signoff PCSOFT or just change to Digest mode - visit our web site: http://freepctech.com/pcsoft.shtml