Just because itsecure.microsoft.com sounds like an authentic Microsoft subdomain, that doesn't mean it is safe to visit.
One way that Preald.A preys on its victims is by creating a hosts file to associate the domain itsecure.microsoft.com with an IP address that has nothing to do with Microsoft.
Usually, a computer gets any required domain name to IP address mappings from a domain name server associated with an ISP or one that is internal to the organisation.
Read the article in full here : http://www.itwire.com/content/view/26206/53/
DKD DomainNews