recibi este mensaje por e-mail

[lesliemarie]

y necesito ayuda

Dear costumer

Our robot has detected an abnormal activity from your IP adress an sending e-mail.Probably it is connected with the last epidemic of a worm wich does
not have official patches at the moment.

we recommend you to install this patch to remove worm files and stop email
sending,otherwise your account will be blocked.we had archive the patch because the worm can modify unpacked exe files.you should open the archive file,enter the password and run the patch inmediatly.

costumer support center robot

este es el patch
patch 1223.zip


espero me ayuden y me digan si este mensaje es en verdad de costumer support,o no.es que me da miedo,ya que estan enviando tantos trojanos y me da miedo dar click...el cuerpo del mensaje dice....trojan detected..pero no se porque el nod no lo detecta,ademas el antivirus esta configurado..
gracias por su ayuda

lesliemarie

[ChipAnonimo]

Para nada leslie ten mucho cuidado con estos emails.........ni se te ocurra instalar este disque patch y menos aún si te pide no se que password.....espera un poco veamos que puedo averiguar sobre este patch pero desde ya me da mala espina........Espera que otros users también opinen sobre el tema...

[Astaroth]

Opino = que ChipAnonimo no descargues nada y no des ninguna información, mejor borralo de tu correo y listo...
Creo que con el NOD tienes buena protección por lo que no necesitas creer en estos mensajes...

Te comento algo que yo hago para "garantizar" la protección de mi PC, siempre que veo un correo nuevo y no es de ninguno de mis contactos o de alguna persona conocida inmediatamente lo borro ni siquiera lo leo simplemente lo borro:D :D

Espero nuestros comentarios te sean utiles

Saludos!

[lesliemarie]

el password al que me refiero es al que ellos me indican,luego del mensaje

password:our 93
dejenme saber si necesitan el cuerpo del mensaje;aun no he hecho nada,solamente lei el mensaje y lo traje al foro,para que ustedes me digan si puedo confiar o no...gracias

[vico123]

Espero que sepas ingles, pero por sino, elimina el correo te instalara un K-logger ojala sirva de advertencia a todos:

Security giant Sophos has issued a warning in which it speaks about the presence of a spammed email campaign which claims to be a security advice from Microsoft; however what it actually does is that it tries to tempt users to install a keylogger onto their systems.

The spammed emails, which declare to come from patch@microsoft.com, claim that a flaw has been discovered “in the Microsoft WinLogon Service” and could “allow a hacker to gain access to an unpatched computer”.

A Microsoft spokesperson said on Monday morning that the vulnerability the email warns of does not exist, and that users should ignore the email.
“Microsoft advises users to ignore an email currently circulating which claims to provide a patch to a ‘vulnerability in the WinLogon service’ and implies it has been sent by Microsoft,” the spokesperson said. “This email is not from Microsoft Corporation and the claimed vulnerability and patch do not exist… Microsoft is currently investigating this fraudulent email.”


Recipients are advised to click on a link in the email to download the patch. However, the link really points to a non-Microsoft Web site and initiates the download of the Troj/BeastPWS-C Trojan horse, which is capable of spying on the infected user and stealing passwords.

When first installed the Trojan horse displays the following bogus message:
Microsoft WinLogon Service successfully patched., but is secretly logging keystrokes and sending them to an email address belonging to the hacker.

Graham Cluley, senior technology consultant at Sophos said, “People are slowly learning that Microsoft does not email out security fixes as attachments, but they also need to learn to be careful of blindly clicking on links to download fixes too without checking that the email is legitimate.” Cluley maintained, “In this case, the hackers made a mistake by referring to ‘Microsoft Coorp’ rather than ‘Microsoft Corp’, but its possible that users would miss that typo in their rush to protect themselves.”

Sophos has recommended that users visit Microsoft’s Web site at www.microsoft.com/security for information about Microsoft security patches.

“The hackers are playing a dangerous game, because if Microsoft finds out who is responsible for besmirching their name in this way they are likely to throw the full force of the law at them,” said Cluley. “Security is becoming a hot topic for the software giant and they don’t want malware and spam to sully the company’s public image through this kind of criminal activity.”

Sophos has also advised that companies put in place a combined solution to guard against viruses, spyware and spam, and make certain that it is automatically updated as new threats surface.

Three years ago, the Swen worm (also known as Gibe.F) posed as a Microsoft security bulletin, and managed to infect millions of unpatched PCs. The success of which led to numerous imitator messages, but none have so far managed to replicate Swen’s success.

[lesliemarie]

mil gracias por la ayuda que me han brindado.suerte que tengo la gente linda de este foro,los cuales siempre me han ayudado.gracias a ustedes no di el click en el patch que enviaron.ya envie el mail como spam,y una vez mas,gracias y que tengan todos un lindo dia

lesliemarie