PDA

View Full Version : Strange Worm/Virus?


V8toytruck
09-09-2010, 7:27 AM
The last few days I've received emails with a single link from 2 friends that did not send them. They have gmail and yahoo accounts. The worm/virus also sent it to 2-3 other people that I have talked or have been group emailed with before.

Like an idiot I clicked the links on my iPhone twice (I check my email first thing in the morning when I wake up in bed)

Anyone aware of some worm/virus/whatever the correct terminology for it taking over? Pretty smart either way, it groups contacts and emails them to small groups instead of the entire address book.

Rhythm of Life
09-09-2010, 7:32 AM
Basically your part of a hackers bot net right now. They can use your connection to send information.

jrau13
09-10-2010, 4:32 AM
The last few days I've received emails with a single link from 2 friends that did not send them. They have gmail and yahoo accounts. The worm/virus also sent it to 2-3 other people that I have talked or have been group emailed with before.

Like an idiot I clicked the links on my iPhone twice (I check my email first thing in the morning when I wake up in bed)

Anyone aware of some worm/virus/whatever the correct terminology for it taking over? Pretty smart either way, it groups contacts and emails them to small groups instead of the entire address book.

I have had the same thing. Only 3 emails and not close together in dates but same.

wjc
09-10-2010, 8:00 PM
There is a new one out called W32/VBMania@MM that is a little like the old address book spams we used to see. Here's a link:

http://vil.nai.com/vil/Content/v_275435.htm

McAfee provides a stinger here:

http://www.mcafee.com/us/threat_center/default.asp

todd2968
09-12-2010, 1:19 PM
change your password

ojisan
09-12-2010, 1:58 PM
Yes, a new one is out there.
I'm getting multiple mailings from several people.
The easy way to spot them is the recipients' address list, address are sent alphabetically, broken up into about 8 addresses per batch so they don't hit the spam filters.

xrMike
09-13-2010, 11:07 AM
This thing swept through our company last week. In my case, I received an email from somebody I didn't even know, with a link to a PDF, with a subject line of: "Here it is..." or something like that. Spidey sense immediately alerted. So I right-clicked the link, and saw the file extension was actually "...blahblah.pdf.scr", so knew it was a something nasty, and trashed it.

Within 5 minutes, that same mail was flying fast and furious throughout the company because of all the suckers who clicked on that link, and opened that file...

IT is telling everbody who opened the file to re-image their drive.

What a PIA!

sarge1572
09-13-2010, 11:12 AM
I received this warning from McAfee the other day. Does this sound like your "worm"?
Jeff



----- Forwarded Message ----
From: McAfee <subscriptions@mcafee.com>
To: sarge1572@verizon.net
Sent: Sat, September 11, 2010 1:26:24 PM
Subject: Consumer Threat Alert: New "Here You Have" Worm Delivers Unwanted Gift

McAfeeŽ
Share this on:
Consumer Threat Alerts
Security Advice Center | Products
New "Here You Have" Worm Delivers Unwanted Gift
Global mass mailing worm masquerades as business message
but links to malware, McAfee Labs warns
A new Internet worm dubbed "Here You Have" is streaming into worldwide inboxes, offering a dangerous payload, according to McAfee Labs. The worm, which travels via spam email with the subject line of "Here you have," or "Just for you," masquerades as an email with a link to a video or an attached document file. However, the email actually contains a link to a malicious program that can disable security software and send itself to all the contacts in the recipient's address book.

Corporations around the world were particularly affected by the worm on Thursday as it clogged up their email systems. Consumers could be affected as they go home and log onto their machines. For this reason, McAfee Labs has labeled the worm as a "medium" risk, and warns all computer users to delete any email with the "Here you have," or "Just for you," subject line.

Although the dangerous link has been taken down, neutralizing the threat, it can still spread through remote machines, mapped drives and removable media, Labs warns.

If you have an up-to-date and properly configured McAfee security software product then you are protected against this threat.

The Hook: You receive a spam email with the subject line "Here you have," or "Just for you," and a link or attachment that looks like it leads to a video or document file. It may appear that the email comes from someone you know.

The Methods: The email invites you to click on the link, and once you do it prompts you to download a file. This file is actually malware that disables the security software on your machine and sends itself to everyone listed as a contact in your address book.

The Dangers: Once you are infected, your computer has diminished security protection. Your machine is also being used to spam your friends and contacts. If you are on a corporate network, the network could be clogged as the worm works its way through address books.

Bottom Line: Do not click on the link in any email with the subject header "Here you have," or "Just for you," even if it appears to be from someone you know.

Tips to Avoid Becoming a Victim:

1. Never click on a link in a spam email or IM from someone you don't know. Be suspicious of strange emails from family or friends: their accounts may have been compromised.

2. Use comprehensive security software, like McAfee Total Protection™ software, to protect you from viruses, spam, and other Internet threats, and keep the software up-to-date. Save on McAfee Total Protection or try it free for 30 days.

3. Set your operating system and browser to automatically apply updates.

[ You are currently subscribed as: sarge1572@verizon.net ]
Please do not reply directly to this email. This email was sent from a notification-only address that cannot accept incoming email. For support-related questions, go here.

Legal Note: This software does not guarantee protection against all possible threats.

Unsubscribe: If you prefer not to receive email from McAfee, opt-out here.

View our privacy policy.

McAfee, SiteAdvisor, and/or other noted McAfee related products contained herein are registered trademarks or trademarks of McAfee, Inc., and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. Any other non-McAfee related products, registered and/or unregistered trademarks contained herein is only by reference and are the sole property of their respective owners.

McAfee, Inc. 3965 Freedom Circle, Santa Clara, CA 95054
Toll-Free: (866)622-3911 begin_of_the_skype_highlighting (866)622-3911 end_of_the_skype_highlighting

Fot
09-13-2010, 11:15 AM
That one made it through my company as well.. Logged on and had 30 of those e-mails.