New Email Virus?

Subject line: Mail server report.
Attachment: Update-KB####-x86 (EXE or ZIP)

Mail server report.

Our firewall determined the e-mails containing worm copies are being sent from your computer.

Nowadays it happens from many computers, because this is a new virus type (Network Worms).

Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail

Please install updates for worm elimination and your computer restoring.

Best regards,
Customers support service

Be on the lookout – and do not open this attachment. Never accept software updates through email – EVER.

13 thoughts on “New Email Virus?”

  1. Pingback: [Xiled]
  2. Pingback: SocioBiblog
  3. wow, one would hope that all the publicity on things of this nature people would stop… crap… i have to go answer this workorder about unwanted pop-ups. brb.

  4. Hello,

    This self-mailing worm has several names, including Win32/Stration, [email protected] and Warezov. According to Virus Bulletin magazine it is spreading rapidly. This matches the data my employer (we make security software) is seeing–currently just over 10% of all infected mail we’re tracking contains a copy of this worm, and it sems the author(s) are not taking a break. On Friday, October 20th, we added detection for at least 167 new variants of this particular worm, and I’m sure other security copmanies are doing the same.

    In addition to replicating, some versions the worm specifically target several anti-virus programs by disabling their services and use stealth (rootkit) like technologies to hide portions of themselves from being detected while the worm is resident in memory.

    It is a good idea to update your anti-virus software (and verify the updates were installed correctly) or run an online scan from one of the anti-virus vendors’ web sites which offer them. Also, anti-rootkit programs can be used to check for the presence of the worm as well.


    Aryeh Goretsky

Comments are closed.