New "Here You Have" Worm Delivers Unwanted Gift

[.Chris]

A new Internet worm dubbed "Here You Have" is streaming into worldwide inboxes, offering a dangerous payload, according to *snip. The worm, which travels via spam email with the subject line of "Here you have," or "Just for you," masquerades as an email with a link to a video or an attached document file. However, the email actually contains a link to a malicious program that can disable security software and send itself to all the contacts in the recipient's address book.

Corporations around the world were particularly affected by the worm on Thursday as it clogged up their email systems. Consumers could be affected as they go home and log onto their machines. For this reason, *snip has labeled the worm as a "medium" risk, and warns all computer users to delete any email with the "Here you have," or "Just for you," subject line.

Although the dangerous link has been taken down, neutralizing the threat, it can still spread through remote machines, mapped drives and removable media, Labs warns.

If you have an up-to-date and properly configured *snip security software product then you are protected against this threat.

The Hook: You receive a spam email with the subject line "Here you have," or "Just for you," and a link or attachment that looks like it leads to a video or document file. It may appear that the email comes from someone you know.

The Methods: The email invites you to click on the link, and once you do it prompts you to download a file. This file is actually malware that disables the security software on your machine and sends itself to everyone listed as a contact in your address book.

The Dangers: Once you are infected, your computer has diminished security protection. Your machine is also being used to spam your friends and contacts. If you are on a corporate network, the network could be clogged as the worm works its way through address books.

Bottom Line: Do not click on the link in any email with the subject header "Here you have," or "Just for you," even if it appears to be from someone you know.

Source: an email message from an anti-virus company. got this message 2 days ago.

 

[DarkShadow96]

Yup someone on my contacts got infected by this.

 

[Edgedancer]

Thanks for the heads up.

 

[.Chris]

Thanks for the heads up.

Your welcome.

 

[Rydian]

What AV company reported this?

 

[Deleted_171835]

What AV company reported this?

McAfee.
http://siblog.mcafee.com/consumer-threat-a...-unwanted-gift/

 

[Hop2089]

Anyway I didn't get anything since I use BBS and AIM never e-mail anymore.

 

[DeltaBurnt]

Maybe people just shouldn't open links from spam email or people they don't know.

 

[Hop2089]

Maybe people just shouldn't open links from spam email or people they don't know.

That would help personal users but corporations not so much since depending on the network structure these worms often are mixed in with regular E-mails not in a spam folder.

 

[Kwartel]

Those motherfuckers need to keep their hands of other pc's!!!

 

[Bladexdsl]

HA i never open any shit that says i have won anything/here's $ for you unless i know i've been in the actual comp. who would??

 

[Maplemage]

I hardly trust anything that comes in my Junk mail =D