Watch for Windows Antivirus in Emails

It appears that the rogue program, Windows Antivirus is now spreading via emails. Previously, the only way to get it was to click an internet link which took you to an infected site.

But the other day, one of my single clients received an email that appeared to be from a friend with a picture of a girl attached that he wanted him to see. He clicked the link to open the picture and was immediately hit with messages from Windows Antivirus telling him his computer was infected.

This is the first time I've seen an attack via email by the rogue program (though I suppose it was just a matter of time).  

Make sure your antivirus software is up to date and if you haven't already, be sure to download and install Malwarebytes AntiMalware (one of the few programs that can successfully remove Windows Antivirus).  In addition to these things, be careful not to open emails from people you don't know (especially if they contain links or attachments).

Beware of New Email Virus (Here You Have)!

A new computer virus started causing havoc yesterday with several corporation (including NASA).  The virus was in an email with the subject line, "Here You Have" or "Just For You".  Both subject lines have been spotted on the virus containing email.

The actual name of the virus varies depending on which company you check, but it has been called the "Here You Have" virus, the VBMania virus, and it's official designation is W32.Imsolk.B@mm by Symantec.

The email contains a link and the virus is activated when you click the link.  Then the virus sends the infected email to everybody in your address book.

According to Symantec, the virus has not infected any machines running Norton software yet.  So if you use Norton, it would be a good idea to make sure your anti virus software is up to date.

As usual, don't open any emails from people you don't know (especially if they contain attachments).

Beware of Messages Saying You Have Trojans

This morning a friend of mine was playing a game on Facebook and noticed popup messages saying she had 6 Trojan viruses on her computer and Windows needed to remove them right away. The messages appeared be from "Windows Security" and even had the little Microsoft shield on them. Although the messages stressed urgency in letting Windows Security remove them, my friend stopped everything and called me (lucky she did!).

If she had accepted the messages, she would have installed one of the worst malware, rogue programs currently circulating on the internet.

This rogue program is known by many names, but it's best known as Windows AntiVirus - and it's a really bad program to have on your computer. It literally holds your computer hostage for money - and even after you pay, it continues to ask for more.

Here's where it gets tricky. Even when the program hasn't been installed yet on your computer, it's difficult to close the warning messages which are trying to trick you into installing the program. When you hit the red "x" to close the window, a new popup appears advising you to remove the viruses before closing windows and your choices on that window are "OK" and "CANCEL". Clicking OK is the WORST THING YOU CAN DO (as it will install the program). But clicking CANCEL just brings up new popup messages stressing urgency to remove the program. The goal is to fluster you into clicking OK.

The only way to close the windows at this point is to do a CNTRL-ALT-DEL on the keyboard to bring up the task manager. Then click the Applications tab, highlight each program listed and click END TASK. Be sure to click END NOW also on any subsequent popup messages. This will close out everything you had open (including email and your internet browser), but it will keep you safe.

The next step is to update your antivirus software and run a full scan just to be sure you don't have any viruses on your computer.

If you do notice more popup windows on your computer (while not connected to the internet) telling you have you have trjoans (especially if the program has a windows shield on it), chances are your computer is infected with the malware program. If that's the case, click here for removal instructions.

Beware of New Computer Virus (Conflicker Worm)

There's a new computer virus going around called, Conflicker (a.k.a. "Downadup" or W32.Downadup") that is perhaps one of the most dangerous computer viruses ever created. This computer virus is a malicious worm, meaning it replicates itself and causes harm to PC's and networks.

Like most computer viruses, one of the first things it does is turn off automatic updates (for Windows and Antivirus software). It also deletes previous restore points and prevents PC's from accessing certain security sites. Once it has the computer pretty much disabled so that it can't remove this virus, it then configures the PC to connect to the malicious virus server so that it can receive further malicious programs and wreck havoc from there.

This worm is hyped to be far more serious than any other to date and as such is something to pay close attention to. Make sure all Windows Updates are performed and that you have a good AntiVirus software program installed and that it's up to date.

If you do get the Conlficker Worm (or W32.Downadup Worm), Norton has a special tool you can use to remove it. To get Norton's removal tool for W32.Downadup Worm, click here.


For more information about the Conficker worm, click here.