New worm
Posted: Fri Feb 17, 2012 10:24 pm
This is no hoax, personal experience this morning!!
If you get an email that has Special Financial Report as a subject and a
paperclip beside it do not click on it (and hopefully it is not your last
inbound email like mine was, where the cursor is automatically on top of
it!). It has an embedded worm. My firewall picked it up as it tried to make
it's embedded file AAFF.EXE the server, that was stopped but it was already
too late and it loaded itself in to my computer and crippled outlook express
and sent my printer into a conniption fit.
Luckily my son was just going out the door to return to University this
morning and it took him an hour to find and remove all the files and set up
a filter to catch this subject line while we wait for Symantec to create a
fix. You could watch the aaff file grow as it was assumable loading up my
address book for distribution.
We have captured and sent to Symantec for a fix.
Regards,
Wayne O'Shea
-----------------------------------------------------------------
List archives located at: https://mail.dcsol.com/login
username "rebel" password "builder"
Unsubscribe: rebel-builders-unsubscribe@dcsol.com
List administrator: mike.davis@dcsol.com
-----------------------------------------------------------------
If you get an email that has Special Financial Report as a subject and a
paperclip beside it do not click on it (and hopefully it is not your last
inbound email like mine was, where the cursor is automatically on top of
it!). It has an embedded worm. My firewall picked it up as it tried to make
it's embedded file AAFF.EXE the server, that was stopped but it was already
too late and it loaded itself in to my computer and crippled outlook express
and sent my printer into a conniption fit.
Luckily my son was just going out the door to return to University this
morning and it took him an hour to find and remove all the files and set up
a filter to catch this subject line while we wait for Symantec to create a
fix. You could watch the aaff file grow as it was assumable loading up my
address book for distribution.
We have captured and sent to Symantec for a fix.
Regards,
Wayne O'Shea
-----------------------------------------------------------------
List archives located at: https://mail.dcsol.com/login
username "rebel" password "builder"
Unsubscribe: rebel-builders-unsubscribe@dcsol.com
List administrator: mike.davis@dcsol.com
-----------------------------------------------------------------