Re: Worm.Automat.AHB

From: Kent W. England [MVP] (kwe_at_mvps.org)
Date: 09/27/03


Date: Sat, 27 Sep 2003 09:02:31 -0700


Your biggest problem is not understanding that the emails you are
getting are not replies to any messages you have sent. These emails are
forged or replies to forged emails sent by other people's viruses.

You must learn not to trust your email addresses. You must examine
received messages carefully and if the message seems bogus, it likely is
bogus.

If you continue to click on bogus email attachments, you certainly will
get a virus or a trojan. Dial up your skepticism setting a bit more, say
to seven or eight.

If your IP address is 192.168.x.x, you have some firewall security from
your router, but I would recommend you get a personal firewall like the
ZoneAlarm to keep an eye on your applications. These firewalls can help
discover malicious software that may slip past your defenses.

I'm not familiar with Trojan Remover. The web site looks legitimate, but
be aware that there are malicious tools, so you should read reviews of
free tools before downloading and using them.

The emails you are receiving from Microsoft are not from Microsoft.
Don't open those attachments, but you can scan them with your AV for fun
and to see what bug they contain.

-- 
Kent W. England, Microsoft MVP for Windows
"Eric" <cwrigh15@tampabay.rr.com> wrote in
message news:13b801c38306$40fdc080$a301280a@phx.gbl...
> recently, I started recieving e-mails from many people I
> have never heard of.  Some of the e-mails had a click here
> hyperlink to be removed.  Once I clicked it, the site
> asked for my e-mail address.  Once entered it typically
> gave me an error.  I believe this was a trick to get me to
> download the above worm.  Based on the number of e-mails I
> have received it apparently worked.  The precautions I
> have in place are as follows: 1) wireless router(not sure
> this is much of a precaution) 2) Norton Antivirus, with up
> to date definitions. 3) All updates from XP installed 4) I
> recently downloaded Trojan Remover and ran the program.
>
> Neither Trojan Remover nor, Norton Antivirus found any
> problems.  I also did a file search for Worm.Automat.AHB
> and found nothing.  However, I keep getting e-mails and
> additionally, it seems, although I can't be certain, that
> my computer is still sending e-mails.  I believe my system
> is still sending because I keep receiving e-mails from
> Microsoft basically saying (mostly titled "Net Security
> Pack") an e-mail I just sent was infected.  I view these e-
> mails in preview pane but don't attempt opening the
> deleted.txt file.  It seems like these e-mails may be
> another attempt at installing a worm virus and not
> actually from Microsoft (the e-mail address on this last
> one is "puomcvuwns@confidence_msdn.com".  This doesn't
> seem like a legitimate Microsoft e-mail address.
>
> can anyone please address each of my concerns?
> 1) Analyze the protection I listed above and it's adequacy
> 2) Recommend any other protection considerations
> 3) Tell me if I have this worm and if so, how to find it
> and rid myself of it.
> 4) Tell me if the "Microsoft" e-mails I am receiving are
> not really from Microsoft?
>
> Thanks!!
> Sorry so long!
>
> -Eric


Relevant Pages

  • RE: Exchange - Emails dont arrive to some users.
    ... Based on my research, the SBS can only route POP3 e-mails to local mailbox, ... Microsoft CSS Online Newsgroup Support ... Exchange - Emails don't arrive to some users. ...
    (microsoft.public.windows.server.sbs)
  • Re: Worm.Automat.AHB
    ... Your biggest problem is not understanding that the emails you are ... The emails you are receiving from Microsoft are not from Microsoft. ... I started recieving e-mails from many people I ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Auto Forward e-mails
    ... Is it possible to copy the e-mails and not forward them. ... > process emails from POP3, IMAP and Exchange Servers - plus directly from ... >> archived messages from receiving their personal e-mails, ...
    (microsoft.public.exchange2000.admin)
  • Re: Trick or Legit. E-mail ?
    ... > I have been receiving an e-mail, twice a day, for the past ... Microsoft doesn't know you. ... Microsoft doesn't bother sending specialize e-mails like this. ... Take a look at the Received headers in the bogus message. ...
    (microsoft.public.security)
  • Re: over 1700 emails from you!
    ... Keith Arsenault said in news:40D6400E.26364A0A@ns.sympatico.ca: ... I have over 1700 emails from you. ... This a peer community of other Microsoft ... So are these e-mails that are ...
    (microsoft.public.internet.mail)