WARNING: Is there an "Internet Explorer 7" virus in your e-mail?

| | Comments (0) |

I just got an honest-to-god virus in my Daily News e-mail -- it looks like an e-mail from Microsoft offering a download of Internet Explorer 7, but if you mouse over the graphic (DO NOT CLICK ON IT). you can see that the link doesn't go to Microsoft but to something with the words "gc-music" in it.

The "sender" (and yes, it is easy to put any address in the "from" field) is admin("at")microsoft.com -- and the subject line is "Internet Explorer 7 Downloads."

Whatever you do, DON'T CLICK ON THE GRAPHIC. For more on the virus, go to this PC World page:

The e-mails carry the subject line "Internet Explorer 7 Downloads" and appear to come from admin@microsoft.com. They include a blue, Microsoft-style graphic offering a download of IE 7 beta 2. Clicking the graphic will download an executable file called IE 7.exe.
The file is actually a new virus called Virus.Win32.Grum.A, and security experts were still analyzing it Friday to see what it does. Sophos PLC said it can spread by e-mailing itself to contacts in a user's address book. The virus tampers with registry files to ensure it gets installed, and it tries to download additional files from the Internet, said Graham Cluley, a senior technology consultant for Sophos.
Other specifics were unknown yet, but such viruses often install a keystroke logger to steal personal information, and establish a network of infected computers to launch a denial of service attack, Cluley said.

The report also says that this virus is poorly detected by current antivirus programs, and that it affects only Windows users.

Leave a comment

Tech Talk column

Steven Rosenberg's weekly Tech Talk column, which appears Saturdays in the Los Angeles Daily News, is now available on the Daily News Technology page.

About this blog

Comments are back: Comments have returned to Click, but due to the thousands of spam comments clogging up the system each day, commenters must now log in. To comment, either create a Movable Type account when prompted, or create and use a Typekey account. Movable Type, as configured on this blog, allows commenters to create a Movable Type account, verify it via e-mail and then sign in to comment. Other methods of verification are OpenID, Live Journal and Vox.




Steven Rosenberg aims to learn what he does not know. He writes about it here.



About this Entry

This page contains a single entry by Steven Rosenberg published on April 2, 2007 10:17 AM.

Dude, you're getting a Linux-loaded Dell! was the previous entry in this blog.

Thin Puppy Torture Test -- Day 8 is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Recent Comments

Powered by Movable Type 4.21-en

Advertisement

Other blogs

About The Run Defense in Inside USC with Scott Wolf
HS FOOT: Taft up 16-0 after three quarters in Daily News High School Spotlight
Halftime: Lakers 50, Suns 44 in Inside the Lakers
Elton Brand saga Part I in Inside the Clippers
Kings vs. Capitals in Inside the Kings