May 14, 2011
FW: “Here You Have It” Virus
Editor’s Note: This virus is snopes verified. However, snopes offers further commentary concerning this particular virus: “Additional information about the ‘Here you have’ virus posted on the McAfee Labs Blog indicates that their anti-virus software has since been updated to recognize and neutralize VBMania and that ‘this URL is no longer active and the email propagation vector is believed to be crippled at this time,’ so the threat posed by the ‘Here you have’ or ‘Just For You’ virus is now rather low.” So, even though the threat of this virus is low, the below recommendations can be applied to other viruses.
Infectious email messages have been circulating and spreading a virus called, “VBMania.” If you receive any emails with “Here you have” or “Just for you” in the subject line, please delete these emails immediately. Don’t open them or click on any links or attachments. You should watch out for these malicious emails both on your work computers and on your home computer.
A link to a malicious Web site associated with the virus appears to be inactive, but infected hosts may continue to spread the virus via other means. The files attached to the e-mails are dangerous because they appear to be a PDF or Windows Media (WMV) files but are actually disguised files known as Trojans. After clicking them, the user is prompted to download or execute the virus. When it is run, the virus installs itself on your computer. Once your computer is infected, the virus attempts to send out the same email message to the addresses in your address book. It can also spread through accessible remote machines, mapped drives, and removable media such as thumb drives.
While this specific threat is current and has been reported on Government computer systems, you should always be on the alert for malicious emails. When you receive emails, check to make sure you know the sender before you open it. If you don’t recognize the person in the “from” line of an email, or it seems suspicious for other reasons, delete it. Also, please make sure your work and home computers are protected and have current anti-virus and other security software.




























