Be aware of a bogus email, I've seen it before and just recieved it again this morning.
The sender is from support@symantec.com with the subject line Re:Submit a Virus Sample.
It may also name the sender as one of these:
support@symantec.com
support@nai.com
support@norman.com
support@sophos.com
When you open the message it reads:
Dear user of <email.server>,
We have received several abuses:
- Hundreds of infected e-Mails have been sent
from your mail account by the new <random.virus.name> worm
- Spam email has been relayed by the backdoor
that the virus has created
The malicious file uses your mail account to distribute
itself. The backdoor that the worm opens allows remote attackers
to gain the control of your computer. This new worm
is spreading rapidly around the world now
and it is a serios new threat that hits users.
Due to this, we are providing you to remove the
infection on your computer and to
stop the spreading of the malware with a
.special desinfection tool attached to this mail.
If you have problems with the virus removal file,
please contact our support team at <from.address>.
Note that we do not accept html email messages.
<random.team>
Attach: <attachment.name>
--------------------------------------------------------------------------------
This is the
W32.Netsky.AC@mm is a worm that scans for the email addresses on all non-CD-ROM drives on an infected computer. The worm then uses its own SMTP engine to send itself to the email addresses that it finds.