New Virus/Email Worm? Retirement Subject Lines

This appears to be a new virus/worm unknown to the major threat
databases.

McAfee is huristically stopping us from spreading the virus, but
neither McAfee nor several of the online virus checkers detect the
malware.

It's easy to see by the subject lines:

"Retire in 10 years."

"R is for retirement."

"Retirement is closer than you think."

"Retirement for everyone."

Has anyone encountered this worm? Any help would be greatly
appreciated.

Thank you!

Joe Winett
Joseph M. Winett
Tulsa, Oklahoma, USA

Re: New Virus/Email Worm? Retirement Subject Lines

On this special day, Joe wrote:

> It's easy to see by the subject lines:
>
> "Retire in 10 years."
>
> "R is for retirement."
>
> "Retirement is closer than you think."
>
> "Retirement for everyone."

This doesn't look like a virus, but rather like spam, which means, there
is a bot/backdoor installed, that is remotely controlled and has been
told to send spam into the net.


Gabriele Neukam

Gabriele.Spamfighter.Neukam@t-online.de


--
Ah, Information. A property, too valuable these days, to give it away, just so, at no cost.

Re: New Virus/Email Worm? Retirement Subject Lines

> This doesn't look like a virus, but rather like spam, which means, there
> is a bot/backdoor installed, that is remotely controlled and has been
> told to send spam into the net.

Yes, it does sound like a spam program running, but I have no idea what
the body of the emails contain.

Wouldn't a remote control / backdoor sort of malware be normally found
by anti-virus software? Seems like it would be caught.

Thanks for your reply!

Joe Winett
Tulsa, Oklahoma, USA

Re: New Virus/Email Worm? Retirement Subject Lines

From: "Joe"


|
| Yes, it does sound like a spam program running, but I have no idea what
| the body of the emails contain.
|
| Wouldn't a remote control / backdoor sort of malware be normally found
| by anti-virus software? Seems like it would be caught.
|
| Thanks for your reply!
|
| Joe Winett
| Tulsa, Oklahoma, USA

What is the attachment ?

If there is no attachment then it isn't a virus.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Re: New Virus/Email Worm? Retirement Subject Lines

Joe wrote:

> McAfee is huristically stopping us from spreading the virus,
> but neither McAfee nor several of the online virus checkers
> detect the malware.
>
> It's easy to see by the subject lines:

I don't understand.

Is McAfee quarantining incoming e-mail with certain subjects, or is it
blocking out-going e-mail with those subjects?

I wouldn't think that a spam-spewing trojan mailer would submit
outgoing e-mail to any installed AV software...

Re: New Virus/Email Worm? Retirement Subject Lines

> Is McAfee quarantining incoming e-mail with certain subjects, or is it
> blocking out-going e-mail with those subjects?

It was stopping the outbound emails detected through repeated subject
lines and number of messages sent per second.

BUT, it wasn't giving information about which program was sending the
mail.