Daily Archives: September 10, 2010

I posted this because there are so many of you that are so desperate for any kind of attention that you will open virtually any email from anyone that sends it to you. Its the “Here You Have” virus and it basically turns your computer into a spam server.

If you should see an email in your inbox with the title “Here You Have” or for that matter any email from anyone you don’t know or recognize, for Gods sake don’t open it. Delete it unread. JD

A global e-mail virus spammed inboxes this afternoon, slowing — and in some cases halting — work at offices around the world as employees watched their inboxes inexplicably fill with e-mails under the subject line “Here you have.” Some workers were forced to go without e-mail altogether, as the flood of spam put their services out of commission.

Organizations including NASA, Comcast, AIG, Disney, Proctor & Gamble, Florida Department of Transportation and Wells Fargo are just a few of the organizations apparently affected by the worm, which appears to have sent out hundreds of thousands, if not millions of e-mails.

When contacted by ABCNews.com, security firm McAfee said it was investigating the attack but confirmed that it had affected corporations around the world. Although McAfee did not disclose how widespread the attack was, around 4 p.m. Thursday afternoon, the subject of the spam e-mail, “Here you have,” was the second hottest search on Google trends.

Dmitri Alperovitch, vice president of threat research at McAfee, told ABCNews.com that the company was investigating the attack.

“We do know that it’s essentially an e-mail based worm that’s propagating that has a link that alleges to be a pdf document that it wants the user to click on,” he said. “In reality, it’s a piece of malware that’s obfuscating as a pdf and it has the capabilities to spread virally once it’s installed on your machine.”

One version of the spam e-mail simply says, “Hello: This is The Document I told you about, you can find it here” and includes a link that appears to be a pdf document.

Another version of the worm includes the subject “Just For you” and says “This is The Free Dowload Sex Movies,you can find it Here.”

If a user clicks the link and downloads the virus, it spreads to contacts in that individual’s e-mail account and continues to propagate. McAfee also said that it attempts to stop and delete security services. McAfee says it has coverage for at least the main strain of the virus.

If you receive the messages, McAfee says to delete the message without clicking the link and alert your IT office.

Security firm Symantec said the worm appears to be a new malware attack but is similar to the “Anna Kournikova” virus from 2001, which also carried the subject “Here you have.” (The virus tricked users into opening an e-mail message supposedly containing a picture of tennis player Anna Kournikova.)

Symantec speculates that the threat — initially named Trojan.Horse but renamed to W32.Imsolk.A@mm — originated from a botnet and appears to be hitting “many, many companies indiscriminantly.”