McAfee > Theat Center > Virus Detail Page

Overview

Characteristics

AVERT HOAX and Virus Update!!

NAI Labs AVERT would like to inform you of a new email HOAX that has an association with a real virus.

We are advising users who receive the email below to delete it and to NOT pass it on as this is how an email HOAX propagates.

Below is the actual text from the message that may be received via email.

If you've had forwarded Frog blender and Fish bowl to you, PLEASE get rid of them ASAP. Seems there is a terrible virus attached to them set to go on MAY 28th. If you do not delete them, your hard drive will get wiped out. Please delete these two immediately and run your virus protection.

Please be advised:
That I have been informed that the joke regarding the frog being splattered in a blender and the similar fish joke both contain viruses set to execute on the 28th of May and if you still have them on your hard drive to delete them a.s.a.p.

The programs were called blender.exe and fish.exe. PLEASE make sure everyone has deleted it and run their virus check program.

This virus is the worst one yet - it wipes your harddrive completely. Remember to check your temp. files as well to make they are not lurking there, and also to make sure that you empty out your Recycle / Delete bins.

Regards

Please forward this to anyone you may have sent this e-mail to!!!
__________________________________
- This is the end of the email message

Again if you receive this email delete it and DO NOT pass it on

While AVERT is advising users to delete the message above, we are also cautioning users about the files mentioned in the email. There have been isolated cases where the files, a.k.a Frog in the Blender, and Fish-in-a-Bowl have been infected with the CIH virus, which has a payload date of the 26th, not the 28th. In most cases the files analyzed by AVERT do not have the infection.

AVERT advises all users to scan all files received via email before running them and in this case the best approach is to delete them. If you have either, or both files; have scanned them and got a clean report, but still have a concern send them to virus_research@avertlabs.com .

AVERT
A Division of NAI Labs

Symptoms

Method of Infection

Removal

-

Variants

Variants

N/A

All Information

Overview -

Characteristics

Characteristics -

AVERT HOAX and Virus Update!!

NAI Labs AVERT would like to inform you of a new email HOAX that has an association with a real virus.

We are advising users who receive the email below to delete it and to NOT pass it on as this is how an email HOAX propagates.

Below is the actual text from the message that may be received via email.

If you've had forwarded Frog blender and Fish bowl to you, PLEASE get rid of them ASAP. Seems there is a terrible virus attached to them set to go on MAY 28th. If you do not delete them, your hard drive will get wiped out. Please delete these two immediately and run your virus protection.

Please be advised:
That I have been informed that the joke regarding the frog being splattered in a blender and the similar fish joke both contain viruses set to execute on the 28th of May and if you still have them on your hard drive to delete them a.s.a.p.

The programs were called blender.exe and fish.exe. PLEASE make sure everyone has deleted it and run their virus check program.

This virus is the worst one yet - it wipes your harddrive completely. Remember to check your temp. files as well to make they are not lurking there, and also to make sure that you empty out your Recycle / Delete bins.

Regards

Please forward this to anyone you may have sent this e-mail to!!!
__________________________________
- This is the end of the email message

Again if you receive this email delete it and DO NOT pass it on

While AVERT is advising users to delete the message above, we are also cautioning users about the files mentioned in the email. There have been isolated cases where the files, a.k.a Frog in the Blender, and Fish-in-a-Bowl have been infected with the CIH virus, which has a payload date of the 26th, not the 28th. In most cases the files analyzed by AVERT do not have the infection.

AVERT advises all users to scan all files received via email before running them and in this case the best approach is to delete them. If you have either, or both files; have scanned them and got a clean report, but still have a concern send them to virus_research@avertlabs.com .

AVERT
A Division of NAI Labs

Symptoms

Symptoms -

Method of Infection

Method of Infection -

Removal -

Removal -

-

Variants

Variants -

N/A