LOC Hoax

Content

LOC Hoax

Type: Hoax
SubType: -
Discovery Date: 07/10/2001
Length
Minimum DAT: N/A ( )
Updated DAT: N/A ( )
Minimum Engine: 5.1.00
Description Added: 07/10/2001
Description Modified: 07/10/2001 8:26 AM (PT)

Risk Assessment

Corporate User: N/A
Home User: N/A

Tab Navigation

Characteristics

AVERT HOAX Notice!!

McAfee AVERT Labs would like to inform you of a new email HOAX.

Although many similar threats do exist, this email message is not based on actual events. The quotations presented are fabricated, as is the notion that this "threat" is difficult to locate, etc. This email message was not distributed by McAfee or McAfee.com.

We are advising users who receive the email to delete it and DO NOT pass it on as this is how an email HOAX propagates.

Below is the actual text from the message that may be received via email.

Dear registered user,

There is a new malicious virus on the loose wich will search your harddisk for PWL and registry files and send those back to an unknown internet address as soon as your computer goes online again or it will start up your internet connection by itself.

In addition to the PWL and registry files it will also send out other security sensitive information like your IP address and machine name.

Along with this a signaling tool will remain present on your system!

Looking through your PWL and registry files will enable the receiver online access to your system as soon as you get back online. The anonymous receiver will then have full access to all your programs and data on your harddisk and will even be able to delete files from it!

Other things that can be done with your PWL and registry data is sending fake messages using your address or access password protected sites.

Computer specialists at McAfee say this is a totally new aproach on the  regular type of virus, which will normally "just" destroy your data and disable your system. "With this human factor in mind the  possibilities are virtually endless!"

Finding the hidden program on your computer is very hard on systems running Window NT/2000 and almost impossible on systems running other version of Windows. Because of the LOC(FF) based coding routines
many variant all already spreading around Asia and the South of Europe.

For more information, please visit http://vil.nai.com/vil/dispVirus.asp or the McAfee virus definition library at http://www.mcafee.com. Learn how to remove the routines, once you are infected, at the McAfee
online virus removal tutorials. An update will also be available soon. Secure your system (in case of infection) by removing your PWL files and change ALL passwords that are sensitive to online usage.

Again, if you receive this email delete it and DO NOT pass it on.
McAfee AVERT

Symptoms

Method of Infection

Removal

Variants

N/A

All Information

Overview -

Characteristics

Characteristics -

AVERT HOAX Notice!!

McAfee AVERT Labs would like to inform you of a new email HOAX.

We are advising users who receive the email to delete it and DO NOT pass it on as this is how an email HOAX propagates.

Below is the actual text from the message that may be received via email.

Dear registered user,

In addition to the PWL and registry files it will also send out other security sensitive information like your IP address and machine name.

Along with this a signaling tool will remain present on your system!

Other things that can be done with your PWL and registry data is sending fake messages using your address or access password protected sites.

McAfee > Theat Center > Virus Detail Page

Navigation

Utility Navigation

Global Sites

Need Help?

Threat Center

Segment Navigation

Section Navigation

Content

LOC Hoax

Risk Assessment

Tab Navigation

Overview

Characteristics

Symptoms

Method of Infection

Removal

Variants

Variants

All Information

Overview -

Characteristics

Characteristics -

Symptoms

Symptoms -

Method of Infection

Method of Infection -

Removal -

Removal -

Variants

Variants -

Threat Resources

Footer