QUOTE
We've received several reports of emails, warning about a new virus called "Kongo31.XRW" (which doesn't exist). The email links to a fake McAfee site, hosted in Canada: The download link gets you a file called ak26xrw-patch-installer-win32.exe - which (surprise, surprise!) is infected with Trojan-Downloader.Win32.Hanlo.h.


Please delete all associated email claiming to offer update protection from Kongo31.XRW. McAfee does not send out email notices link this way and you should continue to update through normal channels.

Kongo31.XRW -- False McAfee download links
http://www.f-secure.com/weblog/archives/ar...5.html#00000733

Kongo31.XRW -- email Example
http://www.f-secure.com/weblog/archives/mcafeecenter.gif