Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Kongo31.xrw -- False Mcafee Download Links


  • Please log in to reply
No replies to this topic

#1 harrywaldron

harrywaldron

    Security Reporter


  • Members
  • 509 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:06:20 PM

Posted 13 December 2005 - 05:15 PM

We've received several reports of emails, warning about a new virus called "Kongo31.XRW" (which doesn't exist). The email links to a fake McAfee site, hosted in Canada: The download link gets you a file called ak26xrw-patch-installer-win32.exe - which (surprise, surprise!) is infected with Trojan-Downloader.Win32.Hanlo.h.


Please delete all associated email claiming to offer update protection from Kongo31.XRW. McAfee does not send out email notices link this way and you should continue to update through normal channels.

Kongo31.XRW -- False McAfee download links
http://www.f-secure.com/weblog/archives/ar...5.html#00000733

Kongo31.XRW -- email Example
http://www.f-secure.com/weblog/archives/mcafeecenter.gif

BC AdBot (Login to Remove)

 


m



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users