Forwarded virus alert warns of malicious software associated with seemingly harmless email messages entitled 'Here you have' or 'Here you have it.' The alert contains a mixture of true and false information.
Description: Forwarded virus alert
Circulating since: Sep. 2010
Status: Mixed (see details below)
Example #1:
Email contributed by Mikpar, Oct. 15, 2010:
Subject: Virus Alert
READ IMMEDIATELY !!!!!!!!!!!!
VERY IMPORTANT! PLEASE READ THIS - These e-mails are floating around currently in HP Anyone-using Internet mail such as Yahoo, Hotmail, AOL and so on. This information arrived this morning, Direct from both Microsoft and Norton Please send it to everybody you know who has Access to the Internet. You may receive an apparently harmless e-mail titled "Here you have it" If you open either file, a message will appear on your screen saying: 'It is too late now, your life is no longer beautiful....'
Subsequently you will LOSE EVERYTHING IN YOUR PC, And the person who originated it will gain access to your Name, e-mail and password. This is a new virus which started to circulate on Saturday afternoon.
AOL has already confirmed the severity, and the anti virus softwares are not capable of destroying it.
The virus has been created by a hacker who calls himself 'life owner'.
PLEASE SEND A COPY OF THIS E-MAIL TO ALL YOUR FRIENDS, And ask them to PASS IT ON IMMEDIATELY!
THIS HAS BEEN CONFIRMED BY SNOPES.
Example #2:
As posted on Facebook, Sep. 22, 2011:
Re-Post: ATTENTION PLEASE: Anyone-using Internet mail such as Yahoo, Hotmail, AOL and so on. This information arrived this morning, Direct from both Microsoft and Norton. Please send it to everybody you know who has Access to the Internet. You may receive an apparently harmless e-mail titled "Here you have it". If you open the file, a message will appear on your screen saying: 'It is too late now, your life is no longer beautiful, f*** you and die....'
Subsequently you will LOSE EVERYTHING IN YOUR PC. And the person who sent it to you will gain access to your Name, e-mail and password, etc. This is a new virus which started to circulate on Saturday afternoon. AOL has already confirmed the severity, and the antivirus software's are not capable of destroying it. ... The virus has been created by a hacker who calls himself 'life owner'. PLEASE SEND A COPY OF THIS E-MAIL TO ALL YOUR FRIENDS, And ask them to PASS IT ON IMMEDIATELY. Thank u!
Analysis: These warnings contain a mixture of true and false information. Antivirus experts confirm there is an actual computer virus (or "worm," more properly) dubbed "Here You Have" because it downloads itself via links in emails with that title.
However, contrary to what's claimed above it does not circulate as an attached file, nor will inadvertently downloading it cause you to "lose everything in your PC," or cause your personal information to be transmitted to the author of the malicious program.
What it does do, should your PC become infected, is attempt to disable your antivirus protection and send copies of the email to everyone it finds in your address book. Symantec offers a removal tool and technical information here.
The false description of the virus appears to have been copied from a hoax circulating since 2002.
This ought to go without saying, but it's probably worth repeating for good measure: Never click on links in unsolicited emails or open unknown file attachments unless you're reasonably sure they're legitimate. That is how most network viruses are transmitted.
Share This Article
Sources and further reading:
New Round of Email Worm, 'Here You Have'
Symantec, 9 September 2010Primitive 'Here You Have' Email Worm Spreading Fast
ZDNet, 10 September 2010Mass Email Worm Outbreak: W32.Imsolk.B@mm
Symantec, 11 September 2010'Life Is Beautiful' Virus Hoax
Urban Legends, 30 November 2006
Last updated 09/22/11
