A new Internet worm has been discovered. It has been named W32/Lebreat.A Worm. W32/Lebreat.A worm is spreading rapidly via the Internet. You are advised not to open any email attachments, until and unless it is scanned by Protector Plus.
About the W32/Lebreat.A Worm:
W32/Lebreat.A is an email worm. This worm will infect Windows systems. The worm spreads through email.
If you receive any email suggesting that it is from an administrator and the email has any attachment listed below, then it could be W32/Lebreat.A worm.
The subject can be any of the following:
**WARNING** Your Account Currently Disabled. Email Error Hello Importnat Information Mail Delivery System Message could not be delivered Password info
The infected email you receive will have a spoofed 'From' address. The email is not sent by the person mentioned in the 'From' address. The body of the infected email contains any one of the following sets:
1. Your credit card was charged for $500 USD. For additional information see the attachment.
2. You have successfully updated the password of your domain account checkout the attachment for more info.
3. The message contains Unicode characters and has been sent as a binary attachment.
4. Binary message is available.
5. Here are your banks documents
It carries an infected attachment having random filename with single or double extensions. The last extension of the infected attachment will be .PIF, .SCR, .CPL, .BAT or .EXE .
Instructions to remove the W32/Lebreat.A worm from your computer:
An emergency virus database update to detect and remove this worm is available to the users of Protector Plus anti-virus software. To download this update from our web site, right click on Protector Plus icon from the system tray then select 'Update Virus Database now!' from the menu.
Others can download a 30 day, fully functional evaluation copy from:
The evaluation copy will detect and remove this Internet worm and also all other known viruses, trojans and worms.
You are welcome to use this information to help any one who might need or benefit from it. If you have questions or issues in the usage of Protector Plus, please write to [email protected] .
This alert is coming to you from the Virus Emergency Response Team at Proland Software. The reason this alert is being sent to you is because either you or someone acting on your behalf, subscribed to the Virus Alert Mailing List maintained by us.
If you do not wish to receive further alerts, please send a return mail to [email protected]