Worm.Automat.AHB

[Eric]

recently, I started recieving e-mails from many people I
have never heard of. Some of the e-mails had a click here
hyperlink to be removed. Once I clicked it, the site
asked for my e-mail address. Once entered it typically
gave me an error. I believe this was a trick to get me to
download the above worm. Based on the number of e-mails I
have received it apparently worked. The precautions I
have in place are as follows: 1) wireless router(not sure
this is much of a precaution) 2) Norton Antivirus, with up
to date definitions. 3) All updates from XP installed 4) I
recently downloaded Trojan Remover and ran the program.

Neither Trojan Remover nor, Norton Antivirus found any
problems. I also did a file search for Worm.Automat.AHB
and found nothing. However, I keep getting e-mails and
additionally, it seems, although I can't be certain, that
my computer is still sending e-mails. I believe my system
is still sending because I keep receiving e-mails from
Microsoft basically saying (mostly titled "Net Security
Pack") an e-mail I just sent was infected. I view these e-
mails in preview pane but don't attempt opening the
deleted.txt file. It seems like these e-mails may be
another attempt at installing a worm virus and not
actually from Microsoft (the e-mail address on this last
one is "puomcvuwns@confidence_msdn.com". This doesn't
seem like a legitimate Microsoft e-mail address.

can anyone please address each of my concerns?
1) Analyze the protection I listed above and it's adequacy
2) Recommend any other protection considerations
3) Tell me if I have this worm and if so, how to find it
and rid myself of it.
4) Tell me if the "Microsoft" e-mails I am receiving are
not really from Microsoft?

Thanks!!
Sorry so long!

-Eric

 

[taurarian]

http://www.symantec.com/avcenter/venc/dyn/42036.html

 

[Kent W. England [MVP]]

Your biggest problem is not understanding that the emails you are
getting are not replies to any messages you have sent. These emails are
forged or replies to forged emails sent by other people's viruses.

You must learn not to trust your email addresses. You must examine
received messages carefully and if the message seems bogus, it likely is
bogus.

If you continue to click on bogus email attachments, you certainly will
get a virus or a trojan. Dial up your skepticism setting a bit more, say
to seven or eight.

If your IP address is 192.168.x.x, you have some firewall security from
your router, but I would recommend you get a personal firewall like the
ZoneAlarm to keep an eye on your applications. These firewalls can help
discover malicious software that may slip past your defenses.

I'm not familiar with Trojan Remover. The web site looks legitimate, but
be aware that there are malicious tools, so you should read reviews of
free tools before downloading and using them.

The emails you are receiving from Microsoft are not from Microsoft.
Don't open those attachments, but you can scan them with your AV for fun
and to see what bug they contain.