Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.

Got You Hoax

Got You Hoax

Discovered:
May 27, 2003
Updated:
February 13, 2007



The following hoax has been circulating by email. The text at the end of the message is designed to deceive you into thinking that it is the "code" of the worm.

Several variants have been seen. One variant has fewer lines of the fake "code" and is signed "Evocash Administration Inc."

Evocash is a legitimate Web site and the message is not from Evocash.

The most common variant is as follows:

"GOT YOU"

If you were dumb enough to open this email then you will find a WORM has executed itself through your mailbox and by the time you read this into your hard-drive. This is PAYBACK for the Virus you disguised in the email you sent to us recently which destroyed our hard-drive and back-up system. This costs us thousands of dollars and we lost a lot of irreplaceable files on our system.

Now it's your turn to have your computer. Because this is a WORM it is virutally undetectable by AntiVirus software and it will also replicate itself with your email address in the code to everyone you communicate with, I'm sure your friends and colleagues will just love you for this. This WORM will drive you and your
computer crazy because it's always hiding and causing havoc in your system. Using your computer recovery disks will not remove the problem cause it still stays on your computers Motherboard. This will proabably cost you a new computer and I sincerely hope this teaches you a lesson not to send people
nasty viruses again.



----^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^!

+Start^=Auto^Execute+^WORM^-------

-----^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------!

^+Start^=Auto^Execute+^WORM^------

------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^-------------^+Start^=Auto^Execute+^WORM^---------
Please ignore any messages regarding this hoax and do not pass on messages. Passing on messages about the hoax only serves to further propagate it.

Writeup By: George Koris