Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.

WTC Survivor Hoax

WTC Survivor Hoax

Discovered:
October 29, 2001
Updated:
February 13, 2007



The first version of this hoax began circulating in October 2001:

I just received a couple of emails regarding a "new" virus with the following message in the body of the email:

Date: Wed, 24 Oct 2001 08:50:15 -0500
Subject: Fwd: FW: Warning- New Virus: "WTC Survivor"

Dear All,

BIGGGG TROUBLE !!!! DO NOT OPEN "WTC Survivor"
It is a virus that will erase your whole "C" drive. It will come to you in the form of an E-Mail from a familiar person. I repeat a friend sent it to me, but called and warned me before I opened it. He was not so lucky and now he can't even start his computer! Forward this to everyone in your address book. I would rather receive this 25 times than not at all.

If you receive an email called "WTC Survivor" do not open it. Delete it right away! This virus removes all dynamic link libraries (.dll files) from your computer.

Another version of this hoax began circulating in September 2003:

Very Important

During the next several weeks be VERY cautious about opening or launching any e-mails that refer to the World Trade Center or 9/11 in
any way, regardless of who sent it. PLEASE FORWARD TO ALL YOUR FRIENDS AND FAMILY. FOR THOSE WHO DON'T KNOW, "WTC" STANDS FOR THE WORLD TRADE CENTER. REALLY DANGEROUS BECAUSE PEOPLE WILL OPEN IT RIGHT AWAY, THINKING ITS A STORY RELATING TO 9/11!

BIGGGG TROUBLE !!!! DO NOT OPEN "WTC Survivor" It is a virus that will erase your whole "C" drive... It will come to you in the form of an E-Mail from a familiar person. I repeat, a friend sent it to me, but called and warned me before I opened it. He was not so lucky and now he can't even start his computer!

Forward this to everyone in your address book. I would rather receive this 25 times than not at all. So, if you receive an email called "WTC Survivor", do not open it. Delete it right away! This virus removes all dynamic link libraries (.dll files) from your computer.

A Spanish version also exists:

PELIGRO !!!!!!!!!

Durante las próximas semanas, sean muy cautelosos y cuidadosos en abrir cualquier correo electrónico que se refiera al desaparecido Centro Mundial de comercio (World Trade Center), o 9/11, Sep. 11, en cualquier forma, no importa quien lo envíe.
Graves problemas si abres "WTC Survivor" o "WTC Sobreviviente". Es un Virus que borrara completamente el disco duro de tu computador y llega a ti en forma de un correo, (E-Mail) enviado por un conocido o Familiar.
Envía esta información a todas las personas en tu libreta de direcciones.
Recuerda que es preferible recibir este 25 veces que no haberlo recibido jamás.
Si recibes este correo llamado "WTC Survivor" NO LO ABRAS!!!! Bórralo inmediatamente; este virus borra todos los enlaces dinámicos de tus archivos y biblioteca (all files).

Please ignore any messages regarding this hoax and do not pass on messages. Passing on messages about the hoax only serves to further propagate it.
Writeup By: George Koris