:   :  : ::: fade-in ||| University of Maryland ||| fade-out ::: :  :   :

MDK-12 Community --
Internet Hoax Resources

"Look before you leap!"

blue line

False virus/trojan warnings and other email scams
Urban legends

 
False Virus/Trojan Warnings and Other Email Scams

Real Protection

If you really want protection from viruses and other "attack-ware" -- such as scripts hidden in HTML-formatted mail -- you should take two steps:

  1. Install anti-virus software on your computer and keep it absolutely up-to-date -- most anti-virus products now provide some form of automatic updating via the Internet, AND
  2. Follow the "beyond-anti-virus-software" security steps outlined on our University of Maryland HelpDesk site:

    http://www.helpdesk.umd.edu/virus/other.shtml

Since Microsoft products (Windows, Internet Explorer, Outlook and Outlook Express, etc.) are the most commonly attacked programs, Microsoft is constantly putting out patches to fix the security holes in these programs. They have a Security Program notification list which informs its subscribers of these holes and the patches available. Many of the notifications are for software the average user wouldn't be using, but occasionally one comes out for a program you on which you may be dependent. If you want to try subscribing to the list, send mail containing the single line "subscribe microsoft_security" to

listserv@announce.microsoft.com


The Internet is full of scary reports on viruses, and greed-grabbing invitations to get-rich-quick, and tear-jerking exhortations to save-this-dying-child -- and, yes,
petitions. Each one of these chain-mail messages urges you to send it to as many of your friends and colleagues as possible. Each one of them has the potential to unnecessarily misinform, annoy, or frighten a large number of people, and clog a large number of networks.

Danger! -- Click here for an example of how ridiculous, and potentially dangerous, this kind of behavior can be.

Look before you leap! -- Do your friends and colleagues -- and the whole Internet community -- a big favor. If a chain-mail item arrives in your mailbox, urging you to pass it on, STOP! Check with one or more of the following sites to see just which parts of it (if any!) are true, or are known to be false.

These chain mail frauds are started by people who enjoy (or get a big boost of self-esteem by) seeing a huge number of other people make fools of themselves. You really don't need to support such twisted personality needs by being one of the fools, or helping your friends to be.

A Better Idea -- if you receive such a warning, check one of the authoritative anti-hoax sites listed below.

And even better -- Tell the person who sent you the note about the hoax, and suggest that that person pass on the information both to the people s/he sent the message to AND to the person from whom s/he got the message. We'll even provide you with some suggested text.

Is there anything funny about this? -- If you have a wry sense of humor, you might enjoy a wry commentary on chain mail.

False Authority Syndrome

Many of the fake (or overstated) virus warnings that people send to this site for checking come with an attached note saying something like "I received this from someone I trust..." or "Our computer person sent this around...". The fact that such trusted people make this mistake is far more damaging than if "normal" people did it. Expert Rob Rosenberger (see the "Virus myths" site below) has a scathing commentary on False Authority Syndrome -- a very useful piece to touch base with, whether you dispense or receive virus information. Don't risk being duped twice (by the author and the expert who passes it on). Please take personal responsibility and Look before you leap. It's easy.


Here are some good hoax-monitoring sites:


  1. Computer Virus Myths -- try this first!
    (http://vmyths.com/)
    Excellent source, easy to use, good search tool, not limited to viruses.
    (Lots of cookies, but dodging them doesn't seem to impair function.)


  2. US DOE Computer Incident Advisory Capability (CIAC) Hoax-Busters team
    (http://HoaxBusters.ciac.org/)

  3. Network Associates (formerly McAfee)
    (http://vil.nai.com/VIL/hoaxes.asp)
    (In addition, their Virus Information Library has a searchable database of real viruses.)

  4. Symantec
    Has a searchable virus and hoax database
    (http://www.symantec.com/avcenter/hoax.html)

  5. F-Secures
    Has a searchable virus and hoax database
    (http://www.europe.f-secure.com/hoaxes/hoax_index.shtml)

  6. Trend Micro Hoax encyclopedia
    Has a searchable hoax database with a link to their searchable Virus Info database (their only problem is their advisory that not opening attachments or double clicking documents will ultimately protect you from all the attack-ware that may come your way)
    (http://www.antivirus.com/vinfo/hoaxes/hoax.asp)

  7. The Mining Company
    (http://antivirus.about.com/compute/antivirus/library/blenhoax.htm)
    Good analysis and reference to original sources, though with limited search capability

  8. David Spalding's Korova Multimedia "e-v-mail" site
    (http://korova.com/virus/)
    Good overview of the whole hoax problem. Click the Hoax du Jour link for details on a number of viruses.

  9. Stiller Research (Anti-Virus) hoax page
    (http://www.stiller.com/hoaxes.htm)

  10. Hoaxes, Hooey, and Hogwash
    courtesy of the University of Michigan Virus Busters team
    (http://www.umich.edu/~virus-busters/#hoaxes)


 
Urban Legends

These sites can help you check to see if the latest story you read is as old as the hills. Not to be judgemental, but enjoying a story that has been around the block 50 times in 20 years because it's a GOOD STORY is a a lot better tha enjoying it because you think it is TRUE.

  1. The Mining Company, Urban Legends section -- try this first!
    (http://urbanlegends.miningco.com/)
    David Emery, the "guide" here, does a wonderful job of researching and analyzing e-mail messages with hoax potential.

  2. The AFU and Urban Legends Page
    (http://www.urbanlegends.com/)
    The AFU (alt.folklore.urbanlegends) Usenet newsgroup is the "official" repository and discussion location for these stories. This compendium is very well organized.


  3. The E-Mail Folklore Page
    (http://www.people.virginia.edu/~ymb5v/)
    Yvonne Banks' very engaging compendium of email-promulgated lore, with a section devoted to chainletters, and a good page of urban-legend links (and a wicked animation in the brief virus section :-).

  4. Terry Chan's Main Urban Folklore Page
    (http://www.nardis.com/~twchan/afu.html)

  5. Urban Legends
    (http://www.faqs.org/faqs/folklore-faq/part3/)
    Frequently-Asked-Questions from the "alt.folklore.urban" newsgroup (parts 3-4 are legend summaries, part 5 has a bibliography)


Reviewed: 9 August 2002
Questions, comments, and/or suggestions should be directed to "mdk12-editor 'at' umd.edu"