Alerts left arrow right arrow   

Virus Email - HM Revenue & Customs Helping your Business Online

Comments  +
Virus Email - HM Revenue & Customs Helping your Business Online

The email message below: "Helping your Business onile," has a virus or Trojan horse attached to it that will infect your Windows computer if you open it. The message was not sent by HM Revenue & Customs and was designed to trick the recipients into opening the malicious attachment, disguised as HMRC Small Business Grant registration form. So, if you receive the same email message, please do not attempt to open the attachment.

The Virus Email Message

Subject: Helping your Business onile

HM Revenue & Customs

To the Financial Controller,

HMRC can help you with the first steps if you are a small or Medium sized business understand The New Government Grant Scheme through three free webinars where you can ask our experts questions whilst you are online.

Small Business Grant Scheme and HMRC-what you need to know. Mon 1 Sep at 10.30 am

When you open registration form, you will be asked to provide your name and a valid email address, so that we can send you a link to attend.

You do not need a camera or microphone to attend a webinar. Even if you do have these, the webinar will not activate them, and our presenters will not be able to see or hear you during the webinar.

If you wish, you can still ask questions by typing them into the text box in the webinar screen. Our presenters will explain how to do this during the webinar.

Colin Ford: Head of SME Education

The attachment "" contains the malicious file "". Note: The attachment name may change.

We found the following threats after scanning the malicious file:

  • Trojan/Win32.Zbot
  • Win32:Malware-gen
  • W32/Trojan.CEFS-2974
  • Trojan.DownLoad3.32784
  • a variant of Win32/Injector.BKJI
  • F-Prot W32/Trojan3.KEJ 20140821
  • Trojan.Zbot

The cybercriminals behind these malicious email messages aims are to trick the curious recipients into opening the malicious attachment that will infect their computers with a virus or Trojan horse.

Once your computer has become infected with this malicious Trojan horse, the cybercriminals behind this email message will be able to access and take control of your computer remotely from anywhere around the world. They may spy on you, use your computer to commit cybercrimes, or steal your personal and financial information.

Now, if you have already opened anyone of these malicious attachments, please do a full scan of your computer with the antivirus software installed on it. The name of the attachment may change, so be careful when opening email attachments.

If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.

Never open an attachment that has a name ending with “.exe”, because these are computer programs that can infect your computer with a virus or some other malware.

Click here for a list of email attachments you should never open, regardless of where they came from.

For a list of other virus email messages, please click here.

Please share with us what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward malicious or phishing email messages to us at the following email address:

Comments, Questions and Reviews

Comment(Total: 0)

Write a Comment, Review, or ask a Question or scroll down to view comments, reviews and questions made by others.

Would you recommend this article to a friend or family member?
Yes (0) No (0)   

Submit Comment Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.
All comments, questions or reviews will be examined for derogatory or indecent statements, spam or malicous code, before they are posted on this website.

More for you:
Warning! JavaScript is turned off or disabled! Some features on this website will not work.