Comments on: “Parcel requires declaration” virus

By: Chad

Chad — Thu, 24 Jul 2008 22:44:26 +0000

Got it today at 2:07 PM from “Customs Service”

Good day,

We have received a parcel for you, sent from France on July 9. Please fill out the
customs declaration attached to this message and send it to us by mail or fax. The
address and the fax number are at the bottom of the declaration form.

Kind regards,
Lakisha Mooney
Your Customs Service

By: mxlab

mxlab — Thu, 24 Jul 2008 22:36:52 +0000

There is a permalink in the article to Virus Total. But here they are: eSafe, Sophos and VBA32 detected the trojan based on a file scan of 22:32 PM.

It’s quite difficult to give a top three on AV engines. It all comes down to how the AV engine performs on overhead and load on the computer, speed of definiton updates and other specific requirements for a client. Each client also has a different expectation pattern of such software. When I like AV engine X, some else could hate or had troubles with it in the past.

A few days ago someone told me that Trend Micro was horrible and slowed down his computer a lot while I provide Trend Micro OfficeScan for clients and have copy running on a Pentium III 1Ghz, 512 MB, Windows XP (a very old computer) without troubles. It’s possible that he had a different version but this gives you an idea. A top three for me is not a top thee for you and vice versa.

By: Joshua Erdman

Joshua Erdman — Thu, 24 Jul 2008 22:14:35 +0000

Several of our clietns have recieved these emails, only two PCs have been inffected. You previously stated that only 3 AV engines have detected this. What were they. Currenlty most of our clietns are using Symantec AV.

What would you rate as the top three AV engines?

By: mxlab

mxlab — Thu, 24 Jul 2008 21:43:05 +0000

I have enough of these emails intercepted so if I need to analyse one I got plenty of choice. Thanks for the offer.

By: Catherine Christofferson

Catherine Christofferson — Thu, 24 Jul 2008 21:29:16 +0000

Got 2 emails with this virus today.

Would be glad to forward you the email if you want…

—— Forwarded Message
From: Customs Service
Date: Thu, 24 Jul 2008 10:40:39 -0800
To:
Subject: Parcel requires declaration

Dear Sirs,

We have received a parcel for you, sent from France on July 9. Please fill
out the customs declaration attached to this message and send it to us by
mail or fax. The address and the fax number are at the bottom of the
declaration form.

Kind regards,
Maritza Patton
Your Customs Service