The Best Book virus
September 30, 2008 Leave a Comment
MX Lab has intercepted a few samples of an email containing a virus in an Approved.zip. The email can contain following subjects:
The Best Book
Excellent Book
Magnificent Book
Splendid Book
Amazing Book
The messages contains the following content:
Hello Friend,
Your new book has brought a lot of excitement to our editorial staff. It’s certainly this year’s best in its genre. You seem to never going to quit surprising us. We have made a contract with you and guarantee that the first edition will total at least 10 million copies.
Enclosed is the approved and edited copy of your amazing book. Thank you for this paragon of beauty.
Please get in touch with us at your earliest convenience.
Untill we meet again
Like some other nasty viruses this one isn’t been detected a lot. Only 10 anti virus engines detect this one as Trojan.Win32.Agent.afer (F-Secure), Trojan.Downloader-56258 (Clam-AV) or Troj/Agent-HTZ (Sophos). Virus Total permalink and MD5: 2102201e29368e0fa99ab5551f5ce9d2.
