Set up notification from The Bat
June 12, 2009 Leave a Comment
Emails with the subject “TheBat Setup Notification” or “Outlook Express Setup Notification” have malware attached in the form of a zip file named client_update.zip. The malware is the extracted file client_update.exe and is the trojan Mal/WaledPak-A (Sophos), W32/Trojan3.AYA (F-Prot), Trojan-Downloader.Win32.FraudLoad.epb (Kaspersky) or Win32/TrojanDownloader.Small.OPX (Norman).
The content of the email:
You have (9) message from TheBat.
Please re-configure your TheBat again.
Download attached setup file and install.
Virus Total permlink and MD5: c81ba436d85bba944adb74b86c90fae8.
