<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: Facebook updated account agreement email contains Sasfis trojan</title>
	<atom:link href="http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/</link>
	<description>mx lab blog - all about anti virus and anti spam</description>
	<lastBuildDate>Thu, 09 Feb 2012 14:53:11 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>By: ali</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-13261</link>
		<dc:creator><![CDATA[ali]]></dc:creator>
		<pubDate>Wed, 17 Mar 2010 18:37:08 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-13261</guid>
		<description><![CDATA[yaar kiya hall hai kahan ho]]></description>
		<content:encoded><![CDATA[<p>yaar kiya hall hai kahan ho</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Uptick in Trojan.Sasfis Emails &#171; MadMark&#39;s Blog</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-13232</link>
		<dc:creator><![CDATA[Uptick in Trojan.Sasfis Emails &#171; MadMark&#39;s Blog]]></dc:creator>
		<pubDate>Tue, 09 Mar 2010 00:42:20 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-13232</guid>
		<description><![CDATA[[...] Uptick in Trojan.Sasfis&#160;Emails I am seeing an uptick in Trojans (specifically Sasfis) being posted to my &#8220;spammy&#8221; and personal accounts. Watch out for the classic &#8220;UPS Delivery&#8221; and &#8220;UPS Delivery Problem&#8221; mailings. This is the same malware that was tapping Facebook users back in November (http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/). [...]]]></description>
		<content:encoded><![CDATA[<p>[...] Uptick in Trojan.Sasfis&nbsp;Emails I am seeing an uptick in Trojans (specifically Sasfis) being posted to my &#8220;spammy&#8221; and personal accounts. Watch out for the classic &#8220;UPS Delivery&#8221; and &#8220;UPS Delivery Problem&#8221; mailings. This is the same malware that was tapping Facebook users back in November (<a href="http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/" rel="nofollow">http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/</a>). [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: nenad kalaji</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-12858</link>
		<dc:creator><![CDATA[nenad kalaji]]></dc:creator>
		<pubDate>Fri, 20 Nov 2009 13:46:17 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-12858</guid>
		<description><![CDATA[nenad ima 36 godina]]></description>
		<content:encoded><![CDATA[<p>nenad ima 36 godina</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: &#8220;Your mailbox has been deactivated&#8221; Spam Campaign Serving Crimeware &#124; +Sign</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-12853</link>
		<dc:creator><![CDATA[&#8220;Your mailbox has been deactivated&#8221; Spam Campaign Serving Crimeware &#124; +Sign]]></dc:creator>
		<pubDate>Tue, 17 Nov 2009 21:46:34 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-12853</guid>
		<description><![CDATA[[...] .com 021107d91129.bourgum .com  Naturally, the campaign isn&#039;t an isolated incident, with previous &quot;Facebook updated account agreement&quot; themed ones, using the same phone back locations as the currently ongoing one.&#160;  Related posts: Ongoing [...]]]></description>
		<content:encoded><![CDATA[<p>[...] .com 021107d91129.bourgum .com  Naturally, the campaign isn&#39;t an isolated incident, with previous &quot;Facebook updated account agreement&quot; themed ones, using the same phone back locations as the currently ongoing one.&nbsp;  Related posts: Ongoing [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Carlos Felicio</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-12848</link>
		<dc:creator><![CDATA[Carlos Felicio]]></dc:creator>
		<pubDate>Tue, 17 Nov 2009 07:11:03 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-12848</guid>
		<description><![CDATA[That&#039;s why you should never open files from unknown sources...]]></description>
		<content:encoded><![CDATA[<p>That&#8217;s why you should never open files from unknown sources&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gossamer Web Design Lake Tahoe &#187; Facebook Trojan Email</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-12805</link>
		<dc:creator><![CDATA[Gossamer Web Design Lake Tahoe &#187; Facebook Trojan Email]]></dc:creator>
		<pubDate>Mon, 09 Nov 2009 17:52:30 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-12805</guid>
		<description><![CDATA[[...] of a grammatical error, and the fact that the email address is not used with a Facebook account; a quick google foo reveals that the attachment provided, disguised as an update to your account agreement, is a trojan [...]]]></description>
		<content:encoded><![CDATA[<p>[...] of a grammatical error, and the fact that the email address is not used with a Facebook account; a quick google foo reveals that the attachment provided, disguised as an update to your account agreement, is a trojan [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John Godfrey</title>
		<link>http://blog.mxlab.eu/2009/11/07/facebook-updated-account-agreement-email-contains-sasfis-trojan/#comment-12794</link>
		<dc:creator><![CDATA[John Godfrey]]></dc:creator>
		<pubDate>Sun, 08 Nov 2009 14:54:58 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mxlab.eu/?p=649#comment-12794</guid>
		<description><![CDATA[I have been infected by this virus in exactly the way described.  I received 100s of spoof emails supposedly from Facebook and in a moment of weakness decided top open one. BitDEfender identified the virus but has not been able to disinfect or quarantine the file so has blocked the file: ifmq.kqo.  At this stage I am uncertain of the implications of this.  It is causing some problems logging into the internet.]]></description>
		<content:encoded><![CDATA[<p>I have been infected by this virus in exactly the way described.  I received 100s of spoof emails supposedly from Facebook and in a moment of weakness decided top open one. BitDEfender identified the virus but has not been able to disinfect or quarantine the file so has blocked the file: ifmq.kqo.  At this stage I am uncertain of the implications of this.  It is causing some problems logging into the internet.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

