Another Malware disguising itself as a Postcard is currently being spammed with these email details.
Subject: Online Greeting Card Waiting For You
From: Best Postcard
Body:
Hello,
A Greeting Card iswaiting for you at our virtual post office!
Sender: yourdear friend
If you don’t pick upyour Greeting Card within 4 weeks, our postal clerk may discard it!
CLICK this pick-upaddress or COPY and PASTE into your browser :
http://www.{blocked}.{blocked}.ro/postcard.gif.exe
(c) All-Yours Greeting Cards Provided as a free service by All-Yours GreetingCards
http://www.{blocked}.{blocked}.ro
The link provided should already raise a sense of alert since it has a .exe extension.
Subject: Online Greeting Card Waiting For You
From: Best Postcard
Body:
Hello,
A Greeting Card iswaiting for you at our virtual post office!
Sender: yourdear friend
If you don’t pick upyour Greeting Card within 4 weeks, our postal clerk may discard it!
CLICK this pick-upaddress or COPY and PASTE into your browser :
http://www.{blocked}.{blocked}.ro/postcard.gif.exe
(c) All-Yours Greeting Cards Provided as a free service by All-Yours GreetingCards
http://www.{blocked}.{blocked}.ro
The link provided should already raise a sense of alert since it has a .exe extension.
Update (Zobel, 12 December 2005 21:56:10)
The file will now be detected as TROJ_ZAPCHAST.AA.