North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Trojaned versions of Makelovenotspam doing the rounds ...

  • From: Suresh Ramasubramanian
  • Date: Tue Dec 07 12:20:58 2004 
What a surprise (or not!)

http://www.theregister.co.uk/2004/12/07/fake_lycos_screensaver_trojan/

> Virus writers have begun distributing their wares in emails that pose as
> Lycos's abandoned "Make love not spam" screensaver.
> 
> The fake screensaver emails contain an attachment with a RAR SFX archive that
> has embedded key logger Trojan inside, antivirus firm Sophos warns. Infected
> emails come in emails with subject lines such as "Be the first to fight spam
> with Lycos screen" and an attachment called "Lycos screensaver to fight
> spam.zip".
> 
> Upon successful installation, the key logging Trojan (Mdropper-IT) sends a
> message to an Indonesian email address confirming its status. The screensaver
> file, rather than displaying the Lycos screensaver, displays a blank screen.

[snip]