Trojaned versions of Makelovenotspam doing the rounds ...

Suresh Ramasubramanian suresh at outblaze.com
Tue Dec 7 17:19:02 UTC 2004


What a surprise (or not!)

http://www.theregister.co.uk/2004/12/07/fake_lycos_screensaver_trojan/

> Virus writers have begun distributing their wares in emails that pose as
> Lycos's abandoned "Make love not spam" screensaver.
> 
> The fake screensaver emails contain an attachment with a RAR SFX archive that
> has embedded key logger Trojan inside, antivirus firm Sophos warns. Infected
> emails come in emails with subject lines such as "Be the first to fight spam
> with Lycos screen" and an attachment called "Lycos screensaver to fight
> spam.zip".
> 
> Upon successful installation, the key logging Trojan (Mdropper-IT) sends a
> message to an Indonesian email address confirming its status. The screensaver
> file, rather than displaying the Lycos screensaver, displays a blank screen.

[snip]



More information about the NANOG mailing list