I got the below email from work and thought I'd share with you guys, hopefully helping someone avoid this trojan.
Herb Lumpp http://users.adelphia.net/~hlump/index.htm > > Please pass the word about this, as this could dupe some folks. > > ==== > 'Osama Captured' e-mail is malicious trojan. Those "Osama Bin Laden > Captured" e-mails hammering your in-box today will attempt to download a > Trojan if the embedded URL is clicked, anti-virus experts warned Friday, > April 23. Panda Software > said the URL embedded in the e-mail directs users to what appears to be an > advertising page before exploiting a known security vulnerability in > Microsoft's Internet Explorer (IE) browser to download the trojan. If the > link is activated via IE, the browser auto-executes a file called > "EXPLOIT.EXE" and downloads an executable trojan, identified as > "Trj/Small.B." The "Small.B" trojan opens ports on an infected machine and > can be used to hijack PCs for use as spam zombies. The trojan has the > ability to listen on the open port for instructions and redirects traffic > to other IP addresses. > > http://www.internetnews.com/ent-news/print.php/3344641 >
