Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Charles Gregory
On Tue, 12 May 2009, Tom Shaw wrote: > At 10:04 AM -0400 5/12/09, Charles Gregory wrote: >> Received the following e-mail that looks like a phishing attempt, >> http://www.hwcn.org/~cgregory/virus/MTCN_INVOICE.zip > Charles, > > Its a Zbot Trojan. You can check by sending to s...@virustotal.co

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Charles Gregory
On Tue, 12 May 2009, Steve Basford wrote: >> Received the following e-mail that looks like a phishing attempt, >> with an attached zipped .exe file ... > It's been out since yesterday lunchtime... bit more info here: > http://www.calendarofupdates.com/updates/index.php?showtopic=19142 > Blocked yes

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Török Edwin
On 2009-05-12 17:52, Charles Gregory wrote: > On Tue, 12 May 2009, aCaB wrote: > >> The right place for malware and suspected malware submissions is: >> http://www.clamav.net/sendvirus/ >> > > At this point, I don't *know* if it's malware. Didn't want to waste > the maintainer's time if thi

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Charles Gregory
On Tue, 12 May 2009, aCaB wrote: > The right place for malware and suspected malware submissions is: > http://www.clamav.net/sendvirus/ At this point, I don't *know* if it's malware. Didn't want to waste the maintainer's time if this was just a social engineered phish. That, and because I'm only

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Tom Shaw
At 10:04 AM -0400 5/12/09, Charles Gregory wrote: >Greetings! > >Received the following e-mail that looks like a phishing attempt, >with an attached zipped .exe file ... > >I've saved the file to: > http://www.hwcn.org/~cgregory/virus/MTCN_INVOICE.zip > >I don't have the facilities to test any

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Steve Basford
> Greetings! > > Received the following e-mail that looks like a phishing attempt, > with an attached zipped .exe file ... Hi Charles, It's been out since yesterday lunchtime... bit more info here: http://www.calendarofupdates.com/updates/index.php?showtopic=19142 Blocked yesterday as: Sanesecu

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread aCaB
Charles Gregory wrote: > Greetings! > Hi, The right place for malware and suspected malware submissions is: http://www.clamav.net/sendvirus/ aCaB ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support

Re: [Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread russbucket
On Tuesday 12 May 2009 07:04:46 am Charles Gregory wrote: > Greetings! > > Received the following e-mail that looks like a phishing attempt, > with an attached zipped .exe file ... > > I've saved the file to: > http://www.hwcn.org/~cgregory/virus/MTCN_INVOICE.zip > > I don't have the facilitie

[Clamav-users] VIRUS? PHISH? "Western Union Transfer MTCN: 0258258718"

2009-05-12 Thread Charles Gregory
Greetings! Received the following e-mail that looks like a phishing attempt, with an attached zipped .exe file ... I've saved the file to: http://www.hwcn.org/~cgregory/virus/MTCN_INVOICE.zip I don't have the facilities to test anything, but just the fact that it is an attached exe in an ob