On Sun, 15 Nov 2009, rich...@buzzhost.co.uk wrote:
> Is anyone else seeing an influx of spam with a zip attachment
> balancechecker.zip?
>
> This contains a windows executable, balancechecker.exe, which appears to
> be testing clean with clam and others.
>
> I'm inclined to think it's *not* clean and is viral.
>
> EXAMPLE
> http://pastebin.com/m730f90e9
FWIW, the Sanesecurity sigs for ClamAV started hitting this one
last Friday afternoon.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
