Article View: adobe.acrobat.reader.palmos.win
Article #2Re: Scary Optical Illusion
From: David H. Lipman
Date: Thu, 28 Sep 2006 21:09
Date: Thu, 28 Sep 2006 21:09
48 lines
3300 bytes
3300 bytes
From: <j.williams@wi.rr.com> What's scary is that you are using Social Engineering to infect the unsuspecting with malware ! Complete scanning result of "Scary Optical Illusion mumber 365.exe", processed in VirusTotal at 09/28/2006 23:02:17 (CET). [ file data ] * name: Scary Optical Illusion mumber 365.exe * size: 49152 * md5.: 37411ce46c689c56dd306715a2ac3ab2 * sha1: af623e53e003e8f752c502b18ce8b082694c91ec [ scan result ] AntiVir 7.2.0.18/20060928 found [TR/Dldr.Adload.fg] Authentium 4.93.8/20060928 found nothing Avast 4.7.892.0/20060927 found nothing AVG 386/20060927 found [Downloader.Generic2.QLV] BitDefender 7.2/20060928 found [BehavesLike:Trojan.Downloader] CAT-QuickHeal 8.00/20060928 found nothing ClamAV devel-20060426/20060928 found nothing DrWeb 4.33/20060928 found nothing eTrust-InoculateIT 23.73.7/20060928 found nothing eTrust-Vet 30.3.3104/20060928 found nothing Ewido 4.0/20060928 found [Downloader.Adload.fu] F-Prot 3.16f/20060928 found nothing F-Prot4 4.2.1.29/20060928 found nothing Fortinet 2.82.0.0/20060928 found nothing Ikarus 0.2.65.0/20060928 found nothing Kaspersky 4.0.2.24/20060928 found [Trojan-Downloader.Win32.Adload.fu] McAfee 4862/20060928 found nothing Microsoft 1.1603/20060928 found nothing NOD32v2 1.1781/20060928 found [Win32/TrojanDownloader.Adload.NBN] Norman 5.80.02/20060928 found nothing Panda 9.0.0.4/20060928 found [Adware/DollarRevenue] Sophos 4.10.0/20060928 found [Troj/Adload-IZ] Symantec 8.0/20060928 found nothing TheHacker 6.0.1.085/20060928 found nothing UNA 1.83/20060928 found nothing VBA32 3.11.1/20060928 found nothing VirusBuster 4.3.7:9/20060928 found nothing -- Dave http://www.claymania.com/removal-trojan-adware.html http://www.ik-cs.com/got-a-virus.htm
Technical Details
Message-ID:
<ZRWSg.4656$Kw1.124@trnddc05>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!nx02.iad01.newshosting.com!newshosting.com!130.81.64.211.MISMATCH!cycny01.gnilink.net!spamkiller.gnilink.net!gnilink.net!trnddc05.POSTED!dbab6ab8!not-for-mailReferences:
<trUSg.18978$QT.6146@tornado.rdc-kc.rr.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 1012e1,c1ecc073f11d0311
X-Google-Thread: 10177e,c1ecc073f11d0311
X-Google-Thread: f7b21,c1ecc073f11d0311
X-Google-Attributes: gid1012e1,gid10177e,gidf7b21,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!nx02.iad01.newshosting.com!newshosting.com!130.81.64.211.MISMATCH!cycny01.gnilink.net!spamkiller.gnilink.net!gnilink.net!trnddc05.POSTED!dbab6ab8!not-for-mail
Reply-To: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
Newsgroups: adobe.acrobat.reader.palmos.win,adobe.acrobat.reader.pocketpc,adobe.acrobat.sdk,adobe.acrobat.windows
References: <trUSg.18978$QT.6146@tornado.rdc-kc.rr.com>
Subject: Re: Scary Optical Illusion
Lines: 50
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1506
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
X-Comment-To: j.williams@wi.rr.com
X-Face: #!*YlHW<3BNQH,W(*HlLHp!!3C^o,W53`lH?w!P/BI9U&X#l41]a]{(_lFi9uvKIhejF;N7"3{((o^}#4TsAASuyib+4gO;T`p'iU-gC?0Lj'1MyYrhAWCVxHKD~0Jqt9=du~_{E+uqoYt4O$L?M:a>s4@)NMgJjld$%3QOzA[8
FL-Build: Fidolook 2002 (SL) 6.0.2800.94 - 5/4/2005 11:39:16
Message-ID: <ZRWSg.4656$Kw1.124@trnddc05>
Date: Thu, 28 Sep 2006 21:09:13 GMT
NNTP-Posting-Host: 68.160.123.51
X-Complaints-To: abuse@verizon.net
X-Trace: trnddc05 1159477753 68.160.123.51 (Thu, 28 Sep 2006 17:09:13 EDT)
NNTP-Posting-Date: Thu, 28 Sep 2006 17:09:13 EDT