NEWS FROM THE LAB - Monday, December 6, 2004

Fake Lycos screensaver Posted by Katrin @ 13:36 GMT

We got reports that a fake Lycos screensaver has been distributed in emails that look like this:

  Subject: Be the first to fight spam with Lycos screen saver
  Attachment: Lycos screensaver to fight spam.zip

The file inside the attachment is not the famous Lycos' "Make love not spam" screensaver. Instead it's a RAR SFX archive that has embedded keylogger inside. Detection for that archive's executable file was added as 'TrojanDropper.FakeSpamFighter'.

Lycos has been notified of the incident.