NEWS FROM THE LAB - Tuesday, December 13, 2005

Fake McAfee download links Posted by Mikko @ 13:52 GMT

We've received several reports of emails, warning about a new virus called "Kongo31.XRW" (which doesn't exist).

The email links to a fake McAfee site, hosted in Canada:


The download link gets you a file called ak26xrw-patch-installer-win32.exe - which (surprise, surprise!) is infected with Trojan-Downloader.Win32.Hanlo.h.

We have warned our colleagues at McAfee about the fake site.