NEWS FROM THE LAB - Friday, July 27, 2007

bsaver.zip Posted by Kimmo @ 06:02 GMT

On Wednesday we blogged about major seeding of Trojan-Downloader.Win32.Agent.brk. This is now happening again.


This time the e-mail attachment is named as bsaver.zip.

E-mail subjects have also been revised. Below is a list of some examples we have witnessed so far:

  Sunrise in your life
  Life will be better
  Good summer
  Do it for pleasure
  Life is good
  Wanna be slim?
  Good summer, dude
  Two Telephone Calls And An Air
  Be like me!
  To be slim
  Paradice in bed

The file is currently detected as Trojan-Downloader:W32/Agent.EXJ since database update 2007-07-27_01 which was released five hours ago.