MalwareTeks Blog » Blog Archive » Storm on the 4th of July


 04 Jul 2007 @ 5:37 PM 
 

Storm on the 4th of July

 

Nothing like opening your Inbox and getting a flood of emails relating to Independence Day. The following subject lines have been noted by SANS Internet Storm Center:

4th Of July Celebration
America the Beautiful
America’s 231 Birthday
American Pride, On The 4th
Americas B-Day
Celebrate Your Independence
Celebrate Your Nation
Fireworks on the 4th
Fourth of July Party
God Bless America
Happy 4th July
Happy B-Day USA
Happy Birthday America
Independence Day At The Park
Independence Day Celebration
Independence Day Party
July 4th B-B-Q Party
July 4th Family Day
July 4th Fireworks Show (new)
Your Nations Birthday

This is another flood of the Storm Trojan. If you receive an email with the above or similar subjects don’t click on any links in the message, delete the email immediately. If you click on the link and visit the website, various browser exploits are attempted, and a link is presented to download a file called ecard.exe - better known as the Storm Trojan.

Should you fall victim to this scam, follow the directions in our Malware Cleaning Guide.

Start a new thread in the Malware Removal Forum of this site.

Attach the following logs:

  1. ISeeYouXp log
  2. HijackThis log
  3. Both Online AV scan logs

(You must Register before posting anywhere on this board. Registering is 100% FREE)

There is no “Silver Bullet” solution to this infection. A RootKit is installed alongside the Storm Trojan and requires special handling to remove.

Share our articles with others by publishing them to:
  • Digg
  • Reddit
  • del.icio.us
  • Slashdot
  • StumbleUpon
  • Technorati
  • blogmarks
  • Furl
  • YahooMyWeb
  • Fark
Tags Tags:
Categories: Uncategorized
Posted By: ShadowPuterDude
Last Edit: 04 Jul 2007 @ 05 37 PM
178 views
E-mailPermalink
 

Responses to this post » (None)

 


Comments are open. Feel free to leave a comment below.


 

Leave A Comment ...

 

 XHTML:
You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>
\/ More Options ...
Change Theme...
  • Users » 9
  • Posts/Pages » 187
  • Comments » 116
Change Theme...
  • VoidVoid « Default
  • LifeLife
  • EarthEarth
  • WindWind
  • WaterWater
  • FireFire
  • LiteLight
  • No Child Pages.
  • No Child Pages.
  • No Child Pages.
  • No Child Pages.
  • No Child Pages.
  • No Child Pages.