samples More Ecard-ware

gkthornton · July 2007

Scanned with BD defs 7/30/2007.

It looks like these are hard to generically detect.

Look forward to your analysis.

Thanks,

-GT

Sample email:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hi. Mate has sent you an ecard.

See your card as often as you wish during the next 15 days.

SEEING YOUR CARD

If your email software creates links to Web pages, click on your

card's direct www address below while you are connected to the Internet:

Or copy and paste it into your browser's "Location" box (where Internet

addresses go).

We hope you enjoy your awesome card.

Wishing you the best,

Mailer-Daemon,

Greeting-Cards.Com

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

vlad · July 2007

Detected as Trojan.Peed.ICB. Thanks for the samples.

Comments