[SpamCop-List] Re: CIA Spoof

[Ant]

"Mike Easter" wrote:

> Glenn Daniels wrote:
>> http://securityresponse.symantec.com/avcenter/venc/data/trojan.danmec.html
>
> [...] But clearly this is a danmec type, not a sober.

I can confirm that. Sophos detected it as Troj/Danmec-F
http://www.sophos.com/virusinfo/analyses/trojdanmecf.html

I received another exactly the same, with the FBI text, today.

> However, my AVG free with the latest updates fresh as of today does not
> see a virus in the .zip or the .exe

The Sophos update was released yesterday.

BTW, the exe is packed with UPX 1.92. I unpacked it, but couldn't find
any interesting strings inside.