wohoo! update for my IE! ^^

[bad_brain]

this one is really hilarious, the spoofed sender address is admin@microsoft.com, the real source is a dynamic IP in India:

Download the latest version!

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

here's the file:

Code: Select all

http://the7th.ingyenweb.hu/explorer-7.0.exe

do not download and run it if you don't exactly know what you are doing!!
and here's the scan result:
http://www.virustotal.com/analisis/9a2d ... e4ce3e35c3

[DNR]

nice catch, everything was probably spoofed off a real MSN mailer, and then they used a blind spoof of admin@microsoft.com (they didnt need you to reply, the just needed you to download the file)

Reno trojan ha!

DNR