Virus Uses eBay and New Packer In Bid To Spread
London, 25th October – MessageLabs, the leading provider of managed email security services to businesses worldwide, has intercepted a new virus claiming to have been sent from eBay.com that uses a packer previously unseen in email virus distribution. The use of an uncommon packer could make it more difficult for anti-virus software vendors to identify and protect against the malicious code within. Over the weekend MessageLabs stopped a relatively low number of copies of the new virus, but is warning computer users to be on their guard.
The email containing the virus purports to have been sent by the webmaster at eBay.com, and suggests that eBay is conducting market research amongst its customers. Computer users are told that they could win valuable prizes if they take part in the research.
Name: W32/Myfip (provisional)
Number of copies intercepted so far: 4
Email Characteristics
Subject: hi, [recipient], I’m webmaster of eBay.com, and we raise a research in our website.
Body text:
I’m the webmaster of www.ebay.com, our company raise a research in our customers — Multiple Item Auctions
and this one unlike a regular eBay auction, Multiple Item Auctions can have many winners.
If you’re the winner of Multiple Item Auctions, you can get the follow thing :
1.a notebook that worth 18000$
2.a camara [sic] worth 1000$
Learn about Multiple Item Auctions, you can click the URL under:
[url removed]
Attachment: login.exe
Size: 51712 bytes
Detection
MessageLabs detected all strains of this malware proactively, using its unique and patented Skeptic(tm) predictive heuristics technology. At the time of issue, some anti-virus vendors had not issued protection against this virus.
About MessageLabs
MessageLabs is the leading provider of managed email security services to businesses based on market share, according to a Yankee Group Security Solutions & Services, February 2004 report. The company offers industry-leading managed Anti-Virus, Anti-Spam, Image Control and Content Control services to more than 9,000 businesses around the world to combat email threats before they reach corporate networks and without the need for additional hardware or software. Powered by a global network of data centers spanning four continents, MessageLabs scans tens of millions of emails each day on behalf of clients such as The British Government, The Bank of New York, Bertelsmann, CSC, Diageo, Orange, Random House, SC Johnson and StorageTek. The service is also available through more than 600 channel partners, including BT, Cable & Wireless, CSC, IBM, MCI and Unisys. For more information on MessageLabs, please visit www.messagelabs.com.