なんか最近妙に来るようになったので二つばかりパターンを載せてみる。
Subjectは「You have received an eCard」で、本文は
Good day.
You have received an eCardTo pick up your eCard, open attached file
We hope you enjoy you eCard.
Thank You!
Avastさんによると添付は「ecard.zip」で、その中に「ecard.exe」があるらしい。
「Win32:Walivun [Trj]」だそうな。Win32:Wlivunは他のSubject、本文、添付のパターンをもってるようだ。
数日前に山と来たのは
Subjectが「Postcard from a Family Member」で、本文は
Good day.
Your family member has sent you an ecard from 123greetings.com.
Send free ecards from 123greetings.com with your choice of colors, words and music.
Your ecard will be available with us for the next 30 days. If you wish to keep the ecard longer, you may save it on your
computer or take a print.
To view your ecard, open zip attached file.
Best wishes,
Postmaster,
123greetings.com
添付は「ecard.zip\ecard.exe」の「Win32:Rootkit-gen [Rtk]」。
他に、送信元を俺のアドレスに偽装して来るSPAMもうざい。