another approach?

[kreepz]

went to my hotmail account to check my email and found the following
email....



Hello! Attention! The wire sent to Vladimir Kirkorov, Moscow, Russia has
been blocked by our security service. Your credit card issuing bank has
halted the transaction by the demand of the Federal Criminal Investigation
Service (case No. 20721 since the recipient has been undergoing the
international retrieval by the InterPol. Please contact the closest Western
Union office and make sure you have your ID card, the credit card that was
used for making the payment, and the invoice file with you. (The invoice
file is attached to this message; please print it out and hand it to our
agent.) You can find the address of the closest Western Union agent on our
website at http://www.westernunion.com Thank you!attached:MTCN.zip 56.kb
which was detected: Trojan program Trojan-Spy.Win32.Zbot.ero anyone have any
info on it? google only returns 4 results but no information about it.

 

[Ari]

Thank you!attached:MTCN.zip 56.kb
which was detected: Trojan program Trojan-Spy.Win32.Zbot.ero anyone have any
info on it? google only returns 4 results but no information about it.

http://scanner.virus.org/

 

[Duh_OZ]

Ahh, the good old Zbots. I've had many 'hooks' associated with them,
latest was about some plane ticket I bought.

Not too pleased as NOD32 missed a few ;-(

And no I wasn't infected, but did submit the obvious infected .exe's
to virustotal and any missed ones directly to Eset (zipped, and
password protected with infected).

 

[Discovery]

so funny~~American...Too Smart..

 

[kreepz]

thanx for the info and feedback ipw! it is very much appreciated.