New Storm variant?

[Roger Grady]

I haven't had any new or old Storm-generated emails for a few days so
I guess it was time. Got a totally new one today, text is reproduced
below. It points to a rr.com site that is up as I write this.
"Download tor" is the link to 74.78.69.185. Downloaded file is
tor.exe, 137Kb. Neither latest AVG nor Avast recognize it.

Text of email:

Everyone who is doing file trading is at risk. The news is full of
articles of lawsuits by the RIAA. Your privacy can be safe again with
Tor. This software is made available free, so we can keep the internet
free and private. Download Tor



Roger Grady (e-mail address removed)
To reply by email, remove "qlfit." from address

 

[jen]

I haven't had any new or old Storm-generated emails for a few days so
I guess it was time. Got a totally new one today, text is reproduced
below. It points to a rr.com site that is up as I write this.
"Download tor" is the link to 74.78.69.185. Downloaded file is
tor.exe, 137Kb. Neither latest AVG nor Avast recognize it.
Text of email:
Everyone who is doing file trading is at risk. The news is full of
articles of lawsuits by the RIAA. Your privacy can be safe again with
Tor. This software is made available free, so we can keep the internet
free and private. Download Tor

Yep...
sTORm preying on file sharers:
http://www.johnhsawyer.com/

-jen