[Solutie] United Parcel Service nitification – Email cu atasament infectat

Se raspandeste o serie de email-uri cu atasament infectat, care au subiectul: United Parcel Service nitification. Acest tip de email-uri le urmeaza pe cele care vizau clientii FedEx, DHL etc.

Mesajul lor suna astfel:

Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

Thank you.

Copyright © 1994-2011 United Parcel Service of America, Inc. All rights reserved.

Atasamentul inclus se numeste: UPS_document.zip.
Virusii se schimba zilnic si detectia lor este medie pe VirusTotal in momentul trimiterii.


Odata rulat fisierul va descarca alti virusi (http://91.217.162.24/lol2.exe si
http://91.217.162.24/pod.exe) si va fura parolele din calculatorul d-voastra.

Va crea fisierele: %Temp%\pod.exe, %AppData%\dwm.exe, %Temp%\csrss.exe, %AppData%\Microsoft\conhost.exe, %Temp%\spm.exe, %System%\mevmkbxj.dll, %System%\mhhbohxy.dll, %AppData%\E11E.576, %Temp%\1.tmp, %Temp%\2.tmp, %System%\tmp.tmp.

Iata care sunt solutiile pentru DEVIRUSARE:

1. Descarcati Malwarebytes Anti-Malware. Scanati PC-ul rapid (sau complet daca nu functioneaza scanarea rapida) si stergeti la final infectiile gasite apasand Remove selected.

2.Descarcati Dr.Web Cureit! si scanati PC-ul:
http://www.freedrweb.com/cureit/?lng=en

Daca ai reusit sa cureti aceasta infectie, iti recomand sa cumperi versiunea PRO a Malwarebytes Anti-Malware pentru a te proteja si pe viitor de astfel de amenintari, avand in vedere ca nu au fost detectate\eliminate de antivirusul tau actual.

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

One response to “[Solutie] United Parcel Service nitification – Email cu atasament infectat”

  1. setmefree

    Am primit si eu de curand e-mailu asta da al meu suna asa:
    “Dear customer.

    The parcel was sent your home address.
    And it will arrive within 3 business day.

    More information and the tracking number are attached in document below.

    Thank you.

    NIS 2011 a intervenit la atasementul infectat

Leave a Reply