Re: christma.exe Flash e-card

a_n_onymous80@xxxxxxxxxxx writes:
> I received an email from a friend today with a "christma.exe"
> executable inside a zip file. Alarm bells started ringing, but seeing
> how it was a trusted friend I thought it should be OK.


That's a bad test unfortunately because most email worms go after
people's address books to send themselves out again, so by definition
all infections can come from someone you know. Just because it's
from a friends email address does not mean the friend knowingly sent
it.

> Anyway, after scanning the file with my Grisoft Free antivirus, I
> double clicked on it and it seemed a harmless enough Macromedia Flash
> e-card.
>
> I'm now feeling guilty that I may have let loose a Trojan on my system.
> I've checked the Task Manager and there don't seem to be any rogue
> processes I don't recognise.

Lucky. But the sophisticated modern malware is pretty good at hiding
itself from task manager. So it's not clear that all is ok.

> Can anyone confirm that this is just a harmless e-card?
>
> http://rapidshare.de/files/9683346/Christma.zip.html

I don't think I'll be investigating this for ya. :-) Perhaps
someone with a proper malware analysis setup might venture forth
though.

--
Todd H.
http://www.toddh.net/
.

Relevant Pages

  • Re: No more Explorer
    ... Ron Badour ... MS MVP 1997 - 2007 ... I am trying to help a friend. ... to go to task manager and quit a few programs. ...
    (microsoft.public.windowsxp.help_and_support)
  • lsass.exe? A utility of a virus?
    ... I have noticed that a program called 'lsass.exe' causes my computer to hang ... Then I asked a friend of mine to see if it is a virus. ... Task Manager cannot end this process.' ...
    (microsoft.public.windowsxp.security_admin)
  • Re: No more Explorer
    ... He was having problems with RAM and decided ... to go to task manager and quit a few programs. ... Tell your friend to hit ctrl, alt, delete to open up the task manager again. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: The Task Manager has abnormal look
    ... >The Task Manager on my friend PC has an abnormal look. ... >There are only Task List and End Task, Switch to, New Task buttons. ... >Also the other abnormal things is both MS Outlook and Outlook Express cannot ... Your Task Manager is in small footprint mode. ...
    (microsoft.public.win2000.security)
  • Re: christma.exe Flash e-card
    ... | how it was a trusted friend I thought it should be OK. ... | Can anyone confirm that this is just a harmless e-card? ... It is NOT a virus or Trojan. ... It is a Macromedia Flash executable Christmas card. ...
    (alt.computer.security)