Der er spændende ting fra Microsoft, Facebook og vores internetudbyder. Og som altid DHL.

På malware-siden drejer størstedelen sig hovedsageligt om Packed.win32.krap.x - også kendt under navne som FakeAlert-XPSecCenter, TrojanDownloader:Win32/FakeRean, Packed.Generic.233 og andre. Den fører ofte til en installation af et falsk antiviusprogram. Der er mails "fra" Microsoft med emnet Conflicker.B Infection Alert og ordlyden:

Dear Microsoft Customer,

Starting 12/11/2009 the ‘Conficker’ worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.

To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.

Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.

Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division

Der er en lækker vedhæftet fil, som ikke bør åbnes.

Facebook skriver om updated account agreement.

Dear Facebook user,

Due to Facebook policy changes, all Facebook users must submit a new, updated account agreement, regardless of their original account start date.
Accounts that do not submit the updated account agreement by the deadline will have restricted.

Please unzip the attached file and run “agreement.exe” by double-clicking it.

Thanks,
The Facebook Team

En lignende vedhæftet fil vil skabe de samme problemer. Den vedhæftede fil kan i nogle tilfælde også indeholde Win32.Genome eller Trojan-Ransom.Win32.DigiPog.

Så bliver vi også bombarderet med information om, at vores internetforbindelse snart ryger med emnet Your internet access is going to get suspended.

Your internet access is going to get suspended

The Internet Service Provider Consorcium was made to protect the rights of software authors, artists.
We conduct regular wiretapping on our networks, to monitor criminal acts.

We are aware of your illegal activities on the internet wich were originating from

You can check the report of your activities in the past 6 month that we have attached. We strongly advise you to stop your activities regarding the illegal downloading of copyrighted material of your internet access will be suspended.

Sincerely
ICS Monitoring Team

Der er blandt andet tale om varianter af Win32.Bredolab og Win32.Agent.

Mails fra DHL fylder stadig rigtigt meget. Samtidig er der mere og mere kasino-spam i omløb på dansk. Det bør man også holde sig fra - uanset hvad der bliver lovet med.