Emold: contract_I1.zip

Seit heute Morgen verbreitet sich wieder einmal mehr der Trojaner Emold (aka AutoRun) mit einer neuen Spam-Welle:

Betreff: Contract of order fulfillment
Dear customers,
We have prepared a contract and added the paragraphs that you wanted to see in it.
Our lawyers made alterations on the last page. If you agree with all the provisions we are ready to make the payment on Friday for the first consignment.
We are enclosing the file with the prepared contract.

If necessary, we can send it by fax.
Looking forward to your decision.

Der Betreff sowie die Anrede variiert:


  • Loan Contract
  • Contract of order fulfillment
  • Your new labour contract
  • Permit for retirement
  • Rent contract
  • Record in debit of account
  • Contract of retirement
  • Anrede:

  • Good morning
  • Dear customers
  • Good day
  • Hello
  • Good afternoon
  • Im Attachement contract_I1.zip befindet sich die Ausführbare Datei contract_I1.doc.exe, welche den Trojaner beinhaltet:

    Filename: contract_I1.doc.exe
    File size: 32768 bytes
    MD5…: f330f419cfee85c7a2ac2969194b5cf3
    SHA1..: 68053520b595274efa7dcbf9921fe3ebc2937ae2
    Erkennungsrate: 9/36 (25%)

    Am Verhalten des Trojaners hat sich nichts geändert (Siehe Post vom 28.8.08).

    Leave a Reply

    Your email address will not be published. Required fields are marked *