kawecki opened this issue on Jun 14, 2005 ยท 1 posts
kawecki posted Tue, 14 June 2005 at 7:48 PM
I just received an email from Yahoo: "Dear user ricardokawecki, You have successfully updated the password of your Yahoo account. If you did not authorize this change or if you need assistance with your account, please contact Yahoo customer service at: register@yahoo.com Thank you for using Yahoo! The Yahoo Support Team" 1) There is a zipped file attached account-password.zip 2) Yahoo email checks for virus and only allows to download if no virus is found. I could download it with the message that is without virus. I think that Yahoo use Norton antivirus. 3) I scanned the zip with Antivir with the latest virus definition and no virus was found. 4) Inside the zip with Winrar is "account-password.htm .pif" 5) Unzipped in a folder and with Windows explorer appears as "account-password.htm" , nothing of the pif extension. 6) Opened the file with an hexa editor and is a compressed PE executable, compressed executables are not very common, Winamp is one of them. 7) The size is about 57K and expanded must some times larger. Is a big size for a virus and so, it must do a lot of nasty things. 8) Even I am curious, is a waste of time disassemblng it.
Stupidity also evolves!