Clicky

Pages

Friday, January 22, 2010

Mystery Excel from Russia

 MS Excel
Download CB572207B25B61FC2EFD76A4CE07B255-buvplpk.xls  as password protected archive (please let me know if you need the password)

  Messagelabs scan detects "Possible MalWare 'Backdoor.Win32.Agent.qwh.dam" 

    -----Original Message-----

    From: Блохин Арсений [mailto:pugnacious@audiomobile.ru]
    Sent: 2010-01-22 10:40 AM
    To: XXXXXXXXXXX
    Subject: Распостраняeм информaцию

    Служба достaвки почты


Virustotal  
buvplpk.xls received on 2010.01.22 17:30:58 (UTC)
Current status: finished

Result: 0/41 (0.00%)


I  checked with OfficeMalScanner (http://www.reconstructer.org/code.html) - not malicious.
I will look at it again later and you are welcome to do it too, please let me know if you find/not find anything.
  .



No comments:

Post a Comment