Renama.A -- Replies to Outlook email messages and uses ZIP attachments
Renama.A can reply to Outlook emails (so it looks more legitimate than regular spam) & it uses ZIP attachments. It can also spread across unprotected network shares.
QUOTE: This new virus goes through the MS Outlook inbox, and replies to any emails found. The email will have the following properties:
Subject - One of the following:
[NAME], your name is listed in terrorism organisation..!!!
[NAME], this file from me (%s)
*** Note: [NAME] is taken from the contents of the user's emails.
Message - One of the following:
1. if you are not sure, please read attachment bellow, and please reply to me..!!! this message is very urgent..!!!! hope we don't have miss understanding thank's...!!!
2.This attachment contain listname of terrorist..!!! hope you can be carrefull if you find one of them..!!!! or you can reply this email to me after you read the attachment thank's...!!!
Attachment: [RANDOM].zip
Renama.A: Replies to email & uses ZIP files
http://secunia.com/virus_information/27783/renama.a/
http://www.sarc.com/avcenter/venc/data/w32.renama.a@mm.html