Monday, November 13, 2006 9:23 PM
sandi
Dangerous spam emails offering fake Internet Explorer download - trojan warning!!
What is it we always say about links in unexpected or spam emails? DO NOT CLICK ON THEM.
There is an email circulating (I received several in my spamtrap today) pretending to offer Internet Explorer 7 for download -you can a screenshot of the email here:
http://www.ie-vista.com/images/graphi21.jpg
If you download the executable file, you will see a very realistic looking icon:

The executable being offered is not Internet Explorer 7 (but you knew I was going to say that, yes?)
First warning - look carefully at the download window - see where it is being downloaded from? NOT Microsoft, but rather secure01.com, which is registered to some group called "Trisept Solutions". Also, check out the size - the legitimate Internet Explorer 7 download is 14.8 megabybtes.
This is the download window for the FAKE IE7

This is the download window for the REAL IE7 - see the differences?

I sent the executable download from secure01.com to Virustotal, and these were the results - several scanners reported that the file is a trojan:
http://www.ie-vista.com/images/graphi6.gif
My resident antivirus, Trend, did not detect a problem:

The moral of this story is DO NOT DOWNLOAD FILES FROM LINKS IN EMAILS!!
Filed under: Internet Explorer 7