Comments on: New IRS Scam and It Could Cost You More Than Taxes! http://itknowledgeexchange.techtarget.com/security-corner/new-irs-scam-and-it-could-cost-you-more-than-taxes/ Tue, 24 Nov 2009 17:47:09 +0000 http://wordpress.org/?v=2.6.2 By: Mwoodsophosinc http://itknowledgeexchange.techtarget.com/security-corner/new-irs-scam-and-it-could-cost-you-more-than-taxes/#comment-44 Mwoodsophosinc Wed, 30 Sep 2009 16:23:53 +0000 http://itknowledgeexchange.techtarget.com/security-corner/new-irs-scam-and-it-could-cost-you-more-than-taxes/#comment-44 Just to add to the list of potential compromised file names, previous versions of the Zeus Trojan have used names including: [ULIST] [ELEMENT]ntos.exe[/ELEMENT] [ELEMENT]oembios.exe[/ELEMENT] [ELEMENT]twext.exe[/ELEMENT] [/ULIST] The latest variant uses the name "sdra64.exe". These EXE files typically appear in the C:WINDOWSsystem32 directory. Just to add to the list of potential compromised file names, previous versions of the Zeus Trojan have used names including:

  • ntos.exe
  • oembios.exe
  • twext.exe

The latest variant uses the name “sdra64.exe”.
These EXE files typically appear in the C:WINDOWSsystem32 directory.

]]>