Home Malware Programs Trojans NorthwestAirlines.zip

NorthwestAirlines.zip

Posted: January 22, 2009

NorthwestAirlines.zip is a hideous Trojan that is attached to a scam email masquerading as a ticket from Northwest Airlines.

The NorthwestAirlines.zip email reads:
From: Damian Muller
Subject: E-ticket #4418910180
Hello!
Thank you for using our new service “Buy Northwest Airlines ticket Online” on our website.
Your account has been created:
Your login: ida.camacho@t********.com
Your password: passXNK0
Your credit card has been charged for $471.52.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the Northwest Airlines ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Damian Muller
Northwest Airlines
Attachment: NorthwestAirlines.zip

If the NorthwestAirlines.zip email attachment is opened, you will set in motion a Trojan that will give hacker's access to your PC. NorthwestAirlines.zip is a Trojan that can leave you exposed to identity theft and possible financial losses. Remember not to open the email attachment. Always be on guard of email attachments that you do not recognize or look suspicious. If you receive an email with the attachment NorthwestAirlines.zip, delete the email at once.

If you happen to open the email attachment, notify your bank and credit card companies IMMEDIATELY. You may need to close your accounts. Remove the infection as soon as possible with a malware removal program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\twain32\local.ds
    2 %System%\twain32\user.ds
    3 %System%\twain32\user.ds.lll
    4 %System%\twex.exe
    5 NorthwestAirlines.exe
    6 NorthwestAirlines.zip
Loading...