When you run the program, it actually displays some nice pictures of some of the Olympic Stadiums, so people may not notice the payload of installing a keylogger onto their computers.The trojan drops two files named ‘wuauct.exe’ and ’81.dll’, and launches ‘wuauct.exe’ which tries to connect to the IP address in China on port 81 by injecting code into Explorer.exe.
Malware screensaver “2008BeijingOlympics.scr”
Previous post: Fake IE7 email Spam
Next post: Three French Journalists at Black Hat banned
