Troj/Peido-A

At the time of writing Sophos has received just one report of this Trojan from the wild.

Description
Troj/Peido-A is a Trojan that drops Troj/DLoader-BO.
Troj/Peido-A appears as an administrative email containing the text

"Unfortunately, it was not possible to deliver one or more of your messages.
For more information, please, take a look in the attachment."

The attachment is named mail.hta.
When the attachment is run a window is displayed advertising a beauty cream and a copy of Troj/DLoader-BO is created in c:\scr615.scr and executed.

more: http://www.sophos.com/virusinfo/analyses/trojpeidoa.html



Technodrome