Hmoll
Posts: 39
Joined: 27.Feb.2007
Status: offline
|
User received a mail with a ZIP file. In the ZIP file was an exe. Once the EXE was clicked on, Windows Defender identified the file as a Trojan/Bredolab.X. I believe the WinDef warning, since it was an EXE in a ZIP in a mail that is obviously (and badly) forged as coming from UPS. How did Windows Defender of all things catch this, and not TrendMicro (on the desktop) or GFI on both my IIS6/SMTP server and running as a real-time engine on my E2k7 server?
< Message edited by Hmoll -- 23.Jul.2009 1:44:17 PM >
|