Warnen, Bin Ich Ansteckend

For those of you that don't speak or read/write German, the title of this post roughly translates as: 'Warning, I am infectious'.

Hmmm...seems to be a rather busy day for me today!

This posting is mainly a warning for those of you out there that speak German, although if you don't you could still give in to your curiosity with potentially disastrous results.

Here's a screesnhot of an e-mail I started to see this morning:



This is a screenshot of the website that the link in the e-mail takes you to:



If you are curious enough to click on the hyperlink at the foot of the web page a file gets downloaded; at this time the file is called, 'behnert.exe'.

More data on the file can be found here: http://momusings.com/vsub/2007/10/vs0710002-possible-new-malware-bzub.html

I've submitted the file to the anti-virus vendors, so detection should be near complete within 24 hours.

The core of the e-mail claims that 'Anne Behnert' went to the same school in Germany that I attended. This might have been more believable if I had gone to school in that country, but I didn't. However, ironically I was born there!

Here are 'Google' translations of text from both the e-mail and the webpage, as you'd expect the translations are not very good:

E-Mail text:

Did you recognize me? I bin's Anne Behnert.
I imagine in such a way, we would have with you in a school gelernt.
It is stop much time past and so can you you to me probably not more erinnern.
And I cannot forget it yet, we was best friends.
Do you remember those walks after the school? This was genuinly cool, gell?
It was however everything after the removal of my parents to end.
We pulled into another city.
I had to leave you all of the school and I felt so lonely at that time, remained completely alone and the feeling of the isolation deprimierte me riesig.
Then I have new contacts constructed and now give it again friends, am long already however completely different history!
And I remember nevertheless nearly nobody from the school, thus only you.
I would like that we further constantly communicate ourselves könnten.
Do you want to times actually see, how I look now?

Web page text:

There are you here probably because of my invitation or perhaps only that you can know me.
However I am pleased much to see you here!
I learned in several schools, because my parents from place had pulled to place. First it was very unpleasant for me, then I had resigned myself to it. I became acquainted with a great many people only volatilely. Some of it, these were not bad I directly forgot, some were o.k., with which I would maintain still gladly relations, could however because of some circumstances. And now, if I arose want I mean friendship volumes again to strengthen! Well that I must now nirgendswo him and one can make oneself after the search!
After tormenting school I began with the study and then was successfully finished I with it. Momentarily I work as a child psychologist. Whether it to be strange should:)? I feel very destined as it. From my childhood I am very much accustomed to the children. And now I help them.
That was actually everything! I am pleased to your answer!
So I am it now.

So, hopefully you can see why I entitled this blog post as I have, as she is indeed infectious?

Interestingly a similar e-mail, this time in English, is mentioned on the Sophos Blog, here: http://www.sophos.com/security/blog/2007/10/623.html