Avoid Clicking on Saddam Files!

The execution of Saddam Hussein is one of the most popular topics this week, many users looking for videos published on multiple websites. Of course, the internet is one of those that are benefiting from the execution of Saddam Hussein, a lot of companies trying to earn money with Saddam-related stuff. Because all the things that concern Saddam Hussein are very popular nowadays, virus developers tried to improve the occasion and designed infected files that can affect the user's computer. Of course, the antivirus providers updated their solution to protect the computers but sometimes, a software program is not enough to make a system safe.

So, that's the reason why we're now affected by a new malware that is distributed via an e-mail message that contains Saddam-related attachments such as video_sadan.exe, sadan.exe - two infected executables or saddam.morto.scr - a screensaver infected with malware files.

The F-secure team, a company that developed the well-known F-secure antivirus solution, posted a message on the official blog to announce these new threats and to advise you to avoid clicking on Saddam attachments.

"So far we've seen three different examples of malware using Saddam-related themes. These are now detected as W32/Banload.BSW, W32/Banload.BSX and Trojan-Downloader.Win32.Delf.acc.
Two of these try to disguise their actions by opening up a YouTube page with the Portuguese search keyword "enforcado" (execution)," the company said.

One of the infections, W32/Banload.BSX, is also detailed on the F-secure official webpage and presented as a malware that will redirect you to the YouTube website. "Reports indicate that Banload.BSW, a trojan, was spammed in e-mails to an unknown number of people. The trojan's attachment is named 'video_sadan.exe'. This file is a trojan downloader that downloads a variant of the Banker spying trojan. It also directs the system's web browser to the YouTube website with a search query that returns links to Saddam Hussein's execution video," F-secure said.