Trojan.Spamlia Spams Email Addresses in Windows Address Book

Trojan.Spamlia, a new Trojan Horse, is spamming email addresses found in the user’s Windows Address Book.

The Trojan obtains the list of email address and saves them to a folder called “˜%Temp%~BG’. The Trojan sends spam emails to these addresses and then deletes itself and the temporary folder “˜%Temp%~BG’

The Trojan may also obtain SMTP Display Name, SMTP Email Address and SMTP Server information from the registry entry: “HKEY_CURRENT_USERSoftwareMicrosoftInternet Account ManagerAccounts[RANDOM]” [Source]

Semantec has traced the number of infections to be between 0-49 and the number of sites to be 0-2. The geographical distribution of the Trojan is low and the Threat Containment and Removal has been rated “˜Easy’.

For more details about Trojan.Spamlia and for recommendations and removal instructions, Source.