Left nav Online Threat Alerts (OTA) - Alerting you to scams and frauds. Righ nav

Westminster Hotel Virus Email - Your Reservation is Now Confirmed July 2013

Westminster Hotel Virus Email - Your Reservation is Now Confirmed July 2013

If you receive the malicious email message below, appearing as if it came from the Westminster Hotel, please do not open the attachment. The attachment is a malicious program or malware called a Trojan horse. The email message is a trick used by the cybercriminals behind these spam emails, to coerce the recipients into believing that they have made a booking reservation at the Westminster Hotel.

This will therefore cause the curious recipient of this email message to open the malicious attachment, thinking he/she is opening a PDF document of the reservation made.

Here is a copy of the malicious Westminster Hotel Virus Email

malicious Westminster Hotel Virus Trojan Email

The name of the malicious attachment is: Document.pdf.exe. The name may change.  Although the name of the attachment has “.pdf” in it, it is not a PDF document.

The following threats were found after scanning the file Document.pdf.exe:

  • Win32/Injector.AJEG
  • Trojan-PSW.Win32.Tepfer.nprd
  • Trojan.Inject
  • Win32.ModifiedUPX.C

Now remember, a Trojan horse allows a cybercriminals to take control of your computer remotely from anywhere around the world. With remote control of your computer, they can use your computer to commit cybercrimes or steal your personal / financial information.

If you have already opened the malicious attachment, please do a full scan of your computer with the antivirus software installed on your computer.

Also, click here to view of a list of email attachments that you should never open.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below.
Post a commentPost comment or view the ones below.    +
Was this article helpful?

Comment sectionComments or Answers

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location.

waiting

CommentsPost Comment or Answer