Subject: Obama is gay. Watch the Proof.
Body: Gay Marriage Could Be Profitable
WARNING: The following list contains links to live malicious sites! Proceed at your own risk!
Link: hxxp://finquattro.eu/viewmovie.html
File downloaded: codecinst.exe(774F5907BBDF70419B4973DB6BB230DD)
The files have already been made available to all Malware Database members.
What you see if you attempt to view the link:
7/21/08 4:30PM UPDATE
Additional e-mails have been discovered spreading the same malware. Here are some of the emails we’ve found.
@@@@@@
Subject: Teenage Girl obviously Having Affair With Bat
Body: Prominent Male Hooker Forced To Step Down After Sex With Sleazy Evangelist hxxp://thewindsorhotel.it/viewmovie.html
@@@@@@
@@@@@@
Subject: President Bush’s iPod: The Complete Playlist
Body: Ican To Shut Down Email Services World Wide hxxp://thewindsorhotel.it/viewmovie.html
@@@@@@
@@@@@@
Subject: Shocking Video Shows Spongebob And Gay Sex!
Body: [video] Bush Tours America To Survey Damage Caused By His Disastrous Presidency hxxp://galvatoledo.com/viewmovie.html
@@@@@@
Subject: JFK memoirs reveal affair
Body: Bull gores farmer to death hxxp://nebottorrella.com/viewmovie.html
@@@@@
@@@@@@



Received the “Obama is Gay” email and was pointed toward:
hxxp://www.agon.ro/ (Don’t Go Here) viewmovie.html
Website looks hacked, so I sent them a message, but who knows.
Hi, I’m a Korean student and have joined in OC.
i read your analysis. It is useful, I think. Can I share this info with other guys of Korea?
We are glad that you enjoy the site. Feel free to share the information with your friends.
Yes, the site was hacked due to the last ‘reset password’ bug in Joomla!.
Now it is fixed and updated, no more worries.
Thanks for the concern.