<p><a href="http://wincert.net/wp-content/uploads/2015/01/security2.jpg"><img class="alignnone size-full wp-image-545" src="http://wincert.net/wp-content/uploads/2015/01/security2.jpg" alt="security box" width="720" height="340" /></a></p>
<p>If you have received a mail from <b>U.S. Postal Service</b> that used the following address <b>u.s.postal.service@usps.net</b> with the following body message:</p>
<p><i>Hello!</i></p>
<p><i>Unfortunately we failed to deliver the postal package you have sent on the 19th of September in time because the recipient&#8217;s address is erroneous.</i></p>
<p><i>Please print out the shipment label attached and collect the package at our office.</i></p>
<p><i>United States Postal Service</i></p>
<p>with the following attachment <b>USPS report.zip</b> that contains <b>USPS report.exe</b> file please beware that this is a worm that spreads over the network and can access your private data. <!--more--></p>
<p><img src="http://wincert.net/wp-content/uploads/2011/11/usps_worm_1.PNG" alt="" /></p>
<p>According to Microsoft Security Essentials, this worm has severe risk mark.</p>
<p><strong>Category: </strong>Worm</p>
<p><strong>Description: </strong>This program is dangerous and self-propagates over a network connection.</p>
<p><strong>Recommended action: </strong>Remove this software immediately.</p>
<p>Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions. If this option is not available, log on as administrator or ask the security administrator for help.</p>
<p><strong>Items:</strong></p>
<p><strong>containerfile:C:\Users\Nikica\Desktop\USPS report.zip</strong></p>
<p><strong>file:C:\Users\Nikica\Desktop\USPS report.zip->;USPS report.exe->;(UPX)</strong></p>
<p>If you&#8217;re using outlook with junk filter, this file should already be blocked, but for those who received this mail marked as valid, please delete it at once.</p>