Download Mal/GrumPk-A now

We have just seen a lot of spam coming into our Spamtrap containing an image which links to an executable named update.exe:

Both the image and the malware are hosted on comprised servers from around the world including UK and Russia.

The sample has been proactively detected by Sophos as Mal/GrumPk-A since 3 April 2007.