{blocked}wstorg.info/e107_file s/cache/down4.exe

 Analysis by: Jonathan Beltran

 URL BLOCKING DATE/TIME: 23 Mar 2011 03:40:00 AM GMT-8
 RATING: HIGH
 DOMAIN: www.newstorg.info/
 CATEGORY: Disease Vector
 DESCRIPTION: Malicious URL component of the fake Canada Post email notification. This site hosts the file down4.exe, which is detected as TSPY_ZBOT.QXC