Author |
Message |
Yastreb
Common Street Thawth Vergabon
Joined: 04 Apr 2006
Posts: 17388
Location: Leading my wolf pack
|
Posted:
Tue Jul 10, 2007 12:05 pm |
|
I've had some odd spam show up today, including two "virus warnings" that I have the gravest suspicions about.
Each has the same text:
Quote: |
Dear Customer,
Our robot has detected an abnormal activity from your IP adress
on sending e-mails. Probably it is connected with the last epidemic
of a worm which does not have official patches at the moment.
We recommend you to install this patch to remove worm files
and stop email sending, otherwise your account will be blocked. |
The boldfaced phrase was a link that I didn't follow. I did a properties check and found this:
Quote: |
?c955099675c50080d0229e368412571d7d
Protocol: HyperText Transfer Protocol
Type: 11/?C955099675C50080D0229E368412571D7D
Address: http://74.69.xxxxx
URL: c955099675c50080d0229e368412571d7d |
I'm assuming it's a sneaky way to get people to upload a virus.
Mod edit - I have xxxxx out part of the url to stop people from accidentally clicking on it - SP |
_________________ Son of a bitch!!! Your dead!!! Everything about your stinking poor life is dead!!! Get off my way you son of a bitch mother ....a man without father bastard....your dead Ok
May you never se the end of the year, May you sick and die in JESUS NAME AMEN.
MARK MY WORD, YOU SHALL FALL SICK, IF YOU DONT PLEASE WITH ME, YOU SHALL DIE OF THE SICKNESS, THIS IS MY FINAL WORD TO YOU
I HAVE PLACED YOU UNDER MY ORACLE GODS,
YOU SHALL CRY AND BEG FOR FORGIVENESS OR YOU DIE
x5 x2 x 246
x 5 - Oyenka Chidinma Lagos-Cotonou; Dickyboi Lagos-Accra; Femmy Lagos-Porto Novo; "Woody" Accra-Singapore; Henry Philip Abuja-Natitingou w/MG & DSW
x 7 |
|
|
|
Tsnerd
Not quite a Newb
Joined: 14 Jul 2005
Posts: 41
|
Posted:
Tue Jul 10, 2007 12:09 pm |
|
Yes. |
_________________
Fakers: many, many, lots; an SSL and a couple of Resellers.
x 6
AH, AH, AH! Two little ! |
|
|
|
ratter
Master of Master Baiters
Joined: 03 Jun 2007
Posts: 630
Location: Disembarking at Duvalier Airport
|
Posted:
Tue Jul 10, 2007 12:31 pm |
|
I got the whole IP before TS xxx'd it. That address is dead at the moment; perhaps his mom made him go to bed and turn off his computer.
I'd say your instinct is spot on. I was going to hit it from a Linux box and see what was there (without the /? at the end).
Did you get the same addy when you hover the cursor over the link in the email? It actually looks like a misformed version of this:
http://74.69.xxx.xxx/?c955099675c50080d0229e368412571d7d
Googling on that long hex number after the ? led me to a Japanese forum filled with spam. The IP addy before your hex number is 76.197.xxx.xxx and it's also dead. The bait on that one was a fake greeting card.
Mod comment: Ratter, that was SP, not I. TS |
_________________ xseveral
= 56
PayPal Modality |
|
|
|
bill2
Baiting Guru
Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?
|
Posted:
Tue Jul 10, 2007 1:31 pm |
|
Got another one today different IP# in link, got a rule set up so I won't see them again Will go over without thinking about it, just wondering where I dropped that addy to receive this. Guess it's time to drop that addy and get a fresh one. |
_________________ I don't do bling, I just do lads |
|
|
|
TheGreatOok
Catbingo
Joined: 25 May 2007
Posts: 2355
Location: Lost in L-Space
|
Posted:
Tue Jul 10, 2007 1:39 pm |
|
Yes, we were discussing that worm here, but it probably should be in general rather than help. |
_________________ For Free Bananas Click Here!
HYIP: x3 Banks:
Samuel - Ziguinchor, SE to Dakar, SE - 264 km through Gambia Helping JojoBean
"I knew rigth from the first time you sent email to me that,you are a bloody *DELETED*" - Sgt Daniel Vess
"I NO BLAME U NA DI DIRTY TOTO WEN BORN U NA IM I BLAME. CATBINGO" - Lee Wong
"I AM EQUAL TO A MENTAL RETARDED PERSON" - Alvan Ben
"You have pushed me to the wall and i will make you smell yourself i bet." - George Martins
"THE FOOL STOLE YOUR US$755, HE DOES NOT DESERVE TO LEAVE ON THE PLANET" - Jim Ovia
- for a perfect brown nosing job.
x4 |
|
|
|
ratter
Master of Master Baiters
Joined: 03 Jun 2007
Posts: 630
Location: Disembarking at Duvalier Airport
|
Posted:
Tue Jul 10, 2007 1:44 pm |
|
Ook, thanks for the pointer.
SP, sorry, I'm used to blaming TS for everything. |
_________________ xseveral
= 56
PayPal Modality |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|