SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 WARNING - Virus Attempt From A Lad

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
wingman
Master Baiter


Joined: 31 Oct 2007
Posts: 156
Location: State of Confusion, USA


PostPosted: Tue Nov 20, 2007 4:53 am Reply with quoteBack to top

Yes, I've been doing some insult baiting. I prolly knew one of them would attempt this. Here is the email I received, the link is not included.

Quote:
Return-Path: <[email protected]>
Delivered-To: me
Received: (qmail 29493 invoked from network); 20 Nov 2007 02:31:24 -0000
Received: from unknown (HELO localhost.localdomain) ([10.50.32.32]) (envelope-sender <[email protected]>)

by 0 (qmail-ldap-1.03) with SMTP

for <me>; 20 Nov 2007 02:31:24 -0000
Return-Path: <[email protected]>
Received: from SRV01.tp.local (wcoe-18.r-195-35-231.atwork.nl [195.35.231.18])

by mprdmx13.nwk.myway.com (Postfix) with ESMTP id 66E9853ED3

for <me>; Mon, 19 Nov 2007 21:31:20 -0500 (EST)
Received: from dev01 ([192.168.100.21]) by SRV01.tp.local with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 20 Nov 2007 03:31:31 +0100
Received: by dev01 (sSMTP sendmail emulation); Tue, 20 Nov 2007 03:20:56 +0100
From: [email protected]
[ Add to Address Book | Block Address | Report as Spam ]
Date: Tue, 20 Nov 2007 03:20:56 +0100
To: me
Subject: Hey, you have a new Greeting !!!
Content-Type: text/html
Message-ID: <[email protected]>
X-OriginalArrivalTime: 20 Nov 2007 02:31:31.0359 (UTC) FILETIME=[75FC8AF0:01C82B1D]
X-TM-AS-Product-Ver: SMEX-7.5.0.1243-5.0.1023-15556.002
X-TM-AS-Result: Yes-30.521000-4.000000-31
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No
X-FII-Tracking: 0.006908




Hello friend!
You have just received a postcard Greeting fromsomeone who cares about you...


Just click hereto receive your Animated Greeting !

Thankyou for using www.Greetings.comservices !!!
Please take this opportunity to let yourfriends hear about us by sending them a postcard from our collection!


The link points to a file called postcard.pif at this address: http://mail.embassyethnic.com/

I googled postcard.pif and here's what I found.
Safe link: http://simonspeight.com/2007/01/06/

Just a reminder to practice safe baiting.

_________________
This is not a signature. I type this at the end of every post to ensure quality control.

Total amount in counterfeit checks taken off the street: $11450USD

"YOU THE TALK OF SCAM YOU WILL REMAIN POOR OVER THERE, YOU DONT KNOW EZE EGO OF IHIALA.."[email protected]

"if only u had a little bit more education........u probably wouldn't have ended up this way."...Dr Bola Taylor

"THE GOD OF ABRAHAM WILL DESTROY U THIS 2007 YOU WILL NOT ENTER 2008 ."...henry oranusi (fake minister)
Cellphone x5 Closed lad accounts x6 pony
View user's profileSend private message
Akai Ryu
Chuck Norris


Joined: 11 Jun 2007
Posts: 1369


PostPosted: Tue Nov 20, 2007 4:57 am Reply with quoteBack to top

The "You've got an e-card!" emails are usually spammed out by zombie computers, such as those compromised by the infamous Storm worm.

_________________
Several hundred fake escrows (and others) deaded--no longer counting.

aa419.org --dead a fake site today.

No, Akai, you're a wonderful bitch. --Reaper

Last edited by Akai Ryu on Tue Nov 20, 2007 5:01 am; edited 2 times in total
View user's profileSend private messageVisit poster's websiteSkype Name
wingman
Master Baiter


Joined: 31 Oct 2007
Posts: 156
Location: State of Confusion, USA


PostPosted: Tue Nov 20, 2007 5:00 am Reply with quoteBack to top

That address has been in existence for exactly 30 hours. I have been using it to launch insult attacks at lads I am simultaneously baiting from other places. I very much doubt it could have come from any other source.

_________________
This is not a signature. I type this at the end of every post to ensure quality control.

Total amount in counterfeit checks taken off the street: $11450USD

"YOU THE TALK OF SCAM YOU WILL REMAIN POOR OVER THERE, YOU DONT KNOW EZE EGO OF IHIALA.."[email protected]

"if only u had a little bit more education........u probably wouldn't have ended up this way."...Dr Bola Taylor

"THE GOD OF ABRAHAM WILL DESTROY U THIS 2007 YOU WILL NOT ENTER 2008 ."...henry oranusi (fake minister)
Cellphone x5 Closed lad accounts x6 pony
View user's profileSend private message
Akai Ryu
Chuck Norris


Joined: 11 Jun 2007
Posts: 1369


PostPosted: Tue Nov 20, 2007 5:02 am Reply with quoteBack to top

Have you done any guest-book seeding or anything like that, by chance?

Go ahead and PM me the malicious link that came with the email.

_________________
Several hundred fake escrows (and others) deaded--no longer counting.

aa419.org --dead a fake site today.

No, Akai, you're a wonderful bitch. --Reaper
View user's profileSend private messageVisit poster's websiteSkype Name
wingman
Master Baiter


Joined: 31 Oct 2007
Posts: 156
Location: State of Confusion, USA


PostPosted: Tue Nov 20, 2007 5:03 am Reply with quoteBack to top

Not with that address, no. PM sent.

_________________
This is not a signature. I type this at the end of every post to ensure quality control.

Total amount in counterfeit checks taken off the street: $11450USD

"YOU THE TALK OF SCAM YOU WILL REMAIN POOR OVER THERE, YOU DONT KNOW EZE EGO OF IHIALA.."[email protected]

"if only u had a little bit more education........u probably wouldn't have ended up this way."...Dr Bola Taylor

"THE GOD OF ABRAHAM WILL DESTROY U THIS 2007 YOU WILL NOT ENTER 2008 ."...henry oranusi (fake minister)
Cellphone x5 Closed lad accounts x6 pony
View user's profileSend private message
Pastor Frank
Moderator


Joined: 31 Jan 2007
Posts: 11442
Location: Illuminati HQ


PostPosted: Tue Nov 20, 2007 8:29 am Reply with quoteBack to top

A Virus on the interwebs? I refuse to believe that.

_________________
"Father Juan are sure that you are man of God,because your behaviors showed you as unbeliever" -Mary R

"Shallow men believe in luck. Strong men believe in cause and effect." -Emerson
View user's profileSend private messageSend e-mail
Don
Baiting Guru


Joined: 25 May 2004
Posts: 3045
Location: Italy, 87.2.222.132


PostPosted: Tue Nov 20, 2007 8:54 am Reply with quoteBack to top

wingman wrote:
That address has been in existence for exactly 30 hours.


... and once you set up a "catchall" email account for any given domain you'll receive greeting cards for thousands of accounts that don't yet exist. Wink

Nope, the lad didn't "send" you a virus, sorry.

_________________
Mortar x12
No sugar plum fairies have been hurt during the process of creating this message.

**"Freedom? There ain't no fuckin' Freedom!"**
View user's profileSend private messageYahoo MessengerSkype Name
Akai Ryu
Chuck Norris


Joined: 11 Jun 2007
Posts: 1369


PostPosted: Tue Nov 20, 2007 9:32 am Reply with quoteBack to top

The bad link hosts a variant of Netsky--this worm has been around for a few years now, but it still goes strong. It is spammed out far and wide via email. Anyway, one trait that this worm has, is that it can scan the infected computer for email addresses. It will then spam itself to all the emails it finds on that machine. So your lad is possibly doing his "work" from an infected machine.

_________________
Several hundred fake escrows (and others) deaded--no longer counting.

aa419.org --dead a fake site today.

No, Akai, you're a wonderful bitch. --Reaper
View user's profileSend private messageVisit poster's websiteSkype Name
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT