My oldest daughter opened her Boston College (she's a doctoral candidate) epostcard of some sort email with her sister's work notebook the other day and it was a trojan/worm (my doom, I guess). My younger daughter did have Norton and I guess it went crazy stopping it from sending out more infections. They called me in a panic at work! In some respects it was somewhat humorous their reaction, at first I thought they'd been in an accident or something. We still aren't 100% sure they stopped it. Anyway, watch out U.S. for 4th ecards today!
Watch out for an epostcard!
Started by slowday444, Jul 04 2007 11:51 AM
5 replies to this topic
#1 OFFLINE
Posted 04 July 2007 - 11:51 AM
#2 OFFLINE
Posted 04 July 2007 - 12:27 PM
I've read something similar about (possibly) the same attack vector...the salient identifying feature being the words "a family member has sent you a..."
Basically, don't open postcards/greeting cards if the "family member" isn't identified by name.
Is that part of the form your daughter's e-card took, slowday?
Basically, don't open postcards/greeting cards if the "family member" isn't identified by name.
Is that part of the form your daughter's e-card took, slowday?
#3 OFFLINE
Posted 04 July 2007 - 12:36 PM
Tarq57, on Jul 4 2007, 08:27 AM, said:
I've read something similar about (possibly) the same attack vector...the salient identifying feature being the words "a family member has sent you a..."
Basically, don't open postcards/greeting cards if the "family member" isn't identified by name.
Is that part of the form your daughter's e-card took, slowday?
Basically, don't open postcards/greeting cards if the "family member" isn't identified by name.
Is that part of the form your daughter's e-card took, slowday?
#4 OFFLINE
Posted 04 July 2007 - 07:02 PM
http://www.sophos.co...007/07/322.html
If anyone does open it Id suggest running a full scan with Kaspersky's online scanner and also running a rootkit scanner such as GMER as it will likely attempt to install windev-*-*.sys which is a component of the Nuwar/Storm worm (*=random numbers and letters)
http://www.google.co.uk/search?hl=en&q...*.sys&meta=
If anyone does open it Id suggest running a full scan with Kaspersky's online scanner and also running a rootkit scanner such as GMER as it will likely attempt to install windev-*-*.sys which is a component of the Nuwar/Storm worm (*=random numbers and letters)
http://www.google.co.uk/search?hl=en&q...*.sys&meta=
#5 OFFLINE
Posted 08 July 2007 - 10:29 PM
Just looked my Opera Web Mail and there was a new e-mail from greetingCard.Org, titled: You've received a postcard from a neighbour! There was a address link with IP 71.131.36.247. Of course i didn't clicked that link. I went to greetingcard.org and noticed this alert: http://www.greetingc...sis_center.html
Beware!
Beware!













