Jump to content


Watch out for an epostcard!


5 replies to this topic

#1 OFFLINE   slowday444

    Power Member

  • Members
  • PipPipPipPip
  • 807 posts

Posted 04 July 2007 - 11:51 AM

My oldest daughter opened her Boston College (she's a doctoral candidate) epostcard of some sort email with her sister's work notebook the other day and it was a trojan/worm (my doom, I guess). My younger daughter did have Norton and I guess it went crazy stopping it from sending out more infections. They called me in a panic at work! In some respects it was somewhat humorous their reaction, at first I thought they'd been in an accident or something. We still aren't 100% sure they stopped it. Anyway, watch out U.S. for 4th ecards today!

#2 OFFLINE   Tarq57

    Advanced Member

  • Members
  • PipPipPip
  • 297 posts

Posted 04 July 2007 - 12:27 PM

I've read something similar about (possibly) the same attack vector...the salient identifying feature being the words "a family member has sent you a..."
Basically, don't open postcards/greeting cards if the "family member" isn't identified by name.

Is that part of the form your daughter's e-card took, slowday?

#3 OFFLINE   slowday444

    Power Member

  • Members
  • PipPipPipPip
  • 807 posts

Posted 04 July 2007 - 12:36 PM

View PostTarq57, on Jul 4 2007, 08:27 AM, said:

I've read something similar about (possibly) the same attack vector...the salient identifying feature being the words "a family member has sent you a..."
Basically, don't open postcards/greeting cards if the "family member" isn't identified by name.

Is that part of the form your daughter's e-card took, slowday?
Sorry, not really sure!

#4 OFFLINE   AndyManchesta

    Power Member

  • Spyware Moderators
  • 1,821 posts
  • Gender:Male
  • Location:Manchester. UK
  • Interests:Music, Movies, Website Building & Design, Malware Testing/Research and spending time with friends & family.

Posted 04 July 2007 - 07:02 PM

http://www.sophos.co...007/07/322.html

If anyone does open it Id suggest running a full scan with Kaspersky's online scanner and also running a rootkit scanner such as GMER as it will likely attempt to install windev-*-*.sys which is a component of the Nuwar/Storm worm (*=random numbers and letters)

http://www.google.co.uk/search?hl=en&q...*.sys&meta=

#5 OFFLINE   CeeCee

    Wait a minute, who am I here?

  • Members
  • PipPipPipPip
  • 1,210 posts
  • Gender:Male
  • Location:Finland
  • Interests:Movies, my computer

Posted 08 July 2007 - 10:29 PM

Just looked my Opera Web Mail and there was a new e-mail from greetingCard.Org, titled: You've received a postcard from a neighbour! There was a address link with IP 71.131.36.247. Of course i didn't clicked that link. I went to greetingcard.org and noticed this alert: http://www.greetingc...sis_center.html

Beware!

#6 OFFLINE   fireryone

    Lets Get Dangerous

  • Members
  • PipPipPipPip
  • 1,626 posts
  • Gender:Male
  • Location:QLD,Australia
  • Interests:PC, LOTRO

Posted 08 July 2007 - 11:38 PM

I had one or so of these as well.

Using an IP Address as instead of a web address, screamed "fake" to me, so I naturally ignored it.
fireryone



There are 10 types of people in this world.
Those who understand binary, and those who don't.