New SPAM/Virus Alert 28 August 07

Freshy-ZN

Freshy-ZN

Executive Member
Joined
Aug 17, 2005
Messages
5,729
Reaction score
92
Location
Underberg, KZN
Just got what looks to be a new type of SPAM to get you to download a exe. Anticipating floods of similiar SPAM emails so be on the lookout for them and DONT CLICK THE LINK IN THE BODY:

Subject:
New Software needs Beta testers

Body:
We Need Beta testers to try out our new software Home Reno Planner

This will help us get the software ready for consumer release. As a beta
tester you will receive a free copy of the program and free updates.

Download the software, See What you think, and Email us your thoughts.
If you would like to help us with this no obligation Beta test, follow
this link to our secure download server: http://72 .15.111.105/setup.exe <-----DO NOT CLICK!

 
Last edited:
Guess you're not using gmail right? ;)

Please edit that post to remove the link, you don't want a n00b downloading that file now.
 
No im not using gmail on my domain. I use gmail to cleanse other domains. I know about Gmail. My post is simply a warning for those that may get that type of email. I dont need advice on how not to get SPAM. It is not necessary to comment other than to maybe add variations on this new type of scam/SPAM/infected link.
 
I think the fact that the link showed an ip address and not the company name is already suspicious enough.

Also found this:

Search results for: 72.15.111.105


OrgName: Newnan Utilities
OrgID: NEWN
Address: 70 Sewell Road
City: Newnan
StateProv: GA
PostalCode: 30263
Country: US

ReferralServer: rwhois://rwhois.newnanutilities.org:4321/

NetRange: 72.15.64.0 - 72.15.127.255
CIDR: 72.15.64.0/18
NetName: NU-NET
NetHandle: NET-72-15-64-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
NameServer: DNS.NEWNANUTILITIES.ORG
NameServer: DNS2.NEWNANUTILITIES.ORG
Comment:
RegDate: 2004-11-19
Updated: 2005-08-04

RTechHandle: SCL12-ARIN
RTechName: Cleaves, Shawn
RTechPhone: +1-770-683-5516
RTechEmail: [email protected]

OrgTechHandle: SCL12-ARIN
OrgTechName: Cleaves, Shawn
OrgTechPhone: +1-770-683-5516
OrgTechEmail: [email protected]
 
Last edited:
acidrain said:
I think the fact that the link showed an ip address and not the company name is already suspicious enough.
Click to expand...

Absolutely right. Some people just cant help clicking on links like that though, hence my warning even though most people here would see the scam for what it is right away.
 
Freshy-ZN said:
Absolutely right. Some people just cant help clicking on links like that though...
Click to expand...

*sigh* i guess thats why they are called n00bs with itchy fingers.... just like my one friend who still seems to think norton is the best AV out there
 
My spam count on all my mail services (domain + gmail + ananzi) for the past 72hours stands on 3 emails.
"International company is looking for local representatives."
"Looking for penpal?"
"Possible friendship"

No floods of "virus" emails.

ronald911, If you want to find out real bad, download and run it. :p You should be able to find out first hand what it does. But then again, I wont recommend you do this though. All I know is, Im not touching some random file - Not even if it's inside my SandBoxie. Dangerous
 
Well I anticipate 'floods' as lately I have been getting many of those ones that say something to the effect of " Hey Dude, your Moms gonna kill you you shouldnt have put video up here.." then theres a link that looks like its a youtube vid link but its actually a masked URL to some file. Been getting tens of those a day for the last week or so.
 
Freshy-ZN said:
It is not necessary to comment other than to maybe add variations on this new type of scam/SPAM/infected link.
Click to expand...

Yip, you're right, I was being a wise guy (no sarcasm intended) sorry man. ;)
 
Freshy-ZN said:
Well I anticipate 'floods' as lately I have been getting many of those ones that say something to the effect of " Hey Dude, your Moms gonna kill you you shouldnt have put video up here.." then theres a link that looks like its a youtube vid link but its actually a masked URL to some file. Been getting tens of those a day for the last week or so.
Click to expand...

Gmail? Or on another mail service?
 
Freshy-ZN said:
straight to my domain.
Click to expand...

Have you ever tried picking up a pattern? I got rid of loads of spam by going through the email headers. eg. Loads of spam I got was sent to 'home'@domain.com and All i did was to block them using some filters in CPanel. Works like a charm. :D
 
Yeah, I like to see what the current trend and look of spam is so I can warn my friends, family and clients. As each new type of SPAM starts doing the rounds I pick up the pattern, have a look at how they work it first and then apply the filters. Running all mail through say google would make me oblivous to whats going on.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X