Scam Detectives » Virus

Has someone sent you an e-card?

admin — Thu, 18 Feb 2010 16:28:20 +0000

Sending someone an e-card can be a nice gesture and can be environmentally friendly

There are loads of legitimate e-card sites out there, which will help you to send your e-cards without incident.

Unfortunately, there’s also a load of viruses that are transmitted disguised as e-cards.

We received this email a couple of minutes ago

You have received an e-card

To pick up your eCard, click on the following link (or copy & paste it into your web browser):

http://kamien-grabica.**.**/ecard.exe (LINK DISABLED)

Your card will be aviailable for pick-up beginning for the next 30 days.

This one links to e-card.exe, a nasty little virus which has been reported to cause some machines to display the “Blue screen of Death” and refuse to boot in anything but safe mode.

So how do I tell if someone really has sent me an e-card?

If there’s no name on the email and it just says “Someone sent you an e-card” then delete it. A legitimate e-card site will tell you who has sent the e-card.

Email your friend (using the email address in your contacts, not the one from the email) to ask them if they really did send you an e-card. Explain nicely that you’re wary of opening e-cards because you’ve heard that some of them contain viruses. If you get a response saying “Yes, I sent it”, then you know it’s for real. If they respond “Hey, nice to hear from you, but it wasn’t me” then you can safely delete the email without fear of offending anyone!

Updated account agreement – Another facebook virus alert

admin — Wed, 10 Feb 2010 19:49:56 +0000

Dear Facebook user,

Due to Facebook policy changes, all Facebook users must submit a new, updated account agreement, regardless of their original account start date.
Accounts that do not submit the updated account agreement by the deadline will have restricted.

Please unzip the attached file and run “agreement.exe” by double-clicking it.

Thanks,
The Facebook Team

Once again we see a shift from the scammers trying to avoid detection. We’re wise to the “password change” email that circulated a few days ago, so now they’re trying to get us to open a new attachment “agreement.exe”.

Facebook would not communicate a new user agreement to you in this way. You’d be presented with it upon logging into the site.
Even if they did, it WOULD NOT EVER be in the form of a .exe file

Delete this email immediately, NEVER open .exe files sent to you in an email.

===============================================================================
We now have a great range of PC and Home Security products available in the Scam Detectives Security Supplies online store (powered by Amazon).

Facebook Password Reset Confirmation! Customer Support.

admin — Mon, 08 Feb 2010 15:36:34 +0000

Yet another attempt to trick you into downloading a virus. The attached zip file doesn’t contain a new Facebook password, it’s another virus!

Delete the email immediately, do not open the attachment!

Remember:

If you didn’t request a password reminder from Facebook, then they would have no reason to send you one
Even if you did, they wouldn’t send it as an attachment

If you’ve forgotten your Facebook password, go to the Facebook home page and click “forgotten password”. They’ll send you a reset code to your registered email address that you’ll have to enter to reset your password.

Dear user of facebook,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook.

Variation on DHL failed delivery virus email – Your order has been paid! Parcel NR.5256

admin — Mon, 08 Feb 2010 13:57:15 +0000

This is a variation on the “DHL Failed Delivery” but the attachment is the same – A banking Trojan designed to harvest your details. Delete the email immediately, do not open the attachment under any circumstances!

Email subject: Your order has been paid! Parcel NR.5256

Goodafternoon!

Thank you for shopping at our internet store!
We have successfully received your payment.

Your order has been shipped to your billing address.

You have ordered ” Macally ICECAM2 “

You can find your tracking number in attached to the e-mail document.

Please print the DHL label to get your package.

We hope you enjoy your order!
Ramblinwreckstore.com

Has “Some Jerk” posted your picture online? No! It’s a virus!

admin — Wed, 03 Feb 2010 14:30:35 +0000

This arrived in the Scam Detectives email box this afternoon.

No, nobody has posted our picture online. It’s a ruse to get you to download the Trojan ZBot virus, which is a keylogger designed to harvest your login information for online banking websites.

***VERY IMPORTANT NOTE – MANY ANTIVIRUS PROGRAMS WILL NOT PICK THIS UP***

Hey, some jerk has posted your pictures (u understand what kind of pictures are there) and sent a link of them to all ur friends. I have already replied back. Said, that he is an idiot. See the link:

LINK REMOVED

Lizzie Mcnally

This is a screenshot from the website the link leads to.

We’ll keep saying it – If you receive an email of this nature DELETE IT IMMEDIATELY. Do not click on the link, it WILL infect your PC and many antivirus programs will not pick this up, even if they are fully up to date.

DHL failed delivery (also UPS/TNT/ParcelForce)

admin — Tue, 19 Jan 2010 12:04:11 +0000

Have you had an email like this?

Dear customer!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly.

Please attention!
The shipping label is attached to this e-mail.
Print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox!

The attached “shipping label” is actually a virus. Don’t open the attachment and delete the email immediately.

If you open the file inside the attachment you will be infected by a “backdoor Trojan horse”, which will attempt to take control of your PC.

If you think that you should have received a delivery and haven’t, contact your local courier depot, who will be able to advise you as to the status of your delivery, or use the official DHL website to track your parcel online.

We now have a great range of PC and Home Security products available in the Scam Detectives Security Supplies online store (powered by Amazon).