Forum Home
Press F1
 
Thread ID: 92900 2008-08-27 06:18:00 Is this greetingcard kosher? Billy T (70) Press F1
Post ID Timestamp Content User
700864 2008-08-27 06:18:00 Three of these have come in recently on my son's email. None get past Mailwasher, but I'm curious as to whether they carry a nasty payload or whether they are just an Ecard marketing ploy.

Anybody seen them before or know their background?

[web links have been disabled]

Cheers

Billy 8-{) :confused:


X-Apparently-To: xxxx.xxxx@xtra.co.nz via 124.108.96.102; Tue, 26 Aug 2008 17:46:31 -0700
X-Originating-IP: [68.249.132.101]
Authentication-Results: mta101.tnz.mail.aue.yahoo.com from=mcinsf.org; domainkeys=neutral (no sig)
Received: from 68.249.132.101 (EHLO adsl-68-249-132-101.dsl.chcgil.ameritech.net) (68.249.132.101)
by mta101.tnz.mail.aue.yahoo.com with SMTP; Tue, 26 Aug 2008 17:46:30 -0700
Message-ID: <66271.daryouch@armando>
Date: Tue, 26 Aug 2008 22:59:45 +0000
From: "greetingcard.org" <michaelkyin@mcinsf.org>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
MIME-Version: 1.0
To: "dear friend" <xxxx.xxxx@xtra.co.nz>
Subject: You've received a greeting ecard
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 080826-0, 26/08/2008), Inbound message
X-Antivirus-Status: Clean

Good day.
You have received an eCard

To pick up your eCard, choose from any of the following options:
Click on the following link (or copy & paste it into your web browser):

ht tp://independenceinstrument.com/

Your card will be aviailable for pick-up beginning for the next 30 days.
Please be sure to view your eCard before the days are up!

We hope you enjoy you eCard.

Thank You!

ht tp://www.greetingcard.org
Billy T (70)
700865 2008-08-27 07:30:00 It is spam
The link to independenceinstrument.com directs to a Canadian Pharmacy Website with a rather dubious reputation.
Safari (3993)
700866 2008-08-27 09:42:00 It is spam
The link to independenceinstrument.com directs to a Canadian Pharmacy Website with a rather dubious reputation. Thanks for that Safari, I'll dump any future cards that come. I was reluctant to do that before because they were addressed to my son but I'll delete them from now on. I don't look at my kids' emails, but for home network security all incoming mail passes through a single point of entry and Mailwasher before it goes to their computers so I can intercept any nasties.

Cheers

Billy 8-{)
Billy T (70)
700867 2008-08-27 10:36:00 aloha billy t

i went there with one of those e-cards
thinking it had been scanned
when opened it unleashed a veritable spybot viral attack
took me a week to finally clear and heal everything
good that you noticed it
hoanikai (13138)
700868 2008-08-27 11:08:00 There are a few doing the rounds, just finished cleaning out a Customers PC last weekend, it was meant to be from Ecards - a legit site - it was even addressed from a person he knew, who we found out didn't send it - BUT it had a hidden .exe in the link - instant infection of Winantivirus 2008. wainuitech (129)
700869 2008-08-27 11:33:00 yea, those damn things have been doing the rounds for a while

Noticed an upsurge of them again the last 5 or 6 months tho


Warning of malicious e-cards
Posted by: Nikola Strahija on December 21, 2001

People are being warned to watch out for computer viruses which could be hidden in electronic Christmas cards.........
bevy121 (117)
700870 2008-08-27 12:42:00 I've been getting them too for a few days, but gmail sticks them straight into the spam folder, with a warning about them not being from who they purport to be from. annie (6010)
700871 2008-08-27 20:27:00 I've been getting a few, telling me someone had sent one. But nobody ever sends them.

And it didn't say who it was from/for, and in my opinion any email from a random source wanting me to download an executable file is dodgy.
Agent_24 (57)
700872 2008-08-27 20:53:00 Got 2 yesterday agonised wether to open it. Thought it might be be some chick wanting my parts.
But deleted them.
I wonder why they are getting past xtras spam filter if they so wide spread
prefect (6291)
700873 2008-08-27 20:58:00 Well, it's not Xtra's spam filter, it's Yahoo's, and it's rubbish. Agent_24 (57)
1 2