by certifiedbug on November 10, 2008
in Security
This spam looks like the recent ones pushing pharmaceuticals.

Except this time “One-stop for all your meds here” hid an url to globalmarketingsolutions where I landed on what appeared to be a real estate page containing a lot of links. Clicking on one of them brought this up.

http://safeweb.norton.com/report/show?name=66.96.85.221

Searching in Google I was warned, “this site may harm your computer”.

MSN Featured Offers, Spam from Canadian Pharmacy
Infector Spam ‘Free Update Windows XP,Vista’
Fake IE7 email Spam
Spam posing as MSN Featured Offers
Hit delete when it appears in your mailbox, and again do not click the ‘unsubscribe’ link contained in the spam. Doing that would just confirm to spammers that your email address is alive and working.
by certifiedbug on November 8, 2008
in Security
This week I have seen a resurgence of the “MSN Featured Offers” scam, this time from Canadian Pharmacy, pushing Viagra and other pharmaceuticals.
Previous Certifiedbug alerts:
Infector Spam ‘Free Update Windows XP,Vista’
Fake IE7 email Spam
Spam posing as MSN Featured Offers
Domain Name: xhtnnfx.cn
Created: 2008-10-28
Expires: 2009-10-28
Whois Server: whois.cnnic.net.cn
IP Location: Latvia - Latvia - Vdhost Ltd
Domain Name: progressconsider.com
ICANN Registrar: 35 TECHNOLOGY CO., LTD
Created: 2008-11-05
Expires: 2009-11-05
Updated: 2008-11-05
Domain servers in listed order:
srv1.reachfarm.com
srv2.reachfarm.com
ZHANGJIE
JIANSHELU263
TS,HB,CN 063002
hxxx://ler.rightachievement.com
Canadian Pharmacy
hxxx://myx.poseindependence.com
Canadian Pharmacy
hxxx://xkx.rightachievement.com/
Canadian Pharmacy
Those are just an example, the links will change frequently.

Fake pharmaceuticals on-line, buyer beware
by certifiedbug on August 27, 2008
in Security
Too many users still open spam, click on links and get infected. So beating on the drum, this is what this particular spam in your mailbox may look like.

Totally bogus, this is SPAM and NOT from Microsoft. The usual install.exe to infect the computer was hidden under “Free Update Windows XP,Vista”.
Spam posing as MSN Featured Offers
by certifiedbug on August 8, 2008
in Security
Spam spoofing my own email address as from admin at microsoft.com. It is fake and not from Microsoft.
Don’t click on “Download the latest version!” which links to the infecter, ‘update.exe’, and no fireworks will occur.
Internet Explorer 7
Download the latest version!
About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.
- Don’t open the email.
- If you do, don’t click on the link.
- If you do, I hope you have an up to date anti virus program.
by certifiedbug on July 16, 2008
in Security
This old turkey keeps coming in the mailbox. Hidden under “Click here” is an .exe which will infect your computer.
Angelina Jolie’s Free Video.
Click Here!
About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.
Needless to say, Microsoft does not send spam. Please don’t click unsubscribe links and buttons coming from spam messages, doing so would only serve to confirm your email is working and ready to receive more of the same.
Never click on the hidden links.