Sponsored by..

Monday 31 December 2007

Js/snz.a - likely false positive in eTrust / Vet Anti-Virus

It appears that CA's eTrust Anti-Virus product (also known as Vet Anti-Virus, often bundled with other security applications such as ZoneAlarm) is coming up with a false positive for js/snz.a for several complex javascript applications.

As far as I can tell, the javascript uses complex encoding but is not malware. These javascript elements are widely used on the web. As far as I can tell, they are not harmful in any way and this is a mis-identification by eTrust / Vet.

The signature that has the problem is 31.3.5417 dated 31/12/07

Some of the Javascript files that seem to trigger an alert are named:

  • jquery.js
  • mootools.js
  • ifx.js
  • show_ads.js
  • relevancead.js
  • submodal.js
  • iutil.js
  • ifxslide.js
There may be other javascript apps that show the same problem - of course, filenames are arbitary and can be absolutely anything at all.

If you're running Internet Explorer, then you may see an alert for an individual .js file as above, in a Mozilla-based browser (such as Seamonkey or Firefox) you may get a virus alert for a file named something similar to C:\Documents and Settings\USERNAME\Application Data\Mozilla\Profiles\Default\xxxxxxxx.SLT\CACHE\xxxxxxxxxxx

Usually, these false positives are fixed by CA pretty quickly. For most people this should just be a temporary nuisance that will be fixed with the latest virus update.

You can submit suspect files to CA here for analysis, that may well help them to fix the problem.

Follow up: this problem has now been fixed. It turns out that the javascript had been compressed using this packer tool which itself is harmless, but it does appear that the packer has been used for malicious javascript applications in the past as well as legitimate ones. Perhaps the lesson is.. don't pack or obfuscate your javascript!

Thursday 27 December 2007

Dating Scam Sites V

Another bunch of dating scam sites, to follow on from these. Hosted on 210.14.129.25.

  • Engineride.info
  • Enginewreck.info
  • Glorylandusa.info
  • Glorywaychurchx.info
  • Honordays.info
  • Honorholes.info
  • Honorministries.info
  • Morninghonor.info
  • Oldgloryshirts.info
  • Simoldglory.info
  • Usoldglory.info
  • Theredglow.info

Sample email:

Hey you
I read your profile on-line a few minutes ago and you seem intresting
email me at Nikki@GloryWayChurchx.info and I will reply with a Picture and Info
about me right away
I will stay online and wait for your email
Talk to you soon

Tuesday 18 December 2007

Highly targeted phish - frauddept@ustreas.gov


This is a highly targeted phish aimed at senior management in a company. The manager (typically a principle officer or other named contact) is named in full, along with the full name of the target company. Attached is a file called complaint.zip with a trojan.

In this case, the email comes from frauddept@ustreas.gov but it could potentially come from any government agency. The bottom line.. exercise caution with unsolicited email attachments.

Dear [Real Name],

A complaint has been filled against the company you are affiliated to [Company Name] in regards to the possibillity of tax avoidance and money laundering schemes.

The complaint was filled by Mr. Benjamin Kent on 12/10/2007 and contains refferences that link your company and another 4 companies in an attemt to gain illegal proffit.

Registration : [Reference] Date: 12/10/2007

A copy of the initial complaint and claims has been attached to this e-mail.Please print and keep this copy for your personal records.

Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them:

Claims based on product liability;

Claims for personal injuries;

Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.

The decision as to whether your dispute or any part of it can be arbitrated rests solely with the US Department of Treasury.

The Department of Treasury offers a binding arbitration service for

disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.

Monday 19 November 2007

Dating Scam Sites IV

More domains that seem to be associated with this dating scam, this time hosted on 210.14.129.25 in China.

  • Alpenshine.info
  • Bunlight.info
  • Charmshine.info
  • Comfortshine.info
  • Glowballproducts.info
  • Glowlightstuff.info
  • Glowplugfuel.info
  • Goldenglowinc.info
  • Healthyglowusa.info
  • Lightbal.info
  • Lightplugs.info
  • Shinebal.info
  • Shinecandles.info
  • Shineplug.info
  • Shinestick.info
  • Shinyglowstick.info
  • Thebestglow.info
  • Theglowpup.info
  • Theglowpuppy.info
  • Theredglow.info
The basic approach is unchanged:
Hello! I am tired this afternoon. I am nice girl that would like to chat with you.
Email me at fbhk@GlowBallProducts.info only, because I am writing not from my
personal email. I will reply with my pics
Well, I'm pretty tired this afternoon too but that doesn't make me want to email pics of myself to strangers!

Tuesday 23 October 2007

Yourmusic.com ad banners sering up malware

For at least a week, Virgin Media (and probably other sites) have been serving up compromised ads for Yourmusic.com that direct their users to a fake anti-spyware site called MalwareAlarm.com (via malware-scan.com) - which is actually a trojan designed to scare people into parting with their cash, while infecting their machines at the same time.

How the banners got compromised is a mystery, but it's clearly the work of a third party. More here.

Tuesday 2 October 2007

Yet more dating scam sites

Another set of dating scam domains related to these and these. The email follows a similar pattern to:
Hello! I am tired tonight. I am nice girl that would like to chat with you. Email me
at np@SuperOnset.info only, because I am writing not from my personal email. Don't
miss some of my naughty pictures.

See this post for more information on how the scam works. This batch of bogus domains are:

  • Closecallusa.info
  • Closecallworld.info
  • Closemorehomes.info
  • Closemoreplus.info
  • Closeopenwave.info
  • Greatnear.info
  • Mailvisionworld.info
  • Nearencounters.info
  • Onsetcombat.info
  • Quickclosepa.info
  • Superonset.info
  • Youclosemore.info
  • Youronset.info
For techies, the nameservers for all these domains are DNSREAL.COM which appears to be used exclusively for this type of scam. This is registered to what is almost definitely a bogus name and address, but does use the email dnzmazter@yahoo.com.

Wednesday 26 September 2007

Savings Pioneer (savingspioneer.com) Spam


"Savings Pioneer" (savingspioneer.com) is a persistent spammer who constantly shifts between privacy protected domains and sending IP addresses to avoid blocking. They do not honour unsubcribe requests.

They are an affiliate of Media Breakaway LLC (formerly known as OptInRealBig run by spammer Scott Richter) which in turn directs traffic through other very low quality affiliate programs such as vcmedia.com (a ValueClick domain), websponsors.com, inteletrack.com, gratisnetwork.com, swmark.com, zanox.com, atdmt.com, clash-media.net, monetizeit.net and others. In some cases the click is passed from company to company in what appears to be a fairly grubby series of business relationships.

Savings Pioneer is most likely just an affiliate of Media Breakway LLC, but Richter's outfit doesn't give any guidance on how to report affiliate abuse.

Two of Savings Pioneer's key parterns are Hurricane Electric (he.net) and Exist Hosting (existhosting.com). This latter appears to be a two-bit outfit with astoundingly bad reviews and are responsible for much of the mail handling.

The following 1,937 domains are used in rotation by Savings Pioneer to try to overcoming people blocking them. They tend to change to a new domain every day. There may be more!

If you get one of these, send a copy of the email to abuse -at- he.net.

Added 1-Nov-07: Theoretically you can also try emailing unsubscribe -at- mediabreakaway.com who seem to provide the mailing list. Unsubscribing at savingspioneer.com seems to be ignored.

Spam sites hosted on 216.218.214.250:

  • Abouttheinsect.com
  • Absolutelyimpressive.com
  • Absolutelyuncanny.com
  • Activegift.com
  • Administrativeexpert.com
  • Administrativeexpertscentral.com
  • Administrativeexpertsonline.com
  • Advancedbusinessonline.com
  • Advancedgraphicsonline.com
  • Advancedhealthtech.com
  • Advancedhomedesigns.com
  • Advancedlivingonline.com
  • Advancedprogramguide.com
  • Advancedwellnessonline.com
  • Afriendonline.com
  • Afriendsite.com
  • Airdataonline.com
  • Airmanagementonline.com
  • Airwireonline.com
  • Alarmmanagementgroup.com
  • Allboatonline.com
  • Alldigitalwork.com
  • Allfreshnews.com
  • Allnewinventions.com
  • Allpartsunlimited.com
  • Alltimedigital.com
  • Alphamanagementonline.com
  • Aluminumyacht.com
  • Amazingworldsports.com
  • Americannaturecenter.com
  • Americathewonderful.com
  • Animalhealthsite.com
  • Animalnewsonline.com
  • Antiqueautoonline.com
  • Antiqueboatauction.com
  • Appointedexecutive.com
  • Areasontogive.com
  • Areasontogiveonline.com
  • Arthropodcontrol.com
  • Arthropodculture.com
  • Arthropodencyclopedia.com
  • Arthropodfacts.com
  • Arthropodofcanada.com
  • Askhealthsource.com
  • Atlantiscrew.com
  • Authorityanswers.com
  • Badgerstatefloors.com
  • Badkarmasquad.com
  • Bakingsalts.com
  • Baymanagementsystems.com
  • Bestadvancedinfo.com
  • Bestairsystems.com
  • Bestbetdirect.com
  • Bestbusinessprogram.com
  • Bestcarpetsource.com
  • Bestcitytech.com
  • Bestdistrict.com
  • Bestfluid.com
  • Bestfriendgame.com
  • Bestfriendhost.com
  • Bestgreenhousesupplies.com
  • Bestinsectbite.com
  • Bestlabmanagement.com
  • Bestlearnenglish.com
  • Bestmarinaproperty.com
  • Bestmarmotbasin.com
  • Bestofsmoothjazz.com
  • Bestopengolf.com
  • Bestopenrates.com
  • Bestpenguins.com
  • Bestposse.com
  • Bestpowerball.com
  • Bestproducebox.com
  • Bestproductsunlimited.com
  • Bestsharingsite.com
  • Bestsmoothskin.com
  • Bestsodapop.com
  • Bestsupernet.com
  • Bestthemeparties.com
  • Bestwholeness.com
  • Bestwonderfulthings.com
  • Bigcityvisit.com
  • Biggreenbet.com
  • Biggreendirect.com
  • Biggreendream.com
  • Biggreenpalm.com
  • Biggreenventures.com
  • Bigpowerful.com
  • Bigproduce.com
  • Bigrealfruit.com
  • Bigwaxfruit.com
  • Bionatureonline.com
  • Bluemanagementgroup.com
  • Boatmotorsales.com
  • Bodyfreefitness.com
  • Bottomlessonline.com
  • Bottomlessusa.com
  • Breakmegadisco.com
  • Brightideasbulb.com
  • Brightlightbulb.com
  • Buildyourbuttons.com
  • Businessconvert.com
  • Businessdare.com
  • Businessenterprisesoa.com
  • Businessestablishmentonline.com
  • Businessgalaxies.com
  • Businessmanagementdirect.com
  • Bysecondnature.com
  • Calciumfactorsupreme.com
  • Canadaboatsales.com
  • Carsnonstop.com
  • Cedargardengreenhouse.com
  • Centercondo.com
  • Centipedearmy.com
  • Centipededirect.com
  • Centipedehouse.com
  • Centipedeleg.com
  • Centipederecords.com
  • Centipedesite.com
  • Centipedesoftware.com
  • Centipedesolutions.com
  • Centipedeworld.com
  • Centralinnovation.com
  • Centralinnovationonline.com
  • Centralinvention.com
  • Cheekymarmot.com
  • Chewymarmot.com
  • Choicemanagementservices.com
  • Choiceproductsunlimited.com
  • Citrusparkarea.com
  • Cleanairfun.com
  • Cleanpowerworld.com
  • Cliqueaway.com
  • Cliquedirect.com
  • Collegeextend.com
  • Collegegive.com
  • Collegeoffersonline.com
  • Colormanagementonline.com
  • Commercechange.com
  • Commercecreation.com
  • Commerceembark.com
  • Commerceexperience.com
  • Commercematters.com
  • Commerceobstacle.com
  • Commerceobstacles.com
  • Commercerelations.com
  • Commercestart.com
  • Commerceventure.com
  • Commercialnurseries.com
  • Concerncommerce.com
  • Concerncreation.com
  • Concernmatter.com
  • Concerntrade.com
  • Connectionunit.com
  • Cosmicdancerecords.com
  • Cosmiceggradio.com
  • Cosmiceggtest.com
  • Cosmicspacecadet.com
  • Cosmicwaterdevice.com
  • Countlesscreation.com
  • Cowsunlimitedusa.com
  • Creationsinventions.com
  • Creativemanagementonline.com
  • Creativeprotectiononline.com
  • Daswonderlandsite.com
  • Daygreensite.com
  • Dealingconnection.com
  • Dealingcreations.com
  • Dealingobstacles.com
  • Dealingrelations.com
  • Dealingventures.com
  • Defyhumannature.com
  • Dentalvisitonline.com
  • Describeamollusk.com
  • Digitalbigworld.com
  • Digitalliquidsite.com
  • Digitalmanagementonline.com
  • Digitalmediaforum.com
  • Digitalsodapop.com
  • Digitalstarworld.com
  • Digitalworldbenefits.com
  • Dimlightbulb.com
  • Directbestonline.com
  • Directioncreations.com
  • Directionpros.com
  • Directlinenow.com
  • Directmailserve.com
  • Discopunkmusic.com
  • Discothee.com
  • Dosomethingwonderful.com
  • Drinkingliquid.com
  • Dynamicgiftsonline.com
  • Dynamicleave.com
  • Dynamicoutcome.com
  • Dynamicresultonline.com
  • Dynamicsgifts.com
  • Dynamicsresult.com
  • Earthmarvel.com
  • Easyfamilyfitness.com
  • Easyfastfitness.com
  • Easygroupfitness.com
  • Easylivinghealthy.com
  • Easyonlinefitness.com
  • Easystreetfitness.com
  • Easystrong.com
  • Ecrewonline.com
  • Electricmotorsource.com
  • Embarkenterprise.com
  • Energysupersite.com
  • Enginevehicle.com
  • Enteraries.com
  • Enteryourbirthday.com
  • Entrepreneurscreations.com
  • Esharingnetwork.com
  • Esmoothjazz.com
  • Eventsunlimitedusa.com
  • Everbestfriend.com
  • Executiveappointed.com
  • Executivecreation.com
  • Executivenetworksofamerica.com
  • Executivestart.com
  • Executiveunity.com
  • Exoticwildlifeart.com
  • Expertconclusion.com
  • Expertiseknowledge.com
  • Expertmanagementsystem.com
  • Extrasmoothguide.com
  • Extremethemeparks.com
  • Factcampaign.com
  • Factorydirectguide.com
  • Familyfitnesssite.com
  • Fantasticbirthdaygifts.com
  • Fantasticcoffeesguide.com
  • Fantastichomebuys.com
  • Fantastichomesolutions.com
  • Fantasticswonderful.com
  • Fastknowledgesharing.com
  • Financestarter.com
  • Findanyshow.com
  • Findthetheme.com
  • Findyourimage.com
  • Firmcommerce.com
  • Firstfitnessclub.com
  • Fiscalfitnesscenter.com
  • Fitnessclubpro.com
  • Fitnessfindsite.com
  • Floridamaximum.com
  • Flyinginsectsite.com
  • Flyingtigersmusic.com
  • Fortunatecentral.com
  • Fortunatesite.com
  • Fortunateworld.com
  • Freegiftcentralonline.com
  • Freegiftgame.com
  • Freehabit.com
  • Freeinsect.com
  • Freepresentcards.com
  • Freepresentcentral.com
  • Freshnewstyle.com
  • Freshrootsproduce.com
  • Friendsondemand.com
  • Fromtheclique.com
  • Fromthegreenhouse.com
  • Fundentry.com
  • Fundmanagementonline.com
  • Fundmanagementsite.com
  • Fungiftcardsonline.com
  • Furrycuddleparty.com
  • Gamecentipede.com
  • Gardeninsectguide.com
  • Generalcosmiccooperation.com
  • Generalvast.com
  • Getsproduce.com
  • Getsupergreen.com
  • Giftgreatgiver.com
  • Giftsunlimitedusa.com
  • Givecardcentral.com
  • Globalbeginning.com
  • Globalbestfriend.com
  • Globalchannelone.com
  • Globalfitnessclub.com
  • Glorioussilverstallion.com
  • Goodkarmaimports.com
  • Gradelearn.com
  • Granddesignsunlimited.com
  • Greatamericanbuttons.com
  • Greatantiquecars.com
  • Greatastgiftstore.com
  • Greatcentipedebite.com
  • Greatchemists.com
  • Greatcityradio.com
  • Greatcosmicgate.com
  • Greatcrewonline.com
  • Greatdigitaldesign.com
  • Greatdiscoinferno.com
  • Greateventmanagement.com
  • Greatgamesunlimited.com
  • Greatgeneratorpro.com
  • Greatgiftscards.com
  • Greatgloriousstallion.com
  • Greatgolfdirect.com
  • Greatgreenhousekit.com
  • Greatisle.com
  • Greatkeen.com
  • Greatmanagementcompany.com
  • Greatprogressive.com
  • Greatsmoothjazz.com
  • Greattechsystems.com
  • Greatthingsunlimited.com
  • Greatvitaminguide.com
  • Greatwatertreatment.com
  • Greatwondercrew.com
  • Greatwonderland.com
  • Greenboxdirect.com
  • Greendotguide.com
  • Greenlightwebsite.com
  • Greennetworld.com
  • Greenproworld.com
  • Greensheetsonline.com
  • Greenstarworld.com
  • Greenstoreonline.com
  • Greenvalleypartners.com
  • Greenworldcall.com
  • Greenworldcom.com
  • Haydirectonline.com
  • Healthsourceworld.com
  • Highererlearninganovel.com
  • Higherlearn.com
  • Higherlearningcentral.com
  • Higherlearnings.com
  • Higherlearningstudents.com
  • Highersee.com
  • Highertake.com
  • Homefitnessfun.com
  • Homefitnessltd.com
  • Honestcontent.com
  • Honesteducationonline.com
  • Honesteducationstudents.com
  • Honestfurther.com
  • Honestlearning.com
  • Humannatureconsulting.com
  • Humannaturegifts.com
  • Ideasunlimitedusa.com
  • Ifarmproduce.com
  • Ilookfantastic.com
  • Incentiveresult.com
  • Incorporatecrew.com
  • Infoaboutpenguins.com
  • Inquirecrew.com
  • Insectcontrolzone.com
  • Insectdirect.com
  • Integratedcrew.com
  • Integrateddealing.com
  • Integratedindustry.com
  • Integratedunit.com
  • Inventivecommerce.com
  • Inventivecommerceonline.com
  • Iprofitsharing.com
  • Iskimarmot.com
  • Itsyourdisco.com
  • Iwonderonline.com
  • Justlearnonline.com
  • Karmadogonline.com
  • Kidpowerworld.com
  • Kidslearndirect.com
  • Kidslearnflash.com
  • Kidslearnnow.com
  • Kidsunlimitedonline.com
  • Kidsunlimitedusa.com
  • Knowledgedealing.com
  • Latestmedicalinventions.com
  • Learnaboutkids.com
  • Learndirectlondon.com
  • Learnenglishclub.com
  • Learnmorelinux.com
  • Learnmoreweb.com
  • Learnphonicsonline.com
  • Learnworldmusic.com
  • Legalpowerline.com
  • Letslearnmath.com
  • Letslearnsite.com
  • Letsvisitdirect.com
  • Lifesharingcenter.com
  • Lightbulbbay.com
  • Lightbulblink.com
  • Lightbulbmountain.com
  • Limitlesscommerce.com
  • Limitlesstrade.com
  • Liquidbrandonline.com
  • Liquidworldrecords.com
  • Littlegreenonline.com
  • Littlesunshineschool.com
  • Littlewebwonder.com
  • Littlewondercrew.com
  • Looksharpmodels.com
  • Looksharpusa.com
  • Lovesupremeonline.com
  • Lovetheisland.com
  • Loveyournature.com
  • Lowerlearn.com
  • Lowersee.com
  • Lowerstudy.com
  • Loyaldealing.com
  • Loyalindustry.com
  • Mammothmarmot.com
  • Managementcreations.com
  • Marinearthropod.com
  • Marmotdirect.com
  • Marmotsupreme.com
  • Marvelvast.com
  • Mediaunlimitedonline.com
  • Megaprotech.com
  • Mendeleevchemists.com
  • Mendeleevworld.com
  • Microtechguide.com
  • Minisodapop.com
  • Molluskgrins.com
  • Molluskshells.com
  • Molluskworld.com
  • Monetaryfundportal.com
  • Moralforceresult.com
  • Mostadvancedproduct.com
  • Mostwonderfullife.com
  • Mostwonderfulonline.com
  • Moveyourbuttons.com
  • Moviechanneldirect.com
  • Mrsunshineonline.com
  • Myadministrativeexperts.com
  • Myamazingfruit.com
  • Myareasontogive.com
  • Mybestisland.com
  • Mybigcreation.com
  • Mybusinessassociates.com
  • Mybusinesscommerce.com
  • Mybusinesscreations.com
  • Mybusinessdare.com
  • Mybusinessdemand.com
  • Mybusinessinvention.com
  • Mybusinessmap.com
  • Mybusinesstrade.com
  • Mycentralinnovation.com
  • Mycollegeoffers.com
  • Mycommercechange.com
  • Mycommerceconnection.com
  • Mycommercecreations.com
  • Mycommercedeals.com
  • Mycommerceobstacles.com
  • Mycommercerelations.com
  • Mycommerceventures.com
  • Mycosmicdance.com
  • Mycreativebusiness.com
  • Mycreativeprotection.com
  • Mydynamicgifts.com
  • Mydynamicresult.com
  • Myexecutivebranch.com
  • Myexecutivebusiness.com
  • Myexecutivecreations.com
  • Myexecutiveexchange.com
  • Myexecutiveone.com
  • Myexecutiveworks.com
  • Myexpertdecisions.com
  • Myfreegiftcentral.com
  • Myfruitstore.com
  • Myfungiftcards.com
  • Mygiftacard.com
  • Mygiftsindemand.com
  • Mygiveagift.com
  • Myglaciergifts.com
  • Myglobalcreation.com
  • Mygreatestpals.com
  • Mygreatgiver.com
  • Myintegratedcommerce.com
  • Myintegratedcrew.com
  • Myinventivecommerce.com
  • Mykeyproduction.com
  • Myknowledgecommerce.com
  • Mylimitlesscommerce.com
  • Mymanagementcreations.com
  • Mymanagementpros.com
  • Mynewcommerce.com
  • Myoptimalanswers.com
  • Myoptimalpartners.com
  • Myprofessionalanswers.com
  • Myprofessionalnetworks.com
  • Myprofessionscrew.com
  • Mysmartgrowth.com
  • Mysupercrew.com
  • Mysuperiorbusiness.com
  • Mytreasuregifts.com
  • Myuniversalcommerce.com
  • Myvalleycommerce.com
  • Myventureembark.com
  • Mywinagiftcard.com
  • Mywinaprize.com
  • Mywondercrewonline.com
  • Mywonderworks.com
  • Myworldwonder.com
  • Naturalfitnessguide.com
  • Nesteggentry.com
  • Nesteggportal.com
  • Netgiftsunlimited.com
  • Netmanagementservices.com
  • Netpowergenerator.com
  • Newcommerceonline.com
  • Newcoproductions.com
  • Newcrosstech.com
  • Newdigitalcity.com
  • Newmoonfruit.com
  • Newportboatrental.com
  • Nonstoplink.com
  • Nothingaboutpenguins.com
  • Novelcommerce.com
  • Noviewgreenhouse.com
  • Nycantiqueguide.com
  • Oldantiqueonline.com
  • Oldantiqueshow.com
  • Omxexchange.com
  • Onegreatgreenhouse.com
  • Onesmoothbagel.com
  • Onlinemotorsite.com
  • Openseaonline.com
  • Optimalpartnersonline.com
  • Optimalquestions.com
  • Optimalreply.com
  • Optimalrespond.com
  • Optimalwork.com
  • Originativeassets.com
  • Originativebusiness.com
  • Originativecommerce.com
  • Originativeearth.com
  • Originativeglobe.com
  • Originativeuniverse.com
  • Originativeworld.com
  • Originmanagementgroup.com
  • Ourfantasticfamilies.com
  • Ourpowerline.com
  • Outislandmarina.com
  • Papermanagementgroup.com
  • Partsunlimitedinc.com
  • Penguinproductionsonline.com
  • Peoplecanlearn.com
  • Perkinpals.com
  • Perklove.com
  • Perkluv.com
  • Peruviancentipede.com
  • Plasticfantasticsurf.com
  • Pokethepenguins.com
  • Pontoonship.com
  • Portfitness.com
  • Possemachine.com
  • Powerlinenow.com
  • Powersupplytech.com
  • Presentacard.com
  • Professionalcloth.com
  • Professionalrespond.com
  • Professioncrew.com
  • Professionscrew.com
  • Professionsunit.com
  • Publicradionetworks.com
  • Publicschoolrugby.com
  • Purenatureonline.com
  • Q2result.com
  • Radiantbulbguide.com
  • Razorsharpminds.com
  • Razorsharponline.com
  • Realsupersite.com
  • Rednotginger.com
  • Repairsourceonline.com
  • Rexdigitalmedia.com
  • Rightcamps.com
  • Savingsentrance.com
  • Savingsentree.com
  • Savingsentry.com
  • Savingsportalonline.com
  • Schoolintellect.com
  • Schoolmind.com
  • Schoolprovide.com
  • Schooluniformdisco.com
  • Secondnatureprograms.com
  • Secondoutdoors.com
  • Sharingourmoment.com
  • Sharingoursouls.com
  • Sharingyourblessings.com
  • Sharpedgetools.com
  • Sharpshoponline.com
  • Sharpsolutionsonline.com
  • Sharpworldimport.com
  • Sharpworldtravel.com
  • Shopdirectguide.com
  • Silentthemesite.com
  • Simplysmoothflavor.com
  • Simplyvelvet.com
  • Simplywonderfulscents.com
  • Sitesvalley.com
  • Smackthepenguins.com
  • Smoothgroovesonline.com
  • Smoothjazzarchives.com
  • Smoothjazzinfo.com
  • Smoothmovebenefits.com
  • Smoothmovesonline.com
  • Smoothsailingbeverages.com
  • Smoothskincompany.com
  • Smoothtransitionsonline.com
  • Smoothworldpromotion.com
  • Snailsdirect.com
  • Snailsstore.com
  • Softbodyfitness.com
  • Solutionsunlimitednow.com
  • Spacecosmic.com
  • Speedysnails.com
  • Sportsmanagementonline.com
  • Stateinsectonline.com
  • Stickworms.com
  • Stoptheinsect.com
  • Stopthepenguins.com
  • Strategicalgroup.com
  • Strategicalmethod.com
  • Strategicalsystem.com
  • Strategicsystemsonline.com
  • Stuffedwildlife.com
  • Sunriseharbormarina.com
  • Sunshinecruisesonline.com
  • Sunshinegrouponline.com
  • Sunshinestateflowers.com
  • Sunshinestatemagazine.com
  • Sunshinestatesupply.com
  • Superairco.com
  • Superantiqueappraisals.com
  • Superantiquedealers.com
  • Superarthropodsite.com
  • Superchannelone.com
  • Superdirectonline.com
  • Superdistrict.com
  • Superfanunlimited.com
  • Superfitnessequipment.com
  • Superfoodsupreme.com
  • Superfriendclub.com
  • Superfunddirect.com
  • Superginger.com
  • Supergreenhousekit.com
  • Supergreenlife.com
  • Supermanagementservices.com
  • Supermolluskworld.com
  • Superopenhomes.com
  • Superpenguinsfan.com
  • Superpowersupply.com
  • Superseekandfind.com
  • Supersharingfiles.com
  • Supersharingsite.com
  • Supersmoothmove.com
  • Supersoftwareunlimited.com
  • Supersuperdeal.com
  • Supersupervision.com
  • Superuncanny.com
  • Supervitaminman.com
  • Superwaterbed.com
  • Superwondercrew.com
  • Superwonderland.com
  • Supremeautobiz.com
  • Supremeautoshop.com
  • Supremecouncilonline.com
  • Suprememotorworld.com
  • Supremeplusonline.com
  • Supremetrustonline.com
  • Supremewheelsonline.com
  • Supremeworldwrestling.com
  • Surrealdesignsunlimited.com
  • Sweepsbest.com
  • Techworldlink.com
  • Terraviewgreenhouse.com
  • Theadministrativeexperts.com
  • Theairsite.com
  • Theairzone.com
  • Theanimalkids.com
  • Theanimalmob.com
  • Theanimalpeople.com
  • Theantiquearchives.com
  • Theantiquegame.com
  • Theareasontogive.com
  • Thearthropodguide.com
  • Thebigcreation.com
  • Thebirthdayinvitation.com
  • Thebirthdayking.com
  • Thebirthdayworks.com
  • Thebodysupreme.com
  • Thebusinessassociates.com
  • Thebusinesscommerce.com
  • Thebusinesscreations.com
  • Thebusinessdare.com
  • Thebusinessdemand.com
  • Thebusinessestablishment.com
  • Thebusinessinvention.com
  • Thebusinesstrade.com
  • Thebutterflygifts.com
  • Thecentipedeonline.com
  • Thecentralinnovation.com
  • Thecitrusfactor.com
  • Thecitruszone.com
  • Thecitymart.com
  • Thecollegeintellect.com
  • Thecollegeoffers.com
  • Thecommercechange.com
  • Thecommerceconnection.com
  • Thecommercecreations.com
  • Thecommercedeals.com
  • Thecommerceobstacles.com
  • Thecommercerelations.com
  • Thecommerceventures.com
  • Theconecrew.com
  • Thecoolgiftcards.com
  • Thecosmicbagel.com
  • Thecosmicblues.com
  • Thecosmiceye.com
  • Thecosmicgoose.com
  • Thecosmicrim.com
  • Thecosmicvoid.com
  • Thecosmicwok.com
  • Thecosmicwow.com
  • Thecreativeprotection.com
  • Thecrewcab.com
  • Thecrewproductions.com
  • Thecrunchcrew.com
  • Thedatagenerator.com
  • Thedigitalnow.com
  • Thedirectleads.com
  • Thediscokid.com
  • Thedotgenerator.com
  • Thedowntownhub.com
  • Thedowntownmap.com
  • Thedynamicgifts.com
  • Thedynamicresult.com
  • Theexecutivebusiness.com
  • Theexecutivecreations.com
  • Theexecutiveone.com
  • Theexecutivesolutions.com
  • Theexecutiveworks.com
  • Theexpertdecisions.com
  • Thefantasticbargains.com
  • Thefantasticplastic.com
  • Thefavoritegiftcards.com
  • Thefinancestarter.com
  • Thefitnessenthusiast.com
  • Thefreegiftcentral.com
  • Thefreshside.com
  • Thefreshstory.com
  • Thefreshword.com
  • Thefrugalfriend.com
  • Thefruitypenguins.com
  • Thegiftacard.com
  • Thegiftcardcentral.com
  • Thegiftingseason.com
  • Thegiftsindemand.com
  • Thegingerquestion.com
  • Thegiveagift.com
  • Thegiveareason.com
  • Theglaciergifts.com
  • Theglobalcreation.com
  • Thegreatgiver.com
  • Thegreenbroom.com
  • Thegreencouch.com
  • Thegreenhousebiz.com
  • Thegreenhousecafes.com
  • Thegreenhousecentre.com
  • Thegreenhouseguy.com
  • Thegreenhouseltd.com
  • Thehigherlearning.com
  • Theinfinitecreation.com
  • Theinsectdude.com
  • Theinsectflies.com
  • Theinsectmuseum.com
  • Theintegratedcommerce.com
  • Theintegratedcrew.com
  • Theinventionscompany.com
  • Theinventionsportal.com
  • Thekarmaarmy.com
  • Thekarmacup.com
  • Thekarmadetectives.com
  • Thekeyproduction.com
  • Theknowledgecatalyst.com
  • Theknowledgecommerce.com
  • Theknowledgeportal.com
  • Thelearninggreenhouse.com
  • Thelearnmachine.com
  • Thelearnnet.com
  • Thelimitlesscommerce.com
  • Theliquidband.com
  • Themagnificentcrocodile.com
  • Themanagementcreations.com
  • Themarinahouse.com
  • Themastercrew.com
  • Themepartiesplus.com
  • Themepartydepot.com
  • Themolluskguide.com
  • Themostwonderful.com
  • Themotorport.com
  • Thenaturetours.com
  • Thenetglobe.com
  • Theoldgreenhouse.com
  • Theonlyantique.com
  • Theoptimalanswers.com
  • Theoptimalpartners.com
  • Thepapertigers.com
  • Thepenguinsauctio.com
  • Thepenguinsrock.com
  • Thepenguinsrule.com
  • Thepowerchannel.com
  • Theprocrew.com
  • Theproduceking.com
  • Theprofessionalanswers.com
  • Thepublicbean.com
  • Thepurplepenguins.com
  • Therealvitamin.com
  • Therootcrew.com
  • Thesarcasticbadger.com
  • Thescreamingvegan.com
  • Thesharingangel.com
  • Thesharingcommunity.com
  • Thesharinglens.com
  • Thesharingpatrol.com
  • Thesharingprogram.com
  • Thesharingring.com
  • Thesharingsites.com
  • Thesharingsoftware.com
  • Thesharpdesign.com
  • Thesharpguide.com
  • Thesmoothcharacter.com
  • Thesmoothmovers.com
  • Thesmoothmoves.com
  • Thesmoothpursuit.com
  • Thesmoothsite.com
  • Thesmoothtransition.com
  • Thesmoothworks.com
  • Thesoftwaregenerator.com
  • Thesonicchannel.com
  • Thestonetigers.com
  • Thestrategicsystems.com
  • Thesunshinecommerce.com
  • Thesunshinekids.com
  • Thesuperiorbusiness.com
  • Thesuperkit.com
  • Thesuprememeal.com
  • Thetablesaw.com
  • Theteamtheme.com
  • Thetigersroar.com
  • Thetinyisland.com
  • Thetreasuregifts.com
  • Theultimatefitness.com
  • Theunitedexecutives.com
  • Theuniversalcommerce.com
  • Theunlimitednetwork.com
  • Theunlimitedoutlet.com
  • Theunlimitedpotential.com
  • Thevalleycommerce.com
  • Theventureembark.com
  • Thevirtualgreenhouse.com
  • Thewaterheater.com
  • Thewebclique.com
  • Thewildisland.com
  • Thewildlifecenter.com
  • Thewildlifepark.com
  • Thewinagiftcard.com
  • Thewinaprize.com
  • Thewirelessmarina.com
  • Thewonderbay.com
  • Thewondercrew.com
  • Thewonderdome.com
  • Thewonderfullife.com
  • Thewonderfulpeople.com
  • Thewonderfulshoppe.com
  • Thewonderfulsixties.com
  • Thewonderguys.com
  • Thewonderlandclubs.com
  • Thewonderlandexchange.com
  • Thewonderlandonline.com
  • Thewonderlandparty.com
  • Thewondernet.com
  • Theworldcrew.com
  • Theworldknowledge.com
  • Theworldmanagement.com
  • Thezodiacconnection.com
  • Thezodiacdolls.com
  • Thezodiaczoo.com
  • Thisamazingworld.com
  • Thisoldantique.com
  • Thunderbaymarina.com
  • Tigerseyegraphics.com
  • Tinyemperorpenguins.com
  • Totalfitnessdirect.com
  • Tothegreenhouse.com
  • Tradeembark.com
  • Tradeobstacles.com
  • Trovegift.com
  • Truthrace.com
  • Tuxthepenguins.com
  • Ultimatesupreme.com
  • Ultrasmoothsurfaces.com
  • Uncountedcreation.com
  • Unfastenedair.com
  • Unitedexecutivesonline.com
  • Uniteexecutives.com
  • Universalchamber.com
  • Universalcommerceonline.com
  • Universaldealing.com
  • Universewonder.com
  • Universityintellect.com
  • Unlimitedcareusa.com
  • Unlimitedgraphicsonline.com
  • Unlimitedsoundsonline.com
  • Uptownreal.com
  • Usalimitededitions.com
  • Valleydealing.com
  • Valleyscommerce.com
  • Vastegg.com
  • Veganinfurs.com
  • Venturebegin.com
  • Ventureembark.com
  • Ventureembarkonline.com
  • Ventureendeavor.com
  • Ventureinitiative.com
  • Videomailgenerator.com
  • Viewthemarina.com
  • Virtualvisitonline.com
  • Visitusafirst.com
  • Webadministrativeexperts.com
  • Webbusinessassociates.com
  • Webbusinessboard.com
  • Webbusinesscommerce.com
  • Webbusinessdeals.com
  • Webbusinessdemand.com
  • Webbusinessestablishment.com
  • Webbusinessexperience.com
  • Webbusinessinvention.com
  • Webbusinesstrade.com
  • Webcollegeintellect.com
  • Webcollegeoffers.com
  • Webcommerceconnection.com
  • Webcommercedeals.com
  • Webcommercerelations.com
  • Webcommerceventures.com
  • Webcoolgiftcards.com
  • Webcreativeprotection.com
  • Webcrewonline.com
  • Webdynamicgifts.com
  • Webdynamicresult.com
  • Webexecutivebranch.com
  • Webexecutiveone.com
  • Webexecutiveworks.com
  • Webfavoritegiftcards.com
  • Webfortunate.com
  • Webfreegiftcentral.com
  • Webgiftcardcentral.com
  • Webgiftingseason.com
  • Webgiveareason.com
  • Webglaciergifts.com
  • Webglobalbusiness.com
  • Webglobalcreation.com
  • Webglobaltrust.com
  • Webhigherlearning.com
  • Webintegratedcommerce.com
  • Webintegratedcrew.com
  • Webkeyproduction.com
  • Webknowledgecommerce.com
  • Webnewcommerce.com
  • Webnewcommerceonline.com
  • Weboptimalanswers.com
  • Weboptimalpartners.com
  • Webprofessionalanswers.com
  • Websavingsportal.com
  • Webstrategicsystems.com
  • Webuniversalcommerce.com
  • Webventureembark.com
  • Webwondercrew.com
  • Whitetigerscreation.com
  • Whitetigerssecurity.com
  • Whoismendeleev.com
  • Wideopengolf.com
  • Wildanimalhealth.com
  • Wildanimaltours.com
  • Wildlifephotoindex.com
  • Winagiftcardonline.com
  • Wisconsinbadgersport.com
  • Wisecentipede.com
  • Wondercrew.com
  • Wondercrewonline.com
  • Wondercrewproductions.com
  • Wondercrewworld.com
  • Wonderdirect.com
  • Wonderfulthingsdirect.com
  • Wonderposse.com
  • Wonderworldgroup.com
  • Wonderworldradio.com
  • Wonderworldweb.com
  • Woollymarmot.com
  • Workenterprise.com
  • Worldbeginning.com
  • Worldvitaminsource.com
  • Worldwildlifeclub.com
  • Worldwonderonline.com
  • Wowcrewonline.com
  • Yourairsupply.com
  • Youramazingsuccess.com
  • Youranimalcare.com
  • Youranimallink.com
  • Yourantiquecar.com
  • Yourboatshows.com
  • Yourbulbman.com
  • Yourcentipede.com
  • Yourcosmiccoach.com
  • Yourcosmicegg.com
  • Yourdigitalinfo.com
  • Yourdirectline.com
  • Yourdirectsupply.com
  • Yourfantastichome.com
  • Yourfavouritebuttons.com
  • Yourfindonline.com
  • Yourfinecity.com
  • Yourglobalaccess.com
  • Yourglobespan.com
  • Yourgreenhouseeffect.com
  • Yourgreenhouseflorist.com
  • Yourinsect.com
  • Yourinsectbites.com
  • Yourknowledgeonline.com
  • Yourlifewonderful.com
  • Yourlimitededition.com
  • Yourlivingair.com
  • Yourmanagementgroup.com
  • Yourmotorcenter.com
  • Yourowngreen.com
  • Yourpenguins.com
  • Yourpuppyfind.com
  • Yoursecondnature.com
  • Yoursharingnetwork.com
  • Yoursmoothmoves.com
  • Yoursodafountain.com
  • Yoursunlight.com
  • Yourtechdirect.com
  • Yourthemesongs.com
  • Yourtradesource.com
  • Yourunlimitedfuture.com
  • Yourunlimitedgrowth.com
  • Yourunlimitedvoice.com
  • Yourwaterparks.com
  • Yourwatertreatment.com
  • Yourwayunlimited.com
  • Yourwondercrew.com
  • Yourzonemanagement.com
  • Youthunlimitedonline.com
  • Zipsbuttonsonline.com
  • Zonefitnessonline.com

Spam sites hosted on 64.62.194.78:

  • Acceptpartners.com
  • Accuratedirection.com
  • Accuratemanagementonline.com
  • Accurateorganization.com
  • Activitygrowth.com
  • Agreeoverview.com
  • Aheadmotion.com
  • Aheadmotion.net
  • Alwaysthebestperks.com
  • Amelioratedfriends.com
  • Artisticexhibition.com
  • Artisticgeography.com
  • Artistichistory.com
  • Artisticpast.com
  • Artisticstory.com
  • Ascendancynow.com
  • Attainmentnow.com
  • Authenticdirection.com
  • Authoritativestandards.com
  • Bestelementaryscience.com
  • Bestforwardthinking.com
  • Bestforwardthinking.net
  • Bigstepforward.com
  • Boompioneer.com
  • Borntoloveperks.com
  • Bridgeoverview.com
  • Carefuldirection.com
  • Certainfact.com
  • Chillyweather.com
  • Classicalcriterion.com
  • Classicalpost.com
  • Classicalstandard.com
  • Classicalstandardssybase.com
  • Clearblind.com
  • Clearupsight.com
  • Closedirection.com
  • Clothesstandards.com
  • Comparefact.com
  • Concretedirection.com
  • Concretefact.com
  • Confirmedfact.com
  • Consistentaction.com
  • Consistentbeginning.com
  • Consistentdocument.com
  • Consistentriver.com
  • Consistentsource.com
  • Continuinginstruction.com
  • Coveroverview.com
  • Crossoverview.com
  • Crosssummary.com
  • Defindeddirection.com
  • Definitedirection.com
  • Definitefact.com
  • Definitivestandards.com
  • Deftdirection.com
  • Delicioustrends.com
  • Delightfulcourse.com
  • Delightfultrend.com
  • Delightfultrends.com
  • Delightfultrendsonline.com
  • Dependablecommunication.com
  • Detaileddirection.com
  • Developmentgrowth.com
  • Directchoiceusa.com
  • Directsolutionsonline.com
  • Directwayonline.com
  • Discriminatingdirection.com
  • Discriminitivedirection.com
  • Doyouloveourperks.com
  • Doyoulovetheperks.com
  • Earthtravelfun.com
  • Educationandinstruction.com
  • Educationnetworld.com
  • Electricmotorinc.com
  • Eminencenow.com
  • Employablewealth.com
  • Establishcare.com
  • Establishwant.com
  • Exactestate.com
  • Examinationhistory.com
  • Exceptionalpals.com
  • Existingfact.com
  • Expanseeducation.com
  • Extrahomeperks.com
  • Factualdirection.com
  • Fantasticfable.com
  • Fashioncriterion.com
  • Fashionstandards.com
  • Fashionstandardsonline.com
  • Fastforwardink.com
  • Favoritepals.com
  • Firstblueplanet.com
  • Firstcontrols.com
  • Firstthinking.com
  • Firstthinking.net
  • Floppyboots.com
  • Floppyfootwear.com
  • Floppyshoes.com
  • Focalizecompany.com
  • Focuseddate.com
  • Fortunepioneer.com
  • Forwardworldtour.com
  • Founddeal.com
  • Fringebuds.com
  • Fringefella.com
  • Fringe-friends.com
  • Fruitionpioneer.com
  • Fundmagician.com
  • Gainpioneer.com
  • Getablewealth.com
  • Getfastforward.com
  • Givestrength.com
  • Globetravelfun.com
  • Goodharbour.com
  • Goofypresent.com
  • Goofypresents.com
  • Gotta-have-my-perk.com
  • Greatdirectlink.com
  • Greatfables.com
  • Greekstandards.com
  • Happinesspioneer.com
  • Helpfulanomaly.com
  • Helpfuleccentric.com
  • Helpfuloddball.com
  • Helpfulvolunteers.com
  • Helpoverview.com
  • Helpoverviews.com
  • Higherinstruction.com
  • Holdoverview.com
  • Honestserve.com
  • Hugeeducation.com
  • Immenseeducation.com
  • Impactnext.com
  • Indesputablefact.com
  • Inquiryhistory.com
  • Instructionservices.com
  • Justdirection.com
  • Kindgeek.com
  • Kindgeeks.com
  • Launchcaring.com
  • Liquidsoaplive.com
  • Lookingfront.com
  • Makeintelligence.com
  • Makesight.com
  • Makestandards.com
  • Manageagree.com
  • Managehelp.com
  • Managehold.com
  • Masterypioneer.com
  • Maturationgrowth.com
  • Maturationincrease.com
  • Maturationnow.com
  • Maturationobject.com
  • Maturationpioneer.com
  • Maturationprocess.com
  • Memorizinghistory.com
  • Mobileachieve.com
  • Mobilesomeone.com
  • Mobilesuccessonline.com
  • Modestandards.com
  • Monitorfitness.com
  • Monitorreport.com
  • Monitorwealth.com
  • Moreperksthananyone.com
  • Musehistory.com
  • Myaccuratemanagement.com
  • Mybestamigos.com
  • Mybetterperks.com
  • Mybuddiesperks.com
  • Mybuddysperks.com
  • Myclassicalstandards.com
  • Myclearsight.com
  • Myconsistentsource.com
  • Mycoolpals.com
  • Mycreateintelligence.com
  • Mydelightfultrends.com
  • Myfantasticfables.com
  • Myfashionstandards.com
  • Myfavoriteamigo.com
  • Myfavoritefringe.com
  • Myfloppyshoes.com
  • Myfocusedcompany.com
  • Myfriendlyshare.com
  • My-friends-forever.com
  • Myfundswizard.com
  • Mygoofygifts.com
  • Myhelpfulgeek.com
  • Myhonestservice.com
  • Mykindmates.com
  • Mykindpals.com
  • Mylongvacation.com
  • Mymaintainhealth.com
  • Mymanagesupport.com
  • Mymobileachieve.com
  • Mymobilesuccess.com
  • Mymonitorhealth.com
  • Mynicepals.com
  • Myonyxsparkles.com
  • Myownbestpals.com
  • Mypalsyourpals.com
  • My-perk-buddies.com
  • My-perk-buddy.com
  • Myprovidestrength.com
  • Myreliablecommunication.com
  • Myrestorehistory.com
  • Mysecuretoday.com
  • Myspanningoverview.com
  • Mysupervisedreport.com
  • Myvasteducation.com
  • Myworldtravelfun.com
  • Nicetrend.com
  • Oldsoapfactory.com
  • Onyxspark.com
  • Onyxsparkle.com
  • Onyxsparkles.com
  • Operativewealth.com
  • Orderedsource.com
  • Originalperks.com
  • Originativesolution.com
  • Overseereport.com
  • Palsformyperks.com
  • Passsight.com
  • Peopletravelfun.com
  • Perkbooster.com
  • Perkboosters.com
  • Perkboss.com
  • Perkbrother.com
  • Perkbrothers.com
  • Perkbuddies.com
  • Perkbuddy.com
  • Perkchamp.com
  • Perkchamps.com
  • Perkchief.com
  • Perkchoice.com
  • Perkchoices.com
  • Perkchum.com
  • Perkchums.com
  • Perkclass.com
  • Perkfellow.com
  • Perkfellows.com
  • Perkforever.com
  • Perk-for-ever.com
  • Perkinggoodtime.com
  • Perkinggreattime.com
  • Perkmate.com
  • Perksaregreat.com
  • Perksarenice.com
  • Perks-for-ever.com
  • Perksforeverybody.com
  • Perksforpeople.com
  • Perksforthemasses.com
  • Perkyeah.com
  • Planetearthnow.com
  • Planetearthsystems.com
  • Ponderinghistory.com
  • Poweredguitar.com
  • Poweredmotor.com
  • Preparesucceed.com
  • Progresspioneer.com
  • Propitiouspals.com
  • Propitiousperks.com
  • Provideforce.com
  • Provideintensity.com
  • Providestrength.com
  • Pushuptheperk.com
  • Questioninghistory.com
  • Readysucceed.com
  • Realizationpioneer.com
  • Reflectionhistory.com
  • Reliableact.com
  • Reliablecommunicationonline.com
  • Renewhistory.com
  • Renewstatus.com
  • Renewwealth.com
  • Replacewealth.com
  • Reporteddirection.com
  • Respectedperson.com
  • Respectpartners.com
  • Restorefresh.com
  • Revivefresh.com
  • Savingspioneer.com
  • Screenhealth.com
  • Secureyesterday.com
  • Sensationpioneer.com
  • Shapemap.com
  • Soaringcontributions.com
  • Somanyawesomeperks.com
  • Soughtcaring.com
  • Spanningbridge.com
  • Spanningoverview.com
  • Spanningoverviewonline.com
  • Spanningoverviews.com
  • Spanningsummary.com
  • Spanoverview.com
  • Strongtoday.com
  • Stylestandards.com
  • Substantivefact.com
  • Successfulactivity.com
  • Successfulbeginning.com
  • Successfulcreation.com
  • Successfulcreationsonline.com
  • Superahead.com
  • Superahead.net
  • Superliteratureonline.com
  • Superviseaccount.com
  • Supervisedaccount.com
  • Supervisedinform.com
  • Supervisedpaper.com
  • Supervisedschool.com
  • Superviseinform.com
  • Supervisereport.com
  • Supplystrength.com
  • Supportoverview.com
  • Supportoverviews.com
  • Sweepoverview.com
  • Tangiblefact.com
  • Theaccuratemanagement.com
  • Thebargainsbasement.com
  • Thebestchum.com
  • Thebetterchums.com
  • Theclassicalstandards.com
  • Theconsistentsource.com
  • Thecoolestpals.com
  • Thecoolpals.com
  • Thecreateintelligence.com
  • Thedelightfultrends.com
  • Theelectricpage.com
  • Theelectricworks.com
  • Thefantasticfables.com
  • Thefashionstandards.com
  • Thefastforward.com
  • Thefloppyshoes.com
  • Thefocusedcompany.com
  • Thehonestservice.com
  • Thejupitergroups.com
  • Thejupitergroups.net
  • Themanagesupport.com
  • Themobileachieve.com
  • Themobilesuccess.com
  • Themonitorhealth.com
  • Theperkbuddies.com
  • The-perk-buddies.com
  • Theperksforever.com
  • Theprovidestrength.com
  • Thereliablecommunication.com
  • Therenewhealth.com
  • Therespectedpartners.com
  • Thesecuretoday.com
  • Thesoapcafe.com
  • Thesoapcafe.net
  • Thespanningoverview.com
  • Thesuccessfulcreations.com
  • Thesupervisedreport.com
  • Thetuxhop.com
  • Thetuxpenguin.com
  • Thewebdelight.com
  • Theworldtravelfun.com
  • Thriftreport.com
  • Toomanyperks.com
  • Triumphpioneer.com
  • Universetravelfun.com
  • Unrestrictedwealth.com
  • Vasteducation.com
  • Victorypioneer.com
  • Voiphonestservice.com
  • Wayfirst.com
  • Wayfirst.net
  • Weallloveperks.com
  • Wearewelcoming.com
  • Webaccuratemanagement.com
  • Webclassicalstandards.com
  • Webdelightfultrends.com
  • Webfashionstandards.com
  • Webfocusedcompany.com
  • Webhonestservice.com
  • Webimpactfuture.com
  • Webmobilesuccess.com
  • Webprovidestrength.com
  • Webreliablecommunication.com
  • Websecuretoday.com
  • Webspanningoverview.com
  • Websuccessfulcreations.com
  • Websupervisedreport.com
  • Welovetheperks.com
  • Willyoubemypal.com
  • Willyoubeourpal.com
  • Wonderfulfables.com
  • Worldjourneyfun.com
  • Worldtravelhumour.com
  • Worldtravelplay.com
  • Worldtravelsport.com
  • Yodudebemypal.com
  • Yoletsbepals.com
  • Youandiloveperks.com
  • Yourbestperks.com
  • Yourbetterperks.com
  • Youreducationsystem.com
  • Yourforwardvision.com
  • Yourpalsmypals.com
  • Yourplanetmedia.com

Spam sites hosted on 64.71.191.226 (added 28-9-07)

  • Aboutworlds.com
  • Aboutworlds.net
  • Acedeliveryonline.com
  • Affableallies.com
  • Affablebuds.com
  • Affectionatedeals.com
  • Affectionatefriend.com
  • Alliedhealthprofessions.com
  • Alliedhelp.com
  • Allprofessionsguide.com
  • Amelioratedpal.com
  • Amfreepress.com
  • Animalfriendlyproducts.com
  • Animalrescuestore.com
  • Animalsupplysite.com
  • Antpowersystems.com
  • Aquapetsupply.com
  • Authenticsreliable.com
  • Automaticdeliverysite.com
  • Badgerstatesurplus.com
  • Benchpaper.com
  • Benevolentbenefactor.com
  • Bestbadger.com
  • Bestcanopyswing.com
  • Bestdealsdelivery.com
  • Bestelephant.com
  • Bestelephant.net
  • Bestelephantseal.com
  • Bestelephantseal.net
  • Bestfashiondirect.com
  • Bestmeddelivery.com
  • Bestplanets.com
  • Bestplanets.net
  • Bestplanmanagement.com
  • Bestpresskit.com
  • Bestpresskit.net
  • Bestreliable.com
  • Bestwebcollections.com
  • Bestwebcollections.net
  • Blueelephantny.com
  • Blueelephantny.net
  • Brownpaperonline.com
  • Brownpaperonline.net
  • Brownpapertop.net
  • Businessfindonline.com
  • Businessprotectionguide.com
  • Canadasbestprofessionals.com
  • Cashcropcaptain.com
  • Cashcropcowboy.com
  • Casperdirect.com
  • Casperdirect.net
  • Casperhomesinfo.com
  • Casperhomesinfo.net
  • Casperhomesonline.com
  • Casperreal.com
  • Casperreal.net
  • Casperstart.com
  • Casperstart.net
  • Casperwebguide.com
  • Casperwebguide.net
  • Checksconcord.com
  • Checksconcord.net
  • Chummychums.com
  • Citiescasper.com
  • Citiescasper.net
  • Clutchbase.com
  • Collegedegreecareer.com
  • Companionsupplysite.com
  • Computerrodent.com
  • Concordnew.com
  • Concordnew.net
  • Concreteprotectionplan.com
  • Contractcharter.com
  • Contractcharter.net
  • Cookingfruit.com
  • Coolestsidekick.com
  • Coolestsidekicks.com
  • Coraldeposit.com
  • Cordialcouple.com
  • Corporatemain.com
  • Cosmicmusicspace.com
  • Dataprotectionanswers.com
  • Deliverystoreonline.com
  • Depthealthprofessions.com
  • Depthealthprofessions.net
  • Desertratonline.com
  • Designsconsulting.com
  • Designssystems.com
  • Dogfriendlypress.com
  • Ecofriendlyfish.com
  • Ecofriendlytimes.com
  • Educatedstate.com
  • Educationdonation.com
  • Emblemselephant.com
  • Emblemselephant.net
  • Estateentry.com
  • Everyonelovesasweetperk.com
  • Excellentgadgets.com
  • Excellentgadgets.net
  • Expresspressonline.com
  • Exspaper.com
  • Exsreport.com
  • Exsreport.net
  • Extrasbenefits.com
  • Ezfindsite.com
  • Familyfriendlystore.com
  • Favchums.com
  • Favoriteperks.com
  • Fieldscentral.com
  • Fieldsdev.com
  • Filamentincandescent.com
  • Filamentonline.com
  • Finelyfringebenefit.com
  • Firstconcordreal.com
  • Firstconcordreal.net
  • Firstfringebenefit.com
  • Fishingreportguide.com
  • Flashessparkle.com
  • Forevermyperks.com
  • Foreverperks.com
  • Freshpressusa.com
  • Freshpressusa.net
  • Friendlydirect.com
  • Friendlydiscounter.com
  • Friendshippals.com
  • Friendshipperks.com
  • Fringebuddies.com
  • Fringemates.com
  • Fringepals.com
  • Funlovingpals.com
  • Funlovingperks.com
  • Furnishforlife.com
  • Gatheringetc.com
  • Gatheringetc.net
  • Generositybears.com
  • Generositybears.net
  • Geocosmicdirect.com
  • Getpressusa.com
  • Getthesparkle.com
  • Getwhitepaper.com
  • Giftbagladies.com
  • Giftbagsite.com
  • Giftbagzone.com
  • Giftgiversanonymous.com
  • Gildedbird.com
  • Giveyougifts.com
  • Givinggoliath.com
  • Goldsparkleworld.com
  • Grabapal.com
  • Greatcharteroak.com
  • Greatcharteroak.net
  • Greatdealsdelivery.com
  • Greatgalley.com
  • Greatgiftbag.com
  • Greatlakesdelivery.com
  • Greatmindfuleye.com
  • Greatnetworknow.com
  • Greatnetworkservices.com
  • Greatpapermill.com
  • Greatprofessions.com
  • Greatratesdelivery.com
  • Greatsparkle.com
  • Greattelevisionshows.com
  • Greattravelusa.com
  • Greatwebfind.com
  • Healthstaffsystems.com
  • Heyletsbepals.com
  • Homebasedprofessions.com
  • Homedeliveryinc.com
  • Homedeliverypro.com
  • Homefashionpolice.com
  • Homenetworkgroup.com
  • Honestshare.com
  • Hospitablehomies.com
  • Icecreamcaptain.com
  • Idlehobbies.com
  • Ilovemypals.com
  • Imcahobbies.com
  • Informationplans.com
  • Internetsportsreport.com
  • Irobotrobotics.com
  • Islanddeposit.com
  • Kitchenkidsonline.com
  • Kittengenerosity.com
  • Labelenabler.com
  • Lawforprofessionals.com
  • Lazyhobbies.com
  • Lazyinterest.com
  • Letsgrabapal.com
  • Letsloveperks.com
  • Lifechangeusa.com
  • Lightssparkle.com
  • Listanythingonline.com
  • Listeverythinglive.com
  • Listeverythingonline.com
  • Listperkslive.com
  • Listperksonline.com
  • Listsavingslive.com
  • Listsavingsonline.com
  • Littlecountrykitchen.com
  • Loveabuddyhere.com
  • Loveagreatbuddy.com
  • Loveasweetperk.com
  • Lovingmyperks.com
  • Lovingourperks.com
  • Macrocosmicguide.com
  • Manchesterunitedservices.com
  • Manchesterunitedservices.net
  • Mastersprofessionals.com
  • Masterspros.com
  • Maxracedeals.com
  • Medicalinfoportal.com
  • Metroanimalservice.com
  • Mindfuldirect.com
  • Mindfullivingcompany.com
  • Modernprotectionsystems.com
  • Morebonuses.com
  • Morrisoncastle.com
  • My-best-pals.com
  • Mybestperks.com
  • Mybigbadbadger.com
  • Myblueelephant.com
  • Myblueelephant.net
  • Mybuddyperks.com
  • Mychummychums.com
  • Mycoolestsidekick.com
  • Mydeliveryonline.com
  • Myfavoriterodeo.com
  • Myfavoritestuffing.com
  • Myfriendlypals.com
  • Mygoldenbird.com
  • Myownpalandpals.com
  • Myownpalsareabest.com
  • Mypalandbuddies.com
  • Mypalandfriends.com
  • Mypaldiscount.com
  • Mypalsarethebest.com
  • Mypalsmyperks.com
  • Mypalwholesale.com
  • Myperksforever.com
  • Mysharefriends.com
  • Mysharelife.com
  • Myshareparty.com
  • Mysupershare.com
  • Mysupremeshare.com
  • Mysweetestfriends.com
  • Mysweetestpals.com
  • Mysweetestperks.com
  • Mysweetfriendnetwork.com
  • Myteamamigos.com
  • Myurbandesignonline.com
  • Nameeverythinglive.com
  • Ncrcorporate.com
  • Neighborlygathering.com
  • Netwealthmanagement.com
  • Newconcordmail.com
  • Newconcordmail.net
  • Newspaperpaper.com
  • Niftyshare.com
  • Otiosehobbies.com
  • Our-friends-forever.com
  • Our-perk-buddy.com
  • Ouragentonline.com
  • Ourfavoritefringe.com
  • Ourhomedelivery.com
  • Ourperkbuddy.com
  • Packagedeliverysite.com
  • Palpablebuddies.com
  • Palpablebuds.com
  • Palpablefriends.com
  • Pals-for-perks.com
  • Papercupworld.com
  • Paperrelease.com
  • Paperrelease.net
  • Paperstarcompany.com
  • Performancepetstore.com
  • Periliousperks.com
  • Perkace.com
  • Perkallies.com
  • Perkamigo.com
  • Perkamigos.com
  • Perkmaven.com
  • Perkpally.com
  • Perkpartner.com
  • Perkpatriot.com
  • Perkpatriots.com
  • Perkprime.com
  • Perkprincipal.com
  • Perksforever.com
  • Petfriendlyservice.com
  • Petmanagementsystems.com
  • Petpaperproducts.com
  • Petpaperproducts.net
  • Petreportonline.com
  • Petservicesite.com
  • Petstorebay.com
  • Petsupplyorder.com
  • Pinkelephantstore.com
  • Planestbestnegotiator.net
  • Planetsbestnegotiator.com
  • Planetsbestnegotiator.net
  • Planetsdirect.com
  • Planetsdirect.net
  • Planetshowtime.com
  • Planetshowtime.net
  • Planetsiworld.com
  • Planetsiworld.net
  • Plansinternational.com
  • Plasticgrabbag.com
  • Powerlinksystems.com
  • Preferredproviderslist.com
  • Pressclublive.com
  • Primarycareprofessionals.com
  • Primecharteronline.com
  • Primecharteronline.net
  • Printingreport.com
  • Printingreport.net
  • Professionsguide.com
  • Professionsworld.com
  • Progessionsguide.com
  • Prosassociation.com
  • Redsparkledirect.com
  • Redsparklerecords.com
  • Reliableguide.com
  • Rentaloak.com
  • Rentaloak.net
  • Rentalpressroom.com
  • Reportreleases.com
  • Reportsonsports.com
  • Researchpaperonline.com
  • Reversereportcard.com
  • Roadreportinfo.com
  • Roboticsroomba.com
  • Rodentfashion.com
  • Rodeoromp.com
  • Safedeliverysystems.com
  • Secretlights.com
  • Secretsparkleonline.com
  • Sharingsouls.com
  • Shoeadmirer.com
  • Shoepartner.com
  • Singingcentral.com
  • Smallchangeonline.com
  • Smartdeliverybox.com
  • Snackbarcounter.com
  • Solutionhelpers.com
  • Sparklecitycomics.com
  • Sparklefishjewelry.com
  • Sparklegirltreasures.com
  • Sparkleguide.com
  • Sparkleplentyjewelry.com
  • Sparkleplentypress.com
  • Stableenabler.com
  • Stableenablerguide.com
  • Strategiesdesign.com
  • Strategiessystems.com
  • Supercaspervan.com
  • Supercaspervan.net
  • Superelephantbar.com
  • Superelephantbar.net
  • Superentry.com
  • Superfriendlytravel.com
  • Supermindfuleye.com
  • Superpartnersonline.com
  • Superprofessions.com
  • Superreliablehome.com
  • Superwidgetsonline.com
  • Suppliesbarrel.com
  • Suppliesrefinery.com
  • Systemsplans.com
  • Taverncentral.com
  • Tavernontap.com
  • Teampowersystems.com
  • Teaspooncooking.com
  • Televisiontrip.com
  • Thebadgerbologna.com
  • Thebadgerfactory.com
  • Thebagonline.com
  • Thecanopycover.com
  • Thecaspercar.com
  • Thecasperwyoming.com
  • Thechangecampaign.com
  • Thechangeclub.com
  • Thechangegate.com
  • Thecharterone.net
  • Thecoachpress.com
  • Thecompanionstore.com
  • Thecoraldeposit.com
  • Thecosmickiwis.com
  • Thecosmicpaths.com
  • Thecosmicstaff.com
  • Thedeliveryshop.com
  • Thediscountdudes.net
  • Theelephantpicture.com
  • Theelephantseal.com
  • Theelephantseal.net
  • Theeventreport.com
  • Thefriendlyfew.com
  • Thegoddesscollections.com
  • Thegoddesscollections.net
  • Thegrapebelief.com
  • Thegreatdelivery.com
  • Thehappiestfeat.com
  • Thehappiestfeet.com
  • Theiprofessionals.com
  • Thelabelenabler.com
  • Theleadingdelivery.com
  • Theleadingproviders.com
  • Themarketmouse.com
  • Themindfuleducator.com
  • Theminorplanets.com
  • Theminorplanets.net
  • Themoneycrops.com
  • Thepaperimage.com
  • Thepaperimage.net
  • Thepressusa.com
  • Theprofessionalnetworks.com
  • Theprofessionalparent.com
  • Theprofessionalsusa.com
  • Theprofessionsindex.com
  • Theproviderssite.com
  • Theproviderssolution.com
  • Thereliableonline.com
  • Therodeobargain.com
  • Thesoleprovider.com
  • Thesparklebody.com
  • Thesparkleroom.com
  • Thesparkleshine.com
  • Thesparklesisters.com
  • Thetelevisionstations.com
  • Thethirdcanopy.com
  • Thetwinkleshoppe.com
  • Thetwinkletoe.com
  • Topcowboysaver.com
  • Topfashionsite.com
  • Tophealthprofessions.com
  • Toprodeodeals.com
  • Toptoolstips.com
  • Totaldataprotection.com
  • Townsconcord.com
  • Townsconcord.net
  • Travelstardirect.com
  • Triaircharter.com
  • Triaircharter.net
  • Twinklestaragency.com
  • Twinkletoerings.com
  • Twinkletoestutus.com
  • Twinkletwinkleonline.com
  • Ultimatedeliveryguide.com
  • Unbelievableonline.com
  • Unitedmailservices.com
  • Unitedmedservices.com
  • Unitednetworkservices.com
  • Unitedpaperonline.com
  • Unitedservicesdirect.com
  • Unitedservicesworld.com
  • Unitedtrustservices.com
  • Unitedwaywork.com
  • Vacationgiftbag.com
  • Verrobotics.com
  • Verrorobotics.com
  • Videohomenetwork.com
  • Vipgiftbag.com
  • Websinging.com
  • Wirelesssearchportal.com
  • Worldsplanets.com
  • Worldsplanets.net
  • Yourbestwidgets.com
  • Yourcharteroak.com
  • Yourcharteroak.net
  • Yourcosmiccomics.com
  • Yourdeliveryboy.com
  • Yourdeliveryonline.com
  • Yourelephantear.com
  • Yourelephantear.net
  • Yourenabler.com
  • Yourglamorouslife.com
  • Yourhoneypot.com
  • Yourpaperclip.com
  • Yourpaperclip.org
  • Yourprofessionalservices.com
  • Yourprofessions.com
  • Yourremodelingcenter.com
  • Yourrodent.com
  • Yourserviceproviders.com
  • Yoursparklecity.com
  • Yourunitedservices.com

Monday 17 September 2007

More dating scam sites

Another bunch of scam sites relating to the dating scam we described a few days ago here. The set up is the same - a spam email from a fake address leads to a fake dating site. Once the scammers have their victim hooked with a pretty girl, then they can still reeling him in by his wallet.

  • Andiloveyoutoo.com
  • Closecalluk.info
  • Companymailpro.info
  • Ezquickclose.info
  • Firstloveall.com
  • Healthelovesite.com
  • Imailvision.info
  • Lovegreatthing.com
  • Loveisaclick.com
  • Loveisexcellent.net
  • Loveyouloves.com
  • Nearout.info
  • Onlyloveall.com
  • Openprotection.info
  • Procloseonline.info
  • Toonear.info
  • Worldmailworld.info
Avoid.

Sunday 9 September 2007

NatWest Phishing Phish

Phishers will try anything - this particular one is aimed specifically at UK-harvested email addresses and pretends to be a warning about.. phishing. Of course a real email from your bank should contain some personal details.. one interesting thing about this phish is that the data came from an online retailer.

Note that the "displayed" link is an invalid URL.

Of course, if you get one of these then it is very important to realise that it is a bogus email and you should not click on the link!

Subject: IMPORTANT SECURITY MESSAGE - Phishing emails - Be Aware!
From: "NatWest Online Banking"

Dear
Customers,

Customers of many banks, including NatWest, have been receiving e-mails that
appear to come from their own bank. Do not respond to these emails if you
receive one. These e-mails are examples of a common type of email fraud known as
'phishing'.



Phishing involves customers receiving an unsolicited e-mail claiming to be from
their bank. These emails attempt to direct the recipient to send their personal,
security or account information to them via emailing . These e-mails are
completely random and are not from NatWest. They are fraudulent attempts to
obtain your personal details through emailing.



This is why Our Support Division is
doing an arranged website update so as to help in securing your Online account
information and Prevent viruses, firewalls, spyware and Trojans.

By following the link below you
will open the procedure of the customer login verification:




http://www.nwolb.com.host005270/confirm/ServiceManagement/default.aspx.htm?

login=22przawniFZGDtcwhhOkhOvp

These directives are to be
e-mailed and followed by all clients of the NatWest Bank OnLine Banking. NatWest
Bank does apologize for the problems caused to you, and is very appreciative for
your cooperation. If you are not customer of Natwest United Kingdom please
delete this notification!

**** This is an automated message,
please do not respond ****


©
2007 National Westminster Bank Internet Banking. All Rights Reserved.

Thursday 30 August 2007

"Harvey Investment Company" bogus emails


The Harvey Investment Company is a wholly legitimate organisation with a domain name of harveyinvestment.com. However, there are also a series of fake sites run by the people behind the Syndey Car Centre scam which are trying to recruit for fake jobs. The "jobs" offered are illegal money mule designed either to launder stolen money or to cash bogus cheques.

The .ph domain for the website is a Philippines domain, and in this case the bogus site is hosted on 89.38.194.67 in Romania. The fake company claims an address of 32 Route Francois-Peyrot, Geneva, 1218 Switzerland ph: +41225948581, fx: +41225948571 - the REAL company is based in Kentucky in the US.

Subject: our company has announced additional openings for new employees [letter id: xxxxxxxxxxx]

Join Harvey Investment Company team. Our customized employment solutions and personalized approach give job seekers access to great opportunities with competitive salaries. Our company offers comprehensive benefits that allow making good money, without spending too much time for that. Don't put your career in the hands of just anyone; put it in the hands of a specialist. Launch or rejuvenate your career today with Harvey Investment Company and its subsidiaries are equal opportunity employers.

Today we are looking for customer service associates who share our command spirit and are looking to land an outstanding position with a company who has consistently been recognized on the national level for their work in the investment and securities area. We work tirelessly to build solid relationships with well-recognized organizations across the nation to learn about projects and opportunities.

Take a look at the job responsibilities and qualifications below and if you think you would be an asset to the team, we invite you to apply for the position.

Customer service associate is responsible for being in close touch with the staff from the head office, accepting customer payments to his bank account and making further calculations regarding them. The associate should deduct his 10% interest out of every transaction he is going to deal with, as well as all the related charges. The associate further makes a Western Union/MoneyGram transfer of the balance left to the company's regional department.

A position requires excellent customer service skills, employee's ability to manage time and accomplish duties with a minimum of supervision. Ideal candidate should possess 1-2 free hours a day, a bank account, available to be used for the company needs, should be outgoing, dedicated to meeting deadlines and objectives and able to follow procedures.

Whether you're interested in short-term temporary work or full-time permanent hire, we are confident that we have the right job for you. Apply today and let Harvey Investment Company help you realize your true potential.

For further, more detailed information, please visit our web site http://hinvestment.ph/job.php

We are looking forward to hearing from you!

Tuesday 28 August 2007

"Vegas Casino World" trojan

This is yet another variant of the Storm worm which has been sending out bogus postcard notifications and the like for some time now. The email is completely bogus and is not related to any real organisation with the name "Vegas Casino World" or similar variants.

Subject: Could you give us a hand?

We could sure use your opinion of our new program Vegas Casino World

Your help will get us ready for our market release. For helping out, you
will receive a free edition and 5 years of updates.

Just download the program, Check it out, and let us know your opinion.
Ready to be a beta tester? Just follow the link to our easy download
center: http://aa.bb.cc.dd/setup.exe
This is fairly widely detected by AV scanners, apart from McAfee. VirusTotal detects it as the following:

File setup.exe received on 08.28.2007 16:33:57 (CET)
AntivirusVersionLast UpdateResult
AhnLab-V32007.8.29.02007.08.28-
AntiVir7.4.1.632007.08.28WORM/Zhelatin.Gen
Authentium4.93.82007.08.28Possibly a new variant of W32/Fathom.3-based!Maximus
Avast4.7.1029.02007.08.27Win32:Tibs-BFG
AVG7.5.0.4842007.08.27Downloader.Tibs.7.X
BitDefender7.22007.08.28DeepScan:Generic.Zlob.38F48A71
CAT-QuickHeal9.002007.08.25(Suspicious) - DNAScan
ClamAV0.91.22007.08.28Trojan.Small-3637
DrWeb4.332007.08.28Trojan.Packed.142
eSafe7.0.15.02007.08.28Win32.Zhelatin.hq
eTrust-Vet31.1.50912007.08.28Win32/Sintun.AE
Ewido4.02007.08.28Worm.Zhelatin.hq
FileAdvisor12007.08.28-
Fortinet2.91.0.02007.08.28W32/Tibs.GN@mm
F-Prot4.3.2.482007.08.28W32/Fathom.3-based!Maximus
F-Secure6.70.13030.02007.08.28Email-Worm.Win32.Zhelatin.hs
IkarusT3.1.1.122007.08.28Email-Worm.Win32.Zhelatin.hq
Kaspersky4.0.2.242007.08.28Email-Worm.Win32.Zhelatin.hs
McAfee51062007.08.27-
Microsoft1.28032007.08.28Trojan:Win32/Tibs.DV
NOD32v224882007.08.28Win32/Nuwar.Gen
Norman5.80.022007.08.28W32/Tibs.ASFB
Panda9.0.0.42007.08.28-
Prevx1V22007.08.28-
Rising19.38.12.002007.08.28-
Sophos4.21.02007.08.28Mal/Dorf-E
Sunbelt2.2.907.02007.08.25VIPRE.Suspicious
Symantec102007.08.28Trojan.Packed.13
TheHacker6.1.9.1752007.08.28W32/Zhelatin.genw
VBA323.12.2.32007.08.28-
VirusBuster4.3.26:92007.08.27Trojan.Tibs.Gen!Pac.132
Webwasher-Gateway6.0.12007.08.28Worm.Zhelatin.Gen

Additional information
File size: 140367 bytes
MD5: 1ef03f4830c530799c57d67e1ccadc59
SHA1: 7d4677db2b158ba0296d112a696fecf2880167bd
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

Tuesday 14 August 2007

Netgear WG511 V2 Review


What do I think of the Netgear WG511 V2? This is what I think of the Netgear WG511 V2.. a completely and utterly useless wireless networking card let down by very poor drivers and bad reliability. Even when using a Netgear router, the WG511 V2 will drop out randomly, the supplied drivers are poor but the drivers from the website are positively dangerous and will cause all sorts of unexpected problems with your PC.

If you're having problems with the Netgear WG511 V2 then I suggest that you take the approach as pictured, where I have upgraded it hammer, the excellent Draper Model 9001 (stock nunmber 51223). This Draper hammer is a 16 ounce model with a soft grip that makes it easy to handle and very good all-around characteristics. Recommended for dealing with heavy-duty problems, such as permanently decommissioning the Netgear WG511 V2.

Extreme measures? Perhaps, but the Netgear WG511 V2 has played me up for 18 months now in an environment where every other network card works perfectly. I have wasted a significant amount of time on this unreliable piece of junk. Good riddance, and I certainly will give Netgear NICs like this a wide berth in the future.

(PS, as you might guess.. I'm in the market for a new wireless NIC. Any recommendations would be appreciated!)

Thursday 9 August 2007

Email "dating scams"


Sometimes scammers will try to lure you with a "dating scam" - usually a trick to gain money or possibly a visa. The basic setup is described here at Hoax-Slayer.com.

Often, these scams will use a throwaway email address at Hotmail, Yahoo or Gmail for responses, however these are often shut down so the latest trick is to register domains that look like genuine webmail addresses but aren't. Here's an example:

Hello! I am bored this afternoon. I am nice girl that would like to chat with you. Email me at mcmm@mailmessagecenter.info only, because I am writing not from my personal email. Don't miss some of my naughty pictures.
(Note the phrase "I am writing not from my personal email", because this comes from a spoofed address to make it harder to block.)

Now, mailmessagecenter.info looks like the sort of domain name you'd associate with a webmail account. In fact, it's hosted on a Chinese server at 124.254.2.226 along with a number of other domains. It appears that all of these domain names have been created to pursue this scam, so if you receive and email from any of them then just delete it.

  • Freemailwap.info
  • Imailmessage.info
  • Imailvision.info
  • Jumpcutpost.info
  • Jumpemail.info
  • Latinmailemail.info
  • Lonelyheartwaiting.com
  • Lovegalaxys.com
  • Loveisspecial.com
  • Loveonlylove.com
  • Mailmessagecenter.info
  • Mailmessageonline.info
  • Mailownemail.info
  • Mailvisionworld.info
  • Outmaildirect.info
  • Penmailpro.info
  • Postionvision.info
  • Presummermail.info
  • Romanticloveforever.com
  • Simpleitislove.com
  • Thaibestmail.info
  • Theamericanmail.info
  • Thefriendlymail.info
  • Thelovingplace.net
  • Tonsofloves.com
  • Worldmeetlove.com
Some of these sites are fake mail sites, others are fake dating sites. Unlike many scams, there's a fair level of sophistication to this one so it's quite possible to see that it might drag in some unsuspecting victims.

Wednesday 8 August 2007

"Comcast Automated Systems" Trojan

A trojan embedded in a ZIP file this time. It's attempting to use a filename of statement.pdf[lots of spaces].exe


Subject: Important Notice-July 2007 Statement 0000000


PLEASE DO NOT REPLY TO THIS E-MAIL. THIS E-MAIL ADDRESS IS USED BY
COMCAST AUTOMATED SYSTEMS AND IS NOT MONITORED.

Your August 07, 2007 Bank billing statement is ready for viewing. To
view your bill download attached Adobe Acrobat PDF file.

If you would like to discontinue receiving a hard copy billing
statement in the mail, you may do so by selecting the UPDATE STATEMENT METHOD
link once you have logged into your account. From there, simply select
the option for Electronic Statement Only.

You received this e-mail because you enrolled Account feature.
If you no longer wish to receive these e-mails, you will
need to cancel your enrollment. To cancel your enrollment, please log
in to your account and from the Update Profile screen, select the cancel
link from the bottom of the page.

As far as we can tell, the filename enclosed in the ZIP file won't extract properly because there are too many spaces and the filename it too long, but the spammers will probably figure it out eventually.

If you're using Postini, then the attachment manager can be easily configured to block all .exe files, and this also applied to .exe-in-.zip files.

Detections are patchy with some AV products picking up the executable packer. When the .exe files run it will attempt to install other malware, some of which will be picked up by AV products. According to VirusTotal:


File statement.pdf____________________ received on 08.08.2007 17:44:19 (CET)
AntivirusVersionLast UpdateResult
AhnLab-V32007.8.3.02007.08.08-
AntiVir7.4.0.572007.08.08TR/Crypt.XPACK.Gen
Authentium4.93.82007.08.08-
Avast4.7.1029.02007.08.07-
AVG7.5.0.4762007.08.07-
BitDefender7.22007.08.08-
CAT-QuickHeal9.002007.08.08(Suspicious) - DNAScan
ClamAV0.912007.08.08-
DrWeb4.332007.08.08-
eSafe7.0.15.02007.07.31suspicious Trojan/Worm
eTrust-Vet31.1.50432007.08.08-
Ewido4.02007.08.08Downloader.Agent.bhl
FileAdvisor12007.08.08-
Fortinet2.91.0.02007.08.08-
F-Prot4.3.2.482007.08.08-
F-Secure6.70.13030.02007.08.08Trojan-Downloader.
Win32.Small.ehe
IkarusT3.1.1.122007.08.08-
Kaspersky4.0.2.242007.08.08Trojan-Downloader.
Win32.Small.ehe
McAfee50922007.08.07-
Microsoft1.27042007.08.08VirTool:Win32/Obfuscator.C
NOD32v224442007.08.08a variant of Win32/Spy.Nuklus
Norman5.80.022007.08.08-
Panda9.0.0.42007.08.08Suspicious file
Prevx1V22007.08.08-
Rising19.35.22.002007.08.08-
Sophos4.19.02007.08.01-
Sunbelt2.2.907.02007.08.07Infostealer.Nuklus
Symantec102007.08.08-
TheHacker6.1.7.1642007.08.08-
VBA323.12.2.22007.08.07Trojan-Spy.Win32.Small.gv
VirusBuster4.3.26:92007.08.08Trojan.DL.Small.Gen!Pac25
Webwasher-Gateway6.0.12007.08.08Trojan.Crypt.XPACK.Gen

Additional information
File size: 13824 bytes
MD5: 38ac63f8b7ef22d9a07138ba73de7178
SHA1: 6337e3178eba2859fd0e2e1188eab8b528696933
packers: UPack


-----

Sunday 5 August 2007

"S-Pharm" scam

Another money laundering/money mule scam, this time from "S-Farm". As before, money transfers of this type are illegal and you will get into serious trouble if you get involved.

Dear Sir/Madam,

S-Pharm is a USA company selling medical and consumer goods. We have
reached big sales volume of pharmaceuticals in the UK and now are trying
to penetrate the European market. Quite soon we will open
representative offices and pharmacies or authorized sales centers in the UK and
therefore we are currently looking for people who will assist us in
establishing a new distribution network there. The fact that despite the
British market is new for us we already have regular clients also speaks for
itself.

WHY YOU?
The international money transfer tax for legal entities (companies) in
USA is 25%, whereas for the individual it is only 7%. That.s why we
need you! We need agents to receive payment for our products (by
electronic money transfer) and to resend the money to us. This
way we will save money because of tax decreasing.

HOW MUCH WILL YOU EARN?
7%-9% from each sale/resale operation! For instance: you receive 1000
GBP to your bank account. You will withdraw the money and keep 70GBP (7%
from 1000GBP) for yourself! At the beginning your commission will
equal 7%, though later it will increase up to 9%!

ADVANTAGES
You do not have to go out as you will work as an independent contractor
right from your home office. Your job is absolutely legal. You can
earn up to 3000 GBP-4000 depending on time you will spend for this job.
You do not need any capital to start. The employees who make efforts and
work hard have a strong possibility to become managers. Anyway our
employees never leave us.

If you are interested in our offer, please feel free to ask for the
general provisions of the Contract.

Best regards,
S-Pharm Manager