 
Main Menu
|
|
Nevada Classics
|
|
Advertise at CC
|
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
|
|
1 |
| 2 |
3 |
4 |
5 |
6 |
7 |
8 |
| 9 |
10 |
11 |
12 |
13 |
14 |
15 |
| 16 |
17 |
18 |
19 |
20 |
21 |
22 |
| 23 |
24 |
25 |
26 |
27 |
28 |
29 |
| 30 |
|
|
|
|
|
|
|
|
CC Advertisers
|
|
12-25-2003, 10:16 PM
|
 |
CC Member
|
|
|
Join Date: Dec 2001
Location: San Diego,
CA
Cobra Make, Engine:
Posts: 2,979
|
|
Not Ranked
Scammers after paypal info
Just wanted to let everyone know that someone is trying to spoil Christmas for people. Since shopping online has become so common and so many people are using paypal the scam is running today. I got the email at work and at home today that appears to be from paypal saying they are upgrading servers and need you to verify your account information. The page is infected with a trojan horse type virus that will copy your account info and forward it to the thieves so they can logon to your paypal account and use your credit card info.
__________________
Remember, It's never too early to start beefing up your obituary.
|
12-25-2003, 10:27 PM
|
|
CC Member
|
|
|
Join Date: Dec 1999
Location: Arvada,Colorado,80005,
Posts: 64
|
|
Not Ranked
I received the same Email. I hope no one falls for this one. Went right into the trash bin.
|
12-25-2003, 11:17 PM
|
 |
CC Member
|
|
|
Join Date: Sep 2002
Location: Baton Rouge, Louisiana,
La.
Cobra Make, Engine: Waiting to Order a BDR, engine to be a SA C408. TKO to hook it up.
Posts: 1,259
|
|
Not Ranked
I dumped mine as well. Not a paypal user but I still got the email.
How does the website "www.fenprus-ssvsa.cl/paypal/verify.htm" - the actual destination of the 'click here' in the email - tell IE to display the address as a real paypal.com address?
Found that out by looking at the address bar as the site opens and you see it for a split second, but it's there in the history for you to see the properties of.
xl - any info on the trojan ? I'd like to make sure I didn't get it when I hit the site in case it goes active in the future.
__________________
Pull a gear .... drop the hammer .... and enjoy the Drive !!
|
12-25-2003, 11:23 PM
|
 |
CC Member
|
|
|
Join Date: Mar 2001
Location: Provo,
Ut
Cobra Make, Engine: Kirkham, 427
Posts: 6,990
|
|
Not Ranked
Many, many thanks for this wonderful site. I just checked my email and
WOW, they sent the email to me 6 times in a row. I wonder why I am so popular. 
I didn't open anything and deleted it and then deleted the deleted stuff. (Is there a rule somewhere I can't say deleted too many times in one sentence?)
I love this site...thank you Brent,
PIGS! I hope they catch them and put them in a hole with Saddam.
David |
12-25-2003, 11:32 PM
|
|
CC Member
|
|
|
Join Date: Sep 2002
Location: Baton Rouge, Louisiana,
La.
Cobra Make, Engine: Waiting to Order a BDR, engine to be a SA C408. TKO to hook it up.
Posts: 1,259
|
|
Not Ranked
I think this is a form of mail fraud which probably should be reported to the FBI.
__________________
Pull a gear .... drop the hammer .... and enjoy the Drive !!
|
12-26-2003, 12:26 AM
|
|
CC Member
|
|
|
Join Date: May 2001
Cobra Make, Engine:
Posts: 868
|
|
Not Ranked
MAIL WASHER
A while back, Richard Hudgins recommended a program named MailWasher. You can get a free version at mailwasher.net.
MailWasher enables you to look at your e-mail before you download it to your computer. This way, you can delete, bounce and blacklist whatever you want without the bad stuff even getting on your computer.
Try it.
|
12-26-2003, 05:12 AM
|
 |
CC Member
|
|
|
Join Date: Aug 2002
Location: Dacula, (Atlanta),
GA
Cobra Make, Engine: Unique 427 SC, Southern Automotive 427W Stroker
Posts: 1,649
|
|
Not Ranked
I opened the email and looked at the form, but I didn't enter anything. It's now deleted. Don't you have to fill something out before the scammers get your sensitive info?
__________________
After a good hard ride.....oil pressure is over 50, temp is below 190, she idles and no new dents. LIFE IS GOOD!
|
12-26-2003, 06:16 AM
|
 |
CC Member
|
|
|
Join Date: Jan 1999
Location: Whitehouse Station,
NJ
Cobra Make, Engine: SOLD: 2013 Boss 302 Mustang #2775 (both options). SOLD: 95 Mustang Cobra R #4 of 250 "Rosie's Diner" car. SOLD: CCX2-2505, #5 of 7 289 FIAs ever produced at Contemporary! my first Cobra: Unique 427SC w/ 428CJ moder!
Posts: 5,438
|
|
Not Ranked
I got it too...Actually forward the information (email) to the legit PayPal site. They want to be aware of all incidents. They want to hunt down this scum and make an example of them. Ebay was having the same problems a few months back and I followed up with them, I never received an email after that.
The tipoff for me was, they sent the email to the wrong email account. I have PayPal and eBay ids setup on a separate account.
You can also setup filters to ensure you don't get crap like this.
__________________
REMEMBER....In Case of Spin....Both Feet in!!!!!
|
12-26-2003, 06:29 AM
|
 |
Senior Club Cobra Member
|
|
|
Join Date: Mar 2001
Location: Northport,
NY
Cobra Make, Engine: Kirkham, KMP178 / '66 GT350H, 4-speed
Posts: 10,362
|
|
Not Ranked
This type of scam went around in October as well. I had forwarded the mail header info to PayPal...
..here is their response and advice:
Dear Ron,
Thank you for bringing this suspicious email to our attention. We can confirm that the email you received; was not sent to you by PayPal. The website linked to this email is not a registered URL authorized or used by PayPal. We are currently investigating this incident fully. Please do not enter any personal or financial information into this website.
If you have surrendered any personal or financial information to this fraudulent website, you should immediately log into your PayPal Account and change your password and secret question and answer information. Any compromised financial information should be reported to the appropriate parties.
If you notice any unauthorized activity associated with your PayPal transaction history, please immediately report this to PayPal by following the instructions below:
1. Go to https://www.paypal.com/
2. Click on the Security Center at the bottom of the page
3. Click on "Report a Problem"
4. Select the Topic: Report Fraud
5: Select the Subtopic: Unauthorized use of my PayPal Account, and click Continue.
6. Follow the instructions to access the appropriate form
Sincerely,
PayPal Account Review Department
PayPal, an eBay Company
|
12-26-2003, 07:16 AM
|
|
CC Member
|
|
|
Join Date: Feb 2003
Location: Boca Raton, Florida,
Posts: 22
|
|
Not Ranked
Does anyone know whether clicking the link installs any code on your system ?
I clicked the link thinking not, but did not enter any info obviously.
Just want to know if there was any code planted by the link if that is possible.
Thanks.
__________________
________________________
Ross Sinclair
Performance Cars
www.performcars.com
|
12-26-2003, 08:01 AM
|
|
Senior Club Cobra Member
|
|
|
Join Date: Oct 1999
Location: Menomonie, Wisconsin,
Posts: 3,505
|
|
Not Ranked
I did, too, and just about completed filling it out when I saw that they asked for a SSI. That queered the whole thing for me. I knew something was up. I received the same email about six hours later. Thanks for bringing it to the forum.
|
12-26-2003, 08:08 AM
|
|
Senior Club Cobra Member
|
|
|
Join Date: Jan 2001
Location: Bloomfield Hills, (Detroit area),
Mi
Cobra Make, Engine: Superformance 156, ex Paxton 351, now a 392 Ford Racing Stroker
Posts: 1,666
|
|
Not Ranked
I also got the alleged paypal request sent two times yesterday and i forwarded both today to their fraud research area at : spoof@paypal.com. I received an almost immediate response thanking me and saying they would look into it. bill. |
12-26-2003, 08:16 AM
|
|
CC Member
|
|
|
Join Date: Jul 2003
Location: Fort Pierce,
FL
Cobra Make, Engine:
Posts: 141
|
|
Not Ranked
Ross,
You're probably safe, however, it's better to be safe than sorry. Run a complete system scan with your anti-virus software (be sure it's up to date) so that you can rule out installation any trojans or other malicious code. Run Spybot too, just in case.
Happy holidays.
Bill
Last edited by Bill V; 12-26-2003 at 08:20 AM..
|
12-26-2003, 08:23 AM
|
|
CC Member
|
|
|
Join Date: Sep 2002
Location: Baton Rouge, Louisiana,
La.
Cobra Make, Engine: Waiting to Order a BDR, engine to be a SA C408. TKO to hook it up.
Posts: 1,259
|
|
Not Ranked
What I'm wondering about is ...
Went to the site, more to see what it was, didn't enter anything but after xl said it had a trojan I'm wondering if that is on this machine and waiting for the next time my card details are entered then it'll sent that info off to wherever it goes. I'm running Panda anti-virus and it didn't say anything - but that's checking virus's, not trojans.
My stepson occassionaly uses paypal here, and we sometimes buy items online from a range of other sites (never had a problem yet).
Just want to make sure there isn't a trojan on here patiently waiting .....
__________________
Pull a gear .... drop the hammer .... and enjoy the Drive !!
|
12-26-2003, 08:28 AM
|
 |
CC Member
|
|
|
Join Date: Sep 2000
Location: Monett,
MO
Cobra Make, Engine: 2 Seat Roadster-by B&B, 460+ w/auto.
Posts: 437
|
|
Not Ranked
When I went through the properties I saw "barney@epost.de". Found several ".de". Denmark????? Hmmmmm???? Oh well, delete.
__________________
Ron
Nonconformist. Can't handle a real job.
|
12-26-2003, 08:29 AM
|
 |
Senior Club Cobra Member
|
|
|
Join Date: Jan 2001
Location: Santa Barbara, Ca.,
ca
Cobra Make, Engine: R.U.C.C. with a 427FE, toploader
Posts: 1,435
|
|
Not Ranked
I recieved 4 of them in about 15min. on the 25th
__________________
Mike Z
Nothing sucks more than that moment during an argument when you realize you’re wrong. 
|
12-26-2003, 08:29 AM
|
 |
Senior Club Cobra Member
|
|
|
Join Date: Apr 2001
Location: Glendale,
AZ
Cobra Make, Engine: FFR 1574 331 Blown
Posts: 339
|
|
Not Ranked
I got the same stupid email too, nice Christmas present.
Ross,
I use a program call Ad-Ware for removing spyware as well as a Antivirus program. Ad-ware can be found at http://www.lavasoftusa.com/software/adaware/
Beware of the emails that claim to remove spyware, usuallu they will remove spyware then place their spyware on your system.
__________________
Paul
AZ Cobras
|
12-26-2003, 08:36 AM
|
|
CC Member
|
|
|
Join Date: Jul 2003
Location: Fort Pierce,
FL
Cobra Make, Engine:
Posts: 141
|
|
Not Ranked
Slow dawg
.de is a root zone for Germany. Denmark is .dk.  |
12-26-2003, 08:36 AM
|
|
Senior Club Cobra Member
|
|
|
Join Date: Mar 2001
Location: Northport,
NY
Cobra Make, Engine: Kirkham, KMP178 / '66 GT350H, 4-speed
Posts: 10,362
|
|
Not Ranked
Quote:
Originally posted by Venom 427
Does anyone know whether clicking the link installs any code on your system ?
|
Highly unlikely. The code that launches is a script to collect the required information and save it on the rogue's system.
I tried to run the script on a "mule" system here at work this a.m., but the site is already down.
(interesting... the source of the code in the e-mail I received came from an ISP in Chile... and traced to a generic porn site there... this is why crimes like this are so hard to prosecute, since there are no political boundaries to these offenses... currently, the largest source of junk e-mails come from mainland China, because it's cheap to use them to send out millions of messages).
Bill gives good advice... although I see no residue in the code, it's a good idea to run an AV check with up-to-date definitions. |
12-26-2003, 08:38 AM
|
|
Senior Club Cobra Member
|
|
|
Join Date: Mar 2001
Location: Northport,
NY
Cobra Make, Engine: Kirkham, KMP178 / '66 GT350H, 4-speed
Posts: 10,362
|
|
Not Ranked
Quote:
Originally posted by Bill V
Slow dawg
.de is a root zone for Germany. Denmark is .dk.
|
Bill..altho Lavasoft is a Denmark-based company... they lost the domain name in .dk...
...so they use http://www.lavasoft.de |
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -7. The time now is 01:50 PM.
Links monetized by VigLink
|
Linear Mode
