PDA

View Full Version : Virus Alert! American Greetings Email



SunshineGirl
06-28-2007, 11:49 PM
Hey everyone,

I got an email tonight that LOOKED like it was from a friend sending me a card at American Greetings. Now, it raised a lot of red flags for me (was sent to an email address I have never used, came from an email address that was not american greetings, had an IP address rather than americangreetings.com in it), but I clicked on it anyway just to see what it would do so I could warn everyone.

When I clicked on the link to "get my card", it took me to a blank page that said it was testing a new browser feature. In the meantime, it started to download a trojan horse downloader virus (JS/PSYME). My AVG got it immediately, but I know that not all of you run AVG.

So if you get a "postcard" from anyone and it looks the least bit fishy, check it out before you click on it. I'm posting what I got below in case anyone else gets one like this. I also saw one earlier in the day that was not from "American Greetings" but another company. And the good news is that they email address that they used was not one that I have ever used to sign up for offers but rather a fake email address that I have posted on my Helping Moms website that they must have picked up using a robot (another reason to NEVER post your email address anywhere on a website).

Here's the email:

Subject: You've received a postcard from a family member!
From: americangreetings.com

Good day.

Your family member has sent you an ecard from americangreetings.com.

Send free ecards from americangreetings.com with your choice of colors, words and music.

Your ecard will be available with us for the next 30 days. If you wish to keep the ecard longer, you may save it on your computer or take a print.

To view your ecard, choose from any of the following options:

--------
OPTION 1
--------

Click on the following Internet address or copy & paste it into your browser's address box.

(h)ttp://74.141.195.122/?655dc21c83715e8517a32e6b9

--------
OPTION 2
--------

Copy & paste the ecard number in the "View Your Card" box at http:// 74.141.195.122/

Your ecard number is
655dc21c83715e8517a32e6b9

Best wishes,
Postmaster,
americangreetings.com

Kycha
06-29-2007, 12:17 AM
Thanks for the warning! I have gotten 3 of these this week(not from American greetings, but from a different company). They all say in the subject line "You've received a postcard from a family member!". I just ended up deleting them.

lilianddomsmom
06-29-2007, 02:52 AM
same here i got one last week and went to open it but my computer told a virus was detected.

SunshineGirl
06-29-2007, 08:31 AM
I just got another one this morning. It said it came from Blue Mountain this time.

cglaura
06-29-2007, 12:24 PM
I'm so glad I read this yesterday, I got one this morning also, mine was from greet2k.com Normally I would have clicked on something like this. Thanks Tricia!

Good day.

Your family member has sent you an ecard from greet2k.com.

Send free ecards from greet2k.com with your choice of colors, words and music.

Your ecard will be available with us for the next 30 days. If you wish to keep the ecard longer, you may save it on your computer or take a print.

To view your ecard, choose from any of the following options:

--------
OPTION 1
--------

Click on the following Internet address or copy & paste it into your browser's address box.

(h)ttp://88.1.162.255/?5099675c50080d0229e368412

--------
OPTION 2
--------

Copy & paste the ecard number in the "View Your Card" box at (h)ttp://88.1.162.255/

Your ecard number is
5099675c50080d0229e368412

Best wishes,
Postmaster,
greet2k.com

zoodoyle
06-29-2007, 04:50 PM
I got the same one yesterday....sneaky little buggers :computer:

Hedy
07-01-2007, 03:56 PM
Sunshinegirl, you're ahead of Snopes! :)
http://www.snopes.com/computer/virus/postcard.asp

Kycha
07-01-2007, 06:26 PM
Sunshinegirl, you're ahead of Snopes! :)
http://www.snopes.com/computer/virus/postcard.asp

Thats the one I got. From notme.hk.

SunshineGirl
07-01-2007, 08:08 PM
I'm now getting these from many different faked greeting cards companies. And I am getting them at almost every email address that I have. Actually, this is the most searched keyword in our forum today. Here are a list of some of the others that I have seen:

Your class mate has sent you a greeting card from Postcard.com.
Your friend has sent you a greeting card from 123greetings.com.
Your partner has sent you a greeting card from E-Cards.Com.
Your worshipper has sent you a greeting card from greet2k.Com.
Your worshipper has sent you a greeting ecard from 2000Greetings.Com.
Your colleague has sent you a greeting postcard from greetingcards.com.
Your friend has sent you a greeting postcard from greet2k.com.
Your mate has sent you a greeting postcard from 2000greetings.com.
Your partner has sent you a greeting postcard from dgreetings.Com.
Your class mate has sent you a postcard from riversongs.Com.
Your colleague has sent you a postcard from 2000greetings.com.
Your family member has sent you an ecard from Postcards.Org.
Your family member has sent you an ecard from e-cards.com.
Your family member has sent you an ecard from americangreetings.com.
Your family member has sent you an ecard from BlueMountain.Com.
Your family member has sent you an ecard from mypostcards.com.
Your family member has sent you an ecard from VintagePostcards.Com.
Your family member has sent you an ecard from aremitn.hk.
Your family member has sent you an ecard from goat1.hk.
Your family member has sent you an ecard from notme.hk.
Your family member has sent you an ecard from catcher.hk.
Your family member has sent you an ecard from notme.hk.
Your family member has sent you an ecard from isbro.hk.
Your family member has sent you an ecard from smsale.hk.
Your family member has sent you an ecard from qvsworn.hk.
Your family member has sent you an ecard from kasolid.hk.
Your school friend has sent you a postcard from FreeWebCards.Com.
Your friend has sent you an ecard from postcard.com.

m 'n c
07-01-2007, 08:35 PM
I got one on my work email this afternoon which surprises me since its a difficult email to crack.

schachteles
07-02-2007, 03:55 PM
WOW, I just went through my e-mails and I had two...thanks for the heads up!!

sammielynn
07-02-2007, 04:49 PM
I had one on my work e-mail today! Delete, delete, delete...... Sure am glad I knew what to look for.

CindyS
07-03-2007, 07:17 AM
I got one from Hallmark yesterday.

saffymom
07-18-2007, 03:17 PM
Thanks for the warning! My husband has been getting one or two of these a day. Luckily he didn't open them because they seemed weird, but I'll let him know that he definitely should not.

DarkStar
08-05-2007, 09:41 PM
Me too, but it was greet2k.com and when I checked it out on properties, I saw an address from a city and state that I have an old friend in... Norton's was smarter than I was, but it was still scary!

tnrose
08-07-2007, 05:20 PM
I recieve at least 3 of these a day and have for the last week or so.
Sometimes it says you have a greeting or card from
a neighbor, a classmate,a family friend
and a couple of others I can't remember.
So just DELETE them all.
If a real friend sent it---they will understand.

Here is another one

VintagePostcard.Com You've received a greeting card from a Partner!

schlpt
08-08-2007, 10:25 AM
Thanks, I've received several of these in the last few days.

bs4free
08-08-2007, 10:27 AM
I get these several times a week! Very annyoing and dangerous SPAM this is! Good think links are disabled by default in Outlook!

dpayne1969
08-09-2007, 10:13 AM
wow thanks for the heads up on this i have warned my family as well

spring
08-11-2007, 11:19 AM
Thanks for the warning. Wow, what will they think of next?

bs4free
08-11-2007, 11:39 AM
Thanks for the warning. Wow, what will they think of next?


Please join our new rewards site we pay $100 in paypal right away just for joing, Please give us your Name, Address, Phone Number, Paypall acouunt, Create a User name and password, You mothers middle name. The last 5 digits of your social security number, You faviorate banking instution, You drives lisence number, the first 3 numbers of your social security number. and please verfiy your e-mail and you will recieve your $100 in paypal right away once confirmed and up too $1000 a month by filling out surveys, reading e-mails, and doing special offers. Thank and welcome to the WhereTheSunDontShineRewards.com

That would be my guess about what they would come up with next! :rotfl: :rotfl:

We :heart: :sunshine:

spring
08-11-2007, 04:59 PM
Man, the internet keeps getting scarier and scarier!

bs4free
08-11-2007, 05:05 PM
Man, the internet keeps getting scarier and scarier!


The internet has always been scary! its just now you dont have to look hard to notice it! Its in your face all the time! its in the news, and in the press! Nothing new on the internet thats scary that has not been tried in some way or adapted from other practices! Just a new location for the same old tricks!

Tantor
08-15-2007, 11:26 AM
Been getting these for a while. I never open any of them.