• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Warning - virtual postcard from FriendGreetings.com

SagaLore

Elite Member
There is a self-sending e-card going around. It isn't a virus and isn't a chainletter hoax, but it's just as bad as both.

Many antivirus softwares have added it to it's virus definitions because of it's worm like activies.

The email comes as:


Subject: %recipient% you have an E-Card from %sender%.
Message:
Greetings!

%sender% has sent you an E-Card -- a virtual postcard from FriendGreetings.com. You
can pickup your E-Card at the FriendGreetings.com by clicking on the link
below.

http:/ /www.friendgreetings.com/pickup/pickup.aspx?<extra content removed>

Message:
------------------------------------------------------------
%recipient%
I sent you a greeting card. Please pick it up.
%sender%
------------------------------------------------------------

It will display multiple user end licenses which actually explain that it will install itself to your machine and send the postcard to everyone in your address book. But most people don't read user agreements and then this gets installed.

To remove it you just need to go to Add/Remove programs.


I was blocking it from our firm, but then they changed their domain from friendgreetings.com to friend-greetings.com and bypassed the block. Quite a few people ended up installing it which then sends itself back out to all of our clients... and we have thousands of clients...
 
If you're blocking them, might as well kill Cool-downloads.com as well. They spammed a ton of people saying you could download "elf bowling" and other nstorm games. Nstorm then sent out a mass email to people who had downloaded the games from them explaining how it worked.

Apparently the links all lead to cool-downloads.com, which installed the software a la your post. Then it just dumped people to Nstorm.com. Nstorm complained, but not surprisingly, they're offshore and their ISP doesn't care.
 
Back
Top