Backdoors Archive

Backdoors: “Hilton Sex Tape Shot at Hyatt” Email

August 27th, 2008, by Chris, at 411 Spyware | Posted in Backdoors

“Hilton Sex Tape Shot at Hyatt” Email Threat Level: “Hilton Sex Tape Shot at Hyatt” Email is a threat

“Hilton Sex Tape Shot at Hyatt” Email screenshot “Hilton Sex Tape Shot at Hyatt” Email is circulating spam that links to a scam site, ColorCoverShop.com. “Hilton Sex Tape Shot at Hyatt” Email’s site poses as a news web page, and after it loads you’ll get a popup telling you’re missing a Video ActiveX object needed to watch the “Hilton Sex Tape Shot at Hyatt” Email video.

This Video ActiveX object error reads:

The page at http://colorcovershop.com says:
Video ActiveX Object Error
Your browser cannot play this video file.
Click ‘OK’ to download and install missing Video ActiveX Object.

If you click “CANCEL” — as you should — , you’ll get another popup:

The page at http://colorcovershop.com says:
Please install new version of Video ActiveX Object.

Funny enough, you don’t have many options besides downloading this Video ActiveX Object. And if you do download this “Video ActiveX Object,” you’ll download “codec_install.exe,” which is really a Trojan.

Which will really give a hacker access to your PC.

Which is really #*($*&@*%&^$!

Let me show you how to block “Hilton Sex Tape Shot at Hyatt” Email.

Read more about “Hilton Sex Tape Shot at Hyatt” Email »


Backdoors: “RE: ® Official Update 2008!” Email

August 27th, 2008, by Chris, at 411 Spyware | Posted in Backdoors, Trojans

“RE: ® Official Update 2008!” Email Threat Level: “RE: ® Official Update 2008!” Email is a threat

“RE: ® Official Update 2008!” Email screenshot “RE: ® Official Update 2008!” Email is circulating spam that links to a scam site, http://89.187.49.18/install.exe. That .exe extension tells you “RE: ® Official Update 2008!” Email links to a processes file, which means a program, which means –

Probably a Trojan.

“RE: ® Official Update 2008!” Email reads:

From: Microsoft XP (or Antivirus XP)
Subject: RE: ® Official Update 2008!

Free Update Windows XP,Vista
About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

©2008 Microsoft | Unsubscribe | More Newsletters | Privacy
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

Let me show you how to block “RE: ® Official Update 2008!” Email.

Read more about “RE: ® Official Update 2008!” Email »


Backdoors: “Flash player: Incorrect version” popup

August 25th, 2008, by Chris, at 411 Spyware | Posted in Backdoors

“Flash player: Incorrect version” popup Threat Level: “Flash player: Incorrect version” popup is a pest

“Flash player: Incorrect version” popup is a backdoor Trojan posing as a flash codec. You need to download “Flash player: Incorrect version” popup like you need more fake anti-spyware on your computer.

Which is fitting, because that’s what “Flash player: Incorrect version” popup does: if you download it, all the sudden you’ll find out now you “need” to download and/or buy scamware like Files Secure 2.2, VirusHeat, or VirusProtect Pro to remove threats that don’t really exist. “Flash player: Incorrect version” popup popups read:

Flash player: Incorrect version
Your browser cannot display this site. You need to download new version flash player Object to play this video file.”

My advice if you get this “Flash player: Incorrect version” popup popup? Click CANCEL CANCEL CANCEL until your break your mouse.

Read more about “Flash player: Incorrect version” popup »


Backdoors: DVBN756512.zip

August 22nd, 2008, by Chris, at 411 Spyware | Posted in Backdoors

DVBN756512.zip Threat Level: DVBN756512.zip is a danger

DVBN756512.zip is a Trojan attached to a scam email that pretends to be an invoice from Fedex.

This DVBN756512.zip email reads:

From: John Barker (tengyun@qbchina.com)
Subject: Tracking N 2894898381

Unfortunately we were not able to deliver postal package you sent on July the 25 in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your FEDEX
www.fedex.com
Attachment: DVBN756512.zip 49.9 KB

If you open this DVBN756512.zip attachment, you’ll probably launch a Trojan that’ll give a hacker control over your computer.

I’m sure identity theft sounds like a fun weekend, but if you’d rather spend your weekend otherwise — church? Family? Strip club? — I can show you how to get rid of DVBN756512.zip for free.

Read more about DVBN756512.zip »


Backdoors: MRDI8761223.zip

August 22nd, 2008, by Chris, at 411 Spyware | Posted in Backdoors

MRDI8761223.zip Threat Level: MRDI8761223.zip is a danger

MRDI8761223.zip is a Trojan attached to a scam email that pretends to be an invoice from Fedex.

This MRDI8761223.zip email reads:

From: Bernadine Leach (teiq@sohu.com)
Subject: Fedex tracking number 5391082722

Unfortunately we were not able to deliver postal package you sent on August the 1st in time
because the recipient’s address is not correct. Please print out the invoice copy attached and collect the package at our office

Your FEDEX.com
Attachment: MRDI8761223.zip 49.8 KB

If you open this MRDI8761223.zip attachment, you’ll probably launch a Trojan that’ll give a hacker control over your computer.

I’m sure identity theft sounds like a fun weekend, but if you’d rather spend your weekend otherwise — church? Family? Strip club? — I can show you how to get rid of MRDI8761223.zip for free.

Read more about MRDI8761223.zip »


Backdoors: ZD76128824.zip

August 20th, 2008, by Chris, at 411 Spyware | Posted in Backdoors, Trojans

ZD76128824.zip Threat Level: ZD76128824.zip is a danger

ZD76128824.zip is a Trojan attached to a scam email that pretends to be an invoice from Fedex.

This ZD76128824.zip email reads:

From: Fran Moon (fyqm@boheart.com)
Subject: Fedex tracking number 4258890747

Unfortunately we were not able to deliver postal package you sent on August the 1st in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office

Your FEDEX.com
Attachment: ZD76128824.zip 55.9 KB

If you open this ZD76128824.zip attachment, you’ll probably launch a Trojan that’ll give a hacker control over your computer.

I’m sure identity theft sounds like a fun weekend, but if you’d rather spend your weekend otherwise — church? Family? Strip club? — I can show you how to get rid of ZD76128824.zip for free.

Read more about ZD76128824.zip »


Backdoors: Exel_Invoice_NR719200.zip

August 20th, 2008, by Chris, at 411 Spyware | Posted in Backdoors, Trojans

Exel_Invoice_NR719200.zip Threat Level: Exel_Invoice_NR719200.zip is a danger

Exel_Invoice_NR719200.zip is a Trojan attached to a scam email that pretends to be an invoice from Fedex.

This Exel_Invoice_NR719200.zip email reads:

From: Wilda Bella (rfaolw@bracez.com)
Subject: TRACKING NUMBER 0694703329

Unfortunately we were not able to deliver postal package you sent on August the 1st in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office
Your FEDEX.com
Attachment: Exel_Invoice_NR719200.zip

If you open this Exel_Invoice_NR719200.zip attachment, you’ll probably launch a Trojan that’ll give a hacker control over your computer.

I’m sure identity theft sounds like a fun weekend, but if you’d rather spend your weekend otherwise — church? Family? Strip club? — I can show you how to get rid of Exel_Invoice_NR719200.zip for free.

Read more about Exel_Invoice_NR719200.zip »


Backdoors: KrAIMer 1.1

August 8th, 2008, by Chris, at 411 Spyware | Posted in Backdoors, Rogue Anti Spyware

KrAIMer 1.1 Threat Level: KrAIMer 1.1 is a pest

KrAIMer 1.1 screenshot KrAIMer 1.1 is a backdoor Trojan that appears in security scans by fake antispyware Internet Antivirus.

Is KrAIMer 1.1 dangerous? KrAIMer 1.1 might have been a serious threat, once upon a time. Now, KrAIMer 1.1’s biggest danger is scaring you into wasting $49.95 on Internet Antivirus.

You’re not really infected with KrAIMer 1.1 — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of KrAIMer 1.1 and Internet Antivirus, for free.

Read more about KrAIMer 1.1 »


Backdoors: Infector Trojan

July 17th, 2008, by Chris, at 411 Spyware | Posted in Backdoors

Infector Trojan Threat Level: /

Infector Trojan is a backdoor Trojan that basically gives a hacker control over your system.

Great.

Unless identity theft sounds like a fun weekend to you, I’ll show you how to get rid of Infector Trojan for free.

Read more about Infector Trojan »


Backdoors: Digital Vampire

June 20th, 2008, by Chris, at 411 Spyware | Posted in Backdoors, Trojans

Digital Vampire Threat Level: Digital Vampire is a danger

Digital Vampire is a downloader Trojan that sneaks into your system through ICQ. Once Digital Vampire is installed, Digital Vampire tracks your usernames and passwords, and send these to a hacker.

Unless identity theft, hacker botnets, and Digital Vampire popups sound like a fun weekend, remove Digital Vampire.

Read more about Digital Vampire »