eAntiSpy Netsend
Results 1 to 2 of 2

Thread: eAntiSpy Netsend

  1. #1
    Senior Member IKnowNot's Avatar
    Join Date
    Jan 2003
    Posts
    792

    eAntiSpy Netsend

    Figured this belonged here.

    I loved this!

    Got a packet capture of a NetSend ( to port 1026 )

    Message read:
    STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION. \n\n\nWindows has found dangerous infected spyware on your computer!\n\n To rid your computer of this dangerous spyware do the following:\n\n1. Download eAntiSpy from: www.helpfixpc.com\m2
    I hope I got that right.

    I came from 221.208.208.11/32874 ( China -- go figure )

    That IP address is apparently well known at DShield

    The addresses for the so-called product come form VC "Saint Vincent and The Grenadines"

    I didn't investigate this further, just thought it humorous.
    " And maddest of all, to see life as it is and not as it should be" --Miguel Cervantes

  2. #2
    Junior Member
    Join Date
    Oct 2005
    Posts
    7
    smart idea, checking qhere the IP was. Seemed a little weird, though, such good English coming from a foreign country that DEFINITELY doesn't write English that well.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides