Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Another viral spamvertizement

1 view
Skip to first unread message

Virus Guy

unread,
Nov 2, 2009, 6:52:49 PM11/2/09
to
Is it just me, or are these URL's borken?

========= Private MSN Shemale Videos
=========
========= hxxp://movie33.biz/video/y5hn

FromTheRafters

unread,
Nov 2, 2009, 7:19:47 PM11/2/09
to
"Virus Guy" <Vi...@Guy.com> wrote in message
news:4AEF70D1...@Guy.com...

Sure, the t's have been changed to x's in the scheme.

...and where is the other one? :o\


David H. Lipman

unread,
Nov 2, 2009, 7:25:54 PM11/2/09
to
From: "Virus Guy" <Vi...@Guy.com>

Broken. .

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


FromTheRafters

unread,
Nov 2, 2009, 7:27:33 PM11/2/09
to
"Virus Guy" <Vi...@Guy.com> wrote in message
news:4AEF70D1...@Guy.com...

I downloaded "watch.html" and got an empty document.


The Central Scrutinizer

unread,
Nov 2, 2009, 9:36:52 PM11/2/09
to
"FromTheRafters" <err...@nomail.afraid.org> wrote in message
news:hcntdm$75i$1...@news.eternal-september.org...

It was an attempt at social engineering. Your computer is totally hosed now.

:-)

--

FromTheRafters

unread,
Nov 2, 2009, 10:30:55 PM11/2/09
to
"The Central Scrutinizer" <gci...@hotmail.com> wrote in message
news:hco4ui$vir$1...@aioe.org...

The URL was fine, but the patient died.

In any event, it wasn't "viral". :o)


David H. Lipman

unread,
Nov 2, 2009, 10:56:43 PM11/2/09
to
From: "FromTheRafters" <err...@nomail.afraid.org>

>> :-)


It was - boring.

Virus Guy

unread,
Nov 3, 2009, 10:21:16 AM11/3/09
to
Virus Guy wrote:

> Is it just me, or are these URL's borken?
>
> ========= hxxp://movie33.biz/video/y5hn

And now this: hxxp://movie33.biz/video/x07p

Message has been deleted

FromTheRafters

unread,
Nov 3, 2009, 9:45:53 PM11/3/09
to
"ASCII" <m...@privacy.net> wrote in message
news:4af090b7.1294515@EBCDIC...
> That one's 'borken' too

Is it another empty "watch.html" document?


David H. Lipman

unread,
Nov 4, 2009, 8:24:39 PM11/4/09
to
From: "FromTheRafters" <err...@nomail.afraid.org>

>>>> ========= hxxp://movie33.biz/video/y5hn

Yes.

Virus Guy

unread,
Nov 4, 2009, 8:41:41 PM11/4/09
to

> >>>> Is it just me, or are these URL's borken?
>
> >>>> ========= hxxp://movie33.biz/video/y5hn
>
> >>> hxxp://movie33.biz/video/x07p


========= I spanked my young sister (video)
========= hxxp://movie33.biz/video/8x57

========= My young drunk sister fucked by my friend
========= hxxp://movie33.biz/video/cj7m

I can't believe that someone is putting effort into a campaign like this
with these broken links. Perhaps the servers are looking for a specific
user-agent that we haven't given it?

David H. Lipman

unread,
Nov 4, 2009, 9:20:26 PM11/4/09
to
From: "Virus Guy" <Vi...@Guy.com>

>> >>>> ========= hxxp://movie33.biz/video/y5hn

>> >>> hxxp://movie33.biz/video/x07p

That or GEO-IP Location. ??

It's been going on for a couple of months or so and I agree, why make so many posts that
go nowhere or susequent to pages generating "Sorry! This service is disabled due to
violation of rules! " [ wed-bew.cn/1/blue-dog ].

FromTheRafters

unread,
Nov 5, 2009, 7:17:32 AM11/5/09
to
"Virus Guy" <Vi...@Guy.com> wrote in message
news:4AF22D55...@Guy.com...

...or the spamming aspect is automated and unattended. The links aren't
broken, it just seems that the ultimate target content is missing.


0 new messages