Postcard.gif.exe

Posted March 1, 2009 

Postcard.gif.exe is a nasty Trojan that comes in an email titled “You have received a virtual postcard!”.

Scammers love sending fake e-cards as it is a very efficient way of infecting someones computer. I’ve seen enough of them come through where I work as people seem to let their guard down as soon as they see that they have been sent an e-card.

According to 411-Spyware, “You have received a virtual postcard!” says:

You have just received a virtual greeting from a family member!
You can pick up your postcard at the following web address: clicking the link below:
http://www.postcards1001.com/?a91-valets-cloud-187
If you can’t click on the web address above, you can also visit E-Greetings at http://www.postcards1001.com/ and enter your pickup code, which is: a91-valets-cloud-187
(Your postcard will be available for 60 days.)

Notice how the email says it’s from Hallmark but the link goes to postcards1001.com. This is the biggest clue that this is fake e-card. If you ever receive an e-card, place your cursor over the link and see where it goes. Read the link carefully as scammers will use names like “Hallllmark” that you that you might miss at first glance.

Above all, do not install any software if you are asked. You mostly need Flash to view these cards and you will most likely already have it on your computer.

If you have opened “You have received a virtual postcard” and run Postcard.gif.exe, you will need a program like Spyware Doctor to remove Postcard.gif.exe off your machine.

Popularity: 4% [?]