Thursday, March 5, 2015

Air Canada e-ticket Virus

Dear client,

Your online order has been successfully completed and your credit card has been charged.

FLIGHT NUMBER CX89014CA
DATE & TIME / MARCH 6rd , 14:15
DEPARTURE / Toronto
TOTAL PRICE / 450 CAD

The seat number and additional information regarding the flight can be found on the attached e-ticket.

Thank you for choosing Air Canada
e-ticket_79010838.doc

Virus analysis :

OPEN : e-ticket_79010838.doc
ANALYSIS :

ALYac Trojan.Downloader.JRLZ
AVG Generic12_c.AETQ
Ad-Aware Trojan.Downloader.JRLZ
AhnLab-V3 X97M/Downloader
Avast MO97:Downloader-LX [Trj]
Avira WM/Dldr.Agent.asdl
BitDefender Trojan.Downloader.JRLZ
CAT-QuickHeal W97M.Dropper.CK
Comodo UnclassifiedMalware
Cyren W97M/Tarbir
ESET-NOD32 VBA/TrojanDownloader.Agent.JD
Emsisoft Trojan.Downloader.JRLZ (B)
F-Prot New
F-Secure Trojan.Downloader.JRLZ
Fortinet WM/Agent!tr
GData Trojan.Downloader.JRLZ
Ikarus Trojan-Downloader.VBA.Agent
Kaspersky Trojan-Downloader.MSWord.Agent.fg
McAfee W97M/Downloader.adx
McAfee-GW-Edition W97M/Downloader.adx
MicroWorld-eScan Trojan.Downloader.JRLZ
Microsoft TrojanDownloader:O97M/Bartallex.gen
Norman DLoader.ATMLY
Panda W97M/Downloader
Sophos Troj/DocDl-GF
Symantec W97M.Downloader
TrendMicro W2KM_BARTALEX.EU
TrendMicro-HouseCall W2KM_BARTALEX.EU
nProtect Trojan.Downloader.JRLZ

Proposal for poultry and farm production

This is what i real love to invest on if i have the financial to back it up

1. Farm Management (Agricultural crops)
2. Poultry Management (Rearing Animals)

This two list is what i intend to invest which generate high profit in business. But we can do the two at a time, just one after the other. We can quick generate money back and make profit presently is Poultry and Farm Services. Poultry Management: This is what i intend to do by buying some Acres of land, build a office apartment, Build a living stock domestic building for rearing and buy some equipment for the operation. Farm Management: Getting a wide land anywhere in Nigeria for plantation of crops, buy buses for transporting the crops, build an office for staff, build Guest house for expertize from the foreign land to accommodate. And can also extend the business in west Africa like Ghana, Cameroon etc.. This two items i analyze is what i want to start up with. With this we will quick recover the start-up finance and then make big profit which we can use to invest another things.

So by God grace the proper proposal will be attached with other document about myself. Be rest assured that what you invested on will be satisfactory to your thirst. Remember this proposal is not scam, it is real business. And the rule is that the investor will have to visit to see how investment is going. please I want serious investor who want to make good money and huge profit in business and it is 100% free risk.

Thank you.
Donald
West Africa Developer Planner

moviescript2005@yahoo.com

BBB SBQ Form #5488(Ref#83-497-0-4) (BBB VIRUS)

Thank you for supporting your Better Business Bureau (BBB).

As a service to BBB Accredited Businesses, we try to ensure that the information we provide to potential customers is as accurate as possible. In order for us to provide the correct information to the public, we ask that you review the information that we have on file for your company.

We encourage you to print this SBQ Form, answer the questions and respond to us. (Adobe PDF)

Please look carefully at your telephone and fax numbers on this sheet, and let us know any and all numbers used for your business (including 800, 900, rollover, and remote call forwarding). Our automated system is driven by telephone/fax numbers, so having accurate information is critical for consumers to find information about your business easily.

Thank you again for your support, and we look forward to receiving this updated information.

Sincerely,

Accreditation Services

SBQForm07182.zip

OPEN : SBQForm07182.zip

Virus Analysis :

OPEN : SBQForm07182.zip
RESULT :

Avast Win32:Evo-gen [Susp]
CMC Packed.Win32.Katusha.3!O
ESET-NOD32 a variant of Win32/Injector.BVRZ
McAfee Downloader-FAHF!3D0C52C03CD0
Qihoo-360 HEUR/QVM19.1.Malware.Gen
Sophos Mal/Generic-S
Tencent Win32.Trojan.Inject.Auto

Email analysis :

NOTE : no-replay@bbb.com
NOTE : X-Remote : 89.120.40.73 ()
NOTE : User-Agent : Roundcube Webmail/1.1.0
NOTE : Received : from unknown (HELO bbb.com) (89.120.40.73)

Rép : Partnership Request w2

From: Mr. Robert McLauren
Auditor General,
Santander Bank.

Dear: Friend,

I am Mr. Robert McLauren, the Auditor General, Santander Bank. In the course of my auditing, I discovered a floating fund in an account, which was opened in 1990 belonging to a dead foreigner who died in 1999. I have been able to contact the Late account holder's attorney; but every effort made to track any member of his family or next of kin has since failed hence I got in contact with you to stand as his next of kin since you bear the same last name. He died leaving no heir or a will. Since his attorney is aware, you will contact his attorney since he has all the legal documents backing the fund. My intention is to transfer this sum of Five Million, Five Hundred Thousand United States Dollars only, in the aforementioned account to a safe account overseas. I am therefore proposing that you quietly partner with me and provide an account or set up a new one that will serve the purpose of receiving this fund. For your assistance in this venture, I am ready to part with a good percentage of the entire funds. We will share the funds in the proportion of 60% for you, 10% for the attorney, 20% for me and 10% will be donated to Charitable Organizations. After going through the deceased person's records and files, I discovered that:

(1) No one has operated this account since 1999.
(2) He died without an heir; hence the money has been floating.
(3) No other person knows about this account apart from the attorney and there was no known beneficiary. That is why every process has to go through the attorney.

If I do not remit this money urgently, it would be forfeited and subsequently converted to company's funds, which will benefit only the directors of my firm. This money can be approved to you legally as with all the necessary documentary approvals in your name. However, you would be required to show some proof of claim, which the attorney will provide you with and also guide you on how to make your applications. Please do give me a reply so that I can send you detailed information on the modalities of my proposition. I completely trust you to keep this proposition absolutely confidential, I look forward to your prompt response.

Best Regards,

Mr. Robert McLauren
Auditor General,
Santander Bank.

LARRY BANDA

Dear Sir/Ma

I am brokering an Investment deal in your country on behalf of a client. This deal will involve the eventual investment of US$50M. ( Fifty Million United States Dollars) within your country. I want to offer you an opportunity to be part of this profitable and life time business opportunity; offering you a partnership, so as to allow you manage and invest the funds in your country within the time frame of the investment/partnership scheme.

I've kept this proposal brief, since I cannot determine if this email is still functional and also your willingness to be part of this deal. If you are Interested in this offer of partnership, please respond and provide your current contact details, so I can send to you details of this offer.

Your expedient response will be appreciated.

Thank you

MR LARRY BANDA

E-Mail larrybanda355@gmail.com
E-Mail larrybanda@aol.com

Rép : From Howard Graham Buffett

Hi,

My name is Howard G. Buffett, A philanthropist the CEO and Chairman of the Howard G. Buffett Foundation Charitable Foundation, one of the largest private foundations in the world. I believe strongly in‘giving while living’ I had one idea that never changed in my mind — that you should use your wealth to help people and i have decided to secretly give {$1,500,000.00} One Million Five Hundred Thousand United Dollars, to randomly selected individuals worldwide. On receipt of this email, you should count yourself as the lucky individual. Your email address was chosen online while searching at random. Kindly get back to me at your earliest convenience, so I know your email address is valid.( howardgbuffett19@qq.com) Email me Visit the web page to know more about me: http://www.warrenbuffett.com/tag/howard-buffett/
or you can google me ( Howard Graham Buffett )

Your Full name________________________
Your Address_______________________
Your Country___________________________
Your Age______________________________
Your Sex_____________________________
Your Occupation________________________
Your Phone number______________________
Cell Phone Number _____________________

Warmest Regards,
Howard G. Buffett
howardgbuffett19@qq.com
Adfluke@valdosta.edu

SWIFT CREDIT CARD PAYMENT

BARRISTER LOUIS MOORE
DIRECTOR FOREIGN OPERATION
DEPARTMENT ATM CARD
ECOBANK BANK OF NIGERIA

RE: SWIFT CREDIT CARD PAYMENT

AFTER EXTENSIVE CLOSE DOOR MEETING WITH BOARD OF DIRECTORS AND OTHER STAKE HOLDERS IN THE GOVERNMENT INCLUDING SUBCOMMITTEES OF THE HOUSE OF ASSEMBLY AND THE HOUSE OF REP FEDERAL REPUBLIC OF NIGERIA. IT WAS RESOLVED AND AGREED UPON THAT YOUR FUND WOULD BE RELEASED ON A SPECIAL METHOD OF PAYMENT, BY TAG NAME READS SWIFT CREDIT CARD. THIS METHOD OF PAYMENT IS DESIGNED BY THE GOVERNMENT TO AVERT FRAUD PERPETRATION OR STOPPAGE OF FUND BY SOME AGENCIES. EITHER THROUGH ANTI TERRORIST CERTIFICATE OR OTHER CERTIFICATES. THIS SWIFT CREDIT CARD WOULD BE ISSUED TO YOU AS SOON AS YOU RESPOND TO THIS EMAIL,THIS BANK HAS BEEN MANDATED TO TAKE CHARGE OF THE ISSUANCE OF THE SWIFT CREDIT CARD AND YOUR PAYMENT FILE SHOULD BE PASSED TO MY DESK FOR CLARIFICATION. UPON CERTIFICATION THAT YOUR PAYMENT FILE IS OK, THIS OFFICE WILL DIRECT YOU ON HOW TO RECEIVE YOUR OVER DUE FUND VIA ATM SWIFT CREDIT CARD. BUT PLEASE NOTE THAT WE CANNOT BE ABLE TO PAY YOU THE FULL PAYMENT DUE TO INADEQUATE FUND, WE WILL ONLY PAY YOU THE SUM OF $5 MILLION DOLLARS AS PART PAYMENT, PLEASE BEAR WITH US AND WE PROMISE TO MAKE AN ARRANGEMENT FOR YOUR REMAINING PAYMENT IN 5MONTHS TIMEIN THE LIGHT OF THIS AFOREMENTIONED, YOU ARE REQUIRED TO FURNISH THIS OFFICE WITH THE FOLLOWING INFORMATION:

YOUR FULL NAME:
ADDRESS:
NEXT OF KIN NAME:
DATE OF BIRTH:
YOUR TELEPHONE NUMBER:

THE CARD WOULD BE ISSUED IN YOUR FAVOUR, AND ALL YOUR INFORMATION WILL BE INSERTED INTO THE CARD. UPON COMPLETION OF THIS ISSUANCE OF THE CREDIT CARD, IT WOULD BE SEND TO YOU TOGETHER WITH THE ACCESS PIN NUMBER VIA COURIER TO YOUR RESIDENTIAL ADDRESS.

www.thebanker.com/.../520/Nigerian_Banking.html

THANKS,
YOURS FAITHFULLY,
BARRISTER LOUIS MOORE.
mbarristerlouis180@gmail.com
spam@laboratorioreacao.com.br

Your Email Address Has Won £350,000 GBP

Harrods
Bank Limited
A subsidiary of Harrods Stores in Knightsbridge
87-135 Brompton Road, Knightsbridge, London, SW1X 7XL
AUTHORISED AND REGULATED BY THE FINANCIAL SERVICE AUTHORITY

Dear Email User,

This is to inform you once again that Your email address have won the sum of £350,000 GBP (Three Hundred and Fifty Thousand Great Britain Pound Sterling) in our just concluded New Year Corporate Social Responsibility (CSR) award, Which is fully based on an electronic random selection. This payment will be programmed into an Automated Teller Machine (ATM Card) powered by MasterCard and will be delivered to your contact address by courier service. You are required to confirm and forward to my desk the following important delivery information:

1. Your required name to be printed on your ATM card:
2. Your present resident delivery addresses (not P.O. box):
3. Your personal and reachable mobile phone number:

I anticipated your urgent response to this vital message.

Yours Sincerely,
Mr. Tyn Williams.
Director International Remittance

IMPORTANT: This transmission may contain information that is privileged, confidential and exempt from disclosure under applicable laws. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in it's entirety, whether it is electronic or hard copy format

info@harrods.co.uk
tyn.williamms@gmail.com

ITEMS WAITING YOUR DELIVERY

Dear Customer,

A Parcel Arrived for you Since 27th February 2015, at 15:50 GMT
***** Are you Expecting such Delivery? *******

* (We Are Having Technical Problem with the delivery and Collection detail)
Check: Below FOR CORRECTION TO THE DELIVERY DETAILS

Your Parcel will be due for Receive / Collection Within One (1) day of correction.
*** * FOR SELF PICKUP / COLLECTION, Visit our customer collection website below

Dispatch information and Tracking Number Were on our webpage HEREIN

Confirm here

Regards,

Kelvin
Delivery Officer

Phishing analysis :

CLICK : Confirm here
OPEN : http://createandprint.com.au/makemyday/wp-content/flagallery/books/webview/book8/2/Dispatching%20Full%20detail.html
SCREENSHOT :


CLICK : VIEW CORRECTION PAGE
REDIRECT : FEDEX.COM

Good Day

Hello,

Good day, I am Mr. Mark Wills a banker working with RBS London UK, I have a risk free transaction for you worth $5,000.000.00 (Five Million US Dollars) it is an abandoned fund that belongs to our late customer from India. I want us to join hands together and get this fund transferred to your account. Listen this is a 100% risk free transaction, since you will follow all my instructions and directives. if you are interested and can handle it kindly contact me with this email.

Waiting to hear from you

Regards
Mr. Mark Wills

info@XN--ISTOTICARET-P9A.NET
wllsmk49@gmail.com

Doctor's counseling can help couples deal with the emotional effects of erectile dysfunction.

Doctor's counseling can help couples deal with the emotional effects of erectile dysfunction. Everything is free for our VIP customers! Learn how to become one of them! 95% off on ly this sunday!

xpwhgebif@entercomcanada.com

Affilorama :: The #1 Affiliate Marketing Training Portal

Click Here!

Over 200,000 members since 2006!

Affilorama :: The #1 Affiliate Marketing Training Portal
Learn all the tricks
120+ video lessons full of insider tips for making money as an affiliate.

* How affiliate marketing works
* How to get started as an affiliate
* How to take your earnings to the next level.

Boost your earnings
9 essential tools especially designed to help you squeeze more money out of your site.

* Increase visitors
* Spot new opportunities
* Fix stupid mistakes before they hurt your profits.

Get tips from the pros
Get advice from other affiliates who are already making money online.

* Which products to promote
* The best strategies to follow
* Supportive & encouraging forum -- No question is too "dumb"!

Click Here!

macfran11@gmail.com
marketingnow7@bol.com.br

photo retouching introduction

We want to introduce our photo retouching/clipping path.

Here are our offerings below: photo retouching, photo clipping path, jewellery photo retouching, ecommerce products photo editing, photo cut out and masking, beauty and skin retouching, wedding photos editing. You may send us a photo for free testing to check quality. Looking foroward to receive your soonest response.

Thanks,
Jeff
Email: lovocontact@tom.com
xianbangde@sina.com

Morgan Sekou

Dear Business Investor/Entrepreneur,

I will greatly appreciate my correspondence meets you in good health condition.

My name is Mr. Morgan Sekou. I am seeking for your co-operation for investment partnership in your Country. I shall provide the FUND for the investment, When you acknowledged the receipt of this correspondence, thereafter I will give you the Full Details of my investment proposal.

I await your response in earliest.

My regards,
Mr. Morgan Sekou.
morgansekou32@she.com

Payment approval

{WORLD BANK DELEGATIONS} DEBT RECONCILIATION COMMITTEE EUROPEAN REGIONAL

REPRESENTATIVE

Attn: (Category “A” beneficiary)

APPROVED PAYMENT RELEASE NOTIFICATION OF USD10.5 MILLION DOLLARS. This is to inform you that the final clearance has been granted to you on your overdue payment by this organization together with the international debt management office London, mandate with immediate effect for the release of your long overdue contract / inheritance / winning payment voucher as a category “A” beneficiary. To this effect, we have decided to step in to regularize and settle all outstanding payments to every genuine funds beneficiary and all scammed victims, as we have arranged every payment/ transfer to be made through the HSBC Banking Group, London. However, you has been issued with the below exclusive reference number so you’re hereby advised to take note of the payment referrals code below for easy claims whenever you asked to quote your referral code: ABA / WBO / Church House / 0A02-15, as it is part of the security clearance that has been granted from the European central services depository association (Ecsda). You are therefore advised to contact the “Credit Manger, Corporate Banking Section HSBC Banking Group, London:

Mr. Andy Johnson.
Email: andyjohnson3073@gmail.com

With your banking details quoting the above reference numbers to confirm yourself as the bona fide recipient beneficiary so as to expedite the immediate clearance and release of your funds valued USD10.5 Million dollars only into your bank account. However, genuine beneficiaries are strictly advised to desist from further correspondence with other offices both local /international except on the above recommendation, contrary to the above stipulation this honorable office will not be held responsible for any misfortune. This program is a World Bank initiative in fighting the global financial crises. Be guided accordingly.

MRS. HELEN WHITE.
Legal Department, World Bank Delegations
Regional Representative U.K.

Note: remember to quote your referral code: ABA / WBO / Church House / 0A02-15

while contacting the Credit Manger, HSBC Banking Group, London:

Mr. Andy Johnson.
Email: andyjohnson3073@gmail.com