Order for Sp/LLC /2015 (Virus)

Dear Sir/Madam,

It was nice to see you again. In attachment you will find the order for Sp/LLC /2015 Please first confirm the price with us. If you have any question about the changes, please ask. In attachment also the logo’s for NieZoe Woven Label new. I know the woven label NieZoe you have to take more quantity. Please let us know the quantity and price. We can use in future also.

Thank you in advance.

Met vriendelijke groet,

Best regards,

Mit Mreundlichen Krussen,
logo
Larlou Lvan Looten
Sales Manager

Nmbyerstraat Noord 162 | 6225 EJ Maastricht The Netherlands | HR14054804 VAT NL809075957B00
T 0031 43 3521470

File analysis :

SHA256 : cc4db92ec0f923c02171c746fd8417b6763257d9a2fcfd6b30818da344791ea3
Filename : Sp-LLC -2015.docx
ALYac : Gen:Variant.Kazy.679360
Ad-Aware : Gen:Variant.Kazy.679360
Arcabit : Trojan.Kazy.DA5DC0
BitDefender : Gen:Variant.Kazy.679360
DrWeb : BackDoor.Bladabindi.1056
ESET-NOD32 : a variant of MSIL/Injector.KSL
Emsisoft : Gen:Variant.Kazy.679360 (B)
F-Secure : Gen:Variant.Kazy.679360
Fortinet : MSIL/Injector.KSL!tr
GData : Gen:Variant.Kazy.679360
Kaspersky : HEUR:Trojan.Win32.Generic
MicroWorld-eScan : Gen:Variant.Kazy.679360
TrendMicro-HouseCall : TROJ_GE.856647F7

Email analysis :

NOTE : NieZoe@NieZoe.COM
NOTE : nisakorn@thai-nichi.com
NOTE : Received : from User ([UNAVAILABLE].
NOTE : [66.76.199.160]) by 0.0.0.0:25 (trex/5.4.2);

NOTE : Received : by smtp24.relay.ord1a.emailsrvr.com
NOTE : (Authenticated sender: nisakorn-AT-thai-nichi.com)

Mr.Chucks Lawson

Attn Dear Friend Good Day.

How are you today together with your family, I hope that everything is fine, I trust this mail meets you in a perfect condition. You may not understand why this mail came to you now. But if you do not remember me, you might have received an email from me last year regarding a Bank to Bank wire transfer proposal which we never concluded. I am using this medium to inform you that the Bank to Bank wire transfer business has been concluded with another person who financed it to a logical conclusion. I thank you for you're great effort to our unfinished transfer of funds into your account due to one reason or the other best known to you.

But I want to inform you that I have successfully transferred the fund out of the bank to my new partner's account in Qatar that was capable of assisting me in this great venture. Due to your effort, sincerity, courage and trustworthiness you showed during the course of the transaction I want to compensate you and show my gratitude to you with the sum of $1,700.000 USD and I left the Fund in care of my work partner who works as a manager at Western Union Office in Republic of Benin before I made my trip down here in Western Asia. I told him to be send the funds to you whenever you contact him with your full details.Western Union Agent Mr.Chucks Lawson.. contact him now for your payment, and I will advice you to ask the Western Union management what you need to do before they can allow you to receive their Western Union transfer.

Contact person: Mr.Chucks Lawson.

This is the sender's full name for the first transfer they made to you (DEBORAH ALFREDO),Ask the Western Union management to give you the MTCN (Money Transfer Control Number), Question and Answer code, to pick up transfer. from any outlet Western Union store in your city, I instructed them to keep sending you $3500 twice daily till the payment of $1,700.000 USD is completed. Again re-confirm to the Western Union management your Full Name, Telephone number and Address so that they will be sure of whom they are dealing with. For your information they can only transfer 2 parts of payments to you everyday which is $7,000. United States Dollars.

CONTACT HIM WITH YOUR FULL INFORMATION.

Full Name:--------
State:----------
City:-----------
Zip Code-------
Full Address:-------
Contact Phone:------

Try to indicate this code when contacting Western Union Management to avoid any mistake. Here is the code. (AQHoo4xx7KG) also use it as your subject. Remember without this Code they can't release any payment to you so ensure that you contact them with the Code and try to comply with their instruction. I am currently in Qatar to set up a project.Please don't forget to ask the Western Union Management what you need to do i am sure they will require a little fee from you to enable them validate your transfer file. remain bless my regards to your family.

Yours Sincerely
MR.Andy Rodriguez
Former MD Western Union Office Benin Republic.

Email analysis :

NOTE : MrChucks@blue.ocn.ne.jp
NOTE : western_union4242@qq.com
NOTE : Received : from mzcstore322.ocn.ad.jp
NOTE : (mv-osn-hcb008 [118.23.100.201]) by mv-osn-hcb008.ocn.ad.jp
NOTE : X-Originating-Ip : [41.85.176.21]

Attn:Owner Of Atm Card

Attention Owner Of Atm Card,

I have registered your ATM CARD of $6.9Million usd with a Courier Company with registration code of ( Shipment Code awb 33xzs). please Contact with your delivery information such as,

Your Name:
Your Address:
Your Telephone Number:
Your Age:

Regards,

Walter Gabriel

Email analysis :

NOTE : Attn:Owner Of Atm Card
NOTE : opwpw2@aol.com
NOTE : waltergabriel@qq.com
NOTE : Received : from HP-PC (168.1.83.70-static.reverse.softlayer.com [168.1.83.70])
NOTE : (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested)
NOTE : X-Aol-Ip : 168.1.83.70

Dane Harley

Hello,

This is Dane Harley Finance,a loan cooperate financial for real estate and any type of business financing, We offer loans to individuals, enterprises and other organizations to cooperate who need financial assistant. or have you be denied of a loan from the bank? Whether stocks down and need refinancing? Are you looking for financial assistance? I offer loan at a maximum low rate of 3%, both safe and unsecured, every interested applicant should contact us to this Email: daneharleyfinance2000@hotmail.com

First necessary information needed,

Name:
Surname:
gender:
Country:
Age:
Occupation:
The purpose of the loan
phone Number
Loan amount required as
term loan
Monthly income / annual income:

Please: After you submit your information to us, you should always endeavor to check your e-mail 2-3 times a day to read updates from us. Thank you and we look forward to working with you!

regards,
Dane Harley

Email analysis :

NOTE : daneharleyfinance2000@hotmail.com
NOTE : donaldwilson013@gmail.com

Dear Client Responds To Proceed Your Payment From Coriss Bank International !

Dear Client ,

I'm Mr. Edward Mur by name (The Chairman Treasury Federal Govt Benin Rep, I hereby to inform you in regards your duel compensated Fund valued $5,000.000.00 (Five Million US Dollars) will be transferred into your nominated Bank Account, I would advise you to contact the Director Foreign dept payment Coriss Bank International Benin Republic Mr. Micheal Antony by email send your full name, Bank details, phone numbers for them to process your fund payment transfer on your Name.

If you are interested to receive your fund, please furnish them with the following details below:

1 Your Full Name
2 Your Current Delivery Address
3 Your Confidential Phone Number
4 Copy of your ID or Drivers License
5 Occupation
6 Sex and Age
7 Marital Status

The fund offered in your name as approved by Mr President ,so Call Mr. Micheal Antony at (00229 99456773) IMMEDIATELY because a letter of approval has been granted from the President Benin Republic in supervision by Interpol police Force.

Thanks
Mr. Edward Mur

Email analysis :

NOTE : corisbk.dir.michealantony@outlook.com
NOTE : bank@themis.ocn.ne.jp
NOTE : Received : from mzcstore271.ocn.ad.jp
NOTE : (mv-osn-hkg001 [122.28.14.176]) by mv-osn-hkg001.ocn.ad.jp
NOTE : X-Originating-Ip : [41.86.234.165]

This Could be Our Best Pick Ever! (Scam sent from DoD)

Be ready for my latest pick that will multiply 248%! This is the perfect time for BLUE WATER PETROLEUM, CORP. (B WPC) as the short risks now have to be closed! Recent headlines: Blue Water amplifies its newest solution. Strength Index screams B WPC is underestimated, this can stir a huge spike on Jul 20th! Continue trading ASAP!

Email analysis :

NOTE : Received : from unknown (HELO localhost)
NOTE : (gsve@packeteer.com@164.182.92.37)

NOTE : by 82.25.203.98 with ESMTPA;
NOTE : Received : from cpc23-linc11-2-0-cust97.12-1.cable.virginm.net
NOTE : (HELO 82.25.203.98) (82.25.203.98)

NOTE : 164.182.92.37

Reflexion from Scam.cz :

Is this scam coming from DoD , and what is DoD ?

The Department of Defense (DoD, USDOD or DOD) is an executive branch department of the federal government of the United States charged with coordinating and supervising all agencies and functions of the government concerned directly with national security and the United States Armed Forces. The Department is also the largest employer in the world, with more than 2.13 million active duty servicemen and women as well as their support staff of civilian workers. Adding to the total is over 1.1 million National Guardsmen and Reservists from the four services,[b] bringing the total to just over 3.2 million employees. The Department of Defense is headed by the Secretary of Defense, a cabinet-level head who reports directly to the President of the United States. Beneath the Department of Defense are three subordinate military departments: the United States Department of the Army, the United States Department of the Navy, and the United States Department of the Air Force. In addition, four national intelligence services are subordinate to the Department of Defense: the Defense Intelligence Agency (DIA), the National Security Agency (NSA), the National Geospatial-Intelligence Agency (NGA), and the National Reconnaissance Office (NRO). Other Defense Agencies including the Defense Advanced Research Projects Agency (DARPA), the Defense Logistics Agency (DLA), the Missile Defense Agency (MDA), Defense Threat Reduction Agency (DTRA), and the Pentagon Force Protection Agency (PFPA), all of which are under the command of the Secretary of Defense. Military operations are managed by nine regional or functional Unified Combatant Commands. The Department of Defense also operates several joint services schools, including the National Defense University (NDU) and the National War College (NWC).

Is the ip 164.182.92.37 from DoD is compromised ?