Antivirus Software

  1. Home
  2. Computing & Technology
  3. Antivirus Software
photo of Mary Landesman

Mary's Antivirus Software Blog

By Mary Landesman, About.com Guide to Antivirus Software since 2000

Greeting Card Scams Foist Trojans

Tuesday April 10, 2007
Attackers are increasingly using greeting card scams to foist trojans on the unsuspecting. Fortunately, there are some tell-tale signs and tips to follow that can help you avoid becoming a victim.

Be extra suspicious if (a) the greeting card doesn't address you by name; (b) the card sender's name isn't included in the body of the email or the name isn't familiar; and (c) it's not a holiday, a birthday, or any other occasion that might warrant a card. If the card requires that you install a special viewer or tries to download a file to your system, treat it like a trojan. Cancel the download and scan your system with up to date antivirus software.

Be extra vigilant. If you receive a card from someone you know but you aren't quite sure it's legit, compose a new email to that person and ask if they sent you a card. Don't reply using the email you received - the From address just might be bogus.

Typically, the bogus greeting cards try to trick you into downloading a trojan that then tries to download other malicious files to the system. Even worse, the trojan is often cross-infected with the Parite virus. One example of a cross-infected 'greeting card' trojan is Backdoor:IRC/Zapchast.AN.

There are two victims with these greeting card scams - the user who fell for it and the legitimate greeting card company whose good name was used to trick that user. For example, there have recently been several reports of these scams pretending to be from the legitimate - and quite harmless - Bluemountain Greeting Cards site. This is not the first time Bluemountain has been caught in the crosshairs - in 1999 they were the victim of a virus hoax that also tried to discredit their name.

Comments

April 10, 2007 at 5:10 pm
(1) Jared Rimer says:

I’ve seen these in my E-mail and nod32 picked it up no problem. Haven’t opened them all though. It can be tricky to spot. Nice tips.

May 20, 2007 at 10:45 pm
(2) Tina says:

I just got the bluemountain greeting card hoax today. Complete with virus/trojan

May 20, 2007 at 10:45 pm
(3) Tina says:

I just got the bluemountain greeting card hoax today. Complete with virus/trojan

June 22, 2007 at 9:50 pm
(4) Margaret says:

I received the hoax today and since I’d just left my boyfriend to go on vacation I thought it was a legit card from him, even though the spam filter picked it up. I clicked the link and it prompted a download, which made me suspicious, so I cancelled the download. Nevertheless, my computer is now shutting itself off randomly. I have a mac… I thought macs didn’t get viruses!
I should’ve known, since my name wasn’t on the card, and if I’d read closer I would have seen the poor English contained in the message.
Does anyone have advice?

July 11, 2007 at 1:59 pm
(5) joye cantrell says:

I stupidly opened the card and now how do I get my computer safe

July 11, 2007 at 11:39 pm
(6) antivirus says:

Scan your system with up-to-date antivirus software. If you don’t already have current antivirus, there are several free antivirus scanners that work well. You should also scan with a few of the free rootkit detectors. All of these scans should be run from Safe Mode if possible.

August 3, 2007 at 8:10 am
(7) Mel says:

I received the hoax today, Microsoft would not let me open it, thank goodness! Then I got suspicious and did some research. Microsoft Phishing alert saved me!

August 16, 2007 at 9:42 am
(8) Cee Cee says:

This past week I have been receiving 5 to 10 suspicious greeting cards a day in my junk folder. Seems like a lot of activity lately

August 18, 2007 at 7:30 am
(9) TMad says:

I’ve been scammed on July 26th by the greeting card hoax and stupidly clicked on the link. I’ve downloaded and bought additional virus scans and my computer still has it on. Can’t access my Outlook. Any suggestions?

Leave a Comment

Line and paragraph breaks are automatic. Some HTML allowed: <a href="" title="">, <b>, <i>, <strike>

Discuss

Community Forum

Explore Antivirus Software

About.com Special Features

Build Your Own Website

Step-by-step advice on how to do everything from choosing a Web host to promoting your content. More >

Connect Your Home Computers

Easy ways to connect two computers for networking purposes. More >

Antivirus Software

  1. Home
  2. Computing & Technology
  3. Antivirus Software

©2009 About.com, a part of The New York Times Company.

All rights reserved.