/    Sign up×
Community /Pin to ProfileBookmark

It say script?

Copy linkTweet thisAlerts:
Jul 23.2016

Hello,

I am receiving emails from unknown vendors. In the email there is an attachment of >script< With 1×1 image pixel. I unconsciously clicked them a few times, so now I am concerned because this might be a form of scam. Do you have any idea what are these? Hope you can help me ASAP.

to post a comment
JavaScript

10 Comments(s) ↴

Copy linkTweet thisAlerts:
@rootJul 23.2016 — If it has a 1 x 1 pixel image, that image may not be embedded in the email but remote served, you could well find your computer is compromised if you do not have a firewall to protect your computer and DO NOT fool yourself in to thinking that just because you are behind a router that you are safe. You still need a firewall on the computer you are using, a router only reduces the risk, not eliminates it.
Copy linkTweet thisAlerts:
@jedaisoulJul 23.2016 — Hi, You could well have compromised your system by clicking on the attachment. Rule no 1: NEVER click on attachments to emails from an unknown source! Better still, consider setting your inbox to only accept emails from known contacts.

Anyway, you've clicked on a potentially malicious attachment, so what do you do? Well, if it is a Windows computer, go on the Microsoft site and see if there is a version of the Microsoft Malicious Software Removal Tool for your O/S. If there is, follow the instructions...
Copy linkTweet thisAlerts:
@rootJul 23.2016 — There is that too...

You will be best off downloading an anti-virus tool from a computer that has not been compromised and burn the file to a DVD NOT A USB... you could very well end up transporting a virus to any PC thereafter.

Make sure its an off-line installer, too many systems are required to be online to install, bad idea.

Install on to your PC when off line, by off line I mean you physically unplug the connection method, if its WiFi then also turn off the router.

Install and scan, if the AV you select has a deep scan option, do that, look for root kits as part of the scan, do not cheap out and do a quick scan. If the scan takes all night, so be it... When clean, reboot and then scan again but a quick scan should be fine, especially memory.

Then plug in your internet cable or turn your router back on.

A day offline won't hurt you and your absence should cause an IP refresh, if it doesn't because your IP address is static, then get your ISP to talk you through how to request one.
Copy linkTweet thisAlerts:
@Armanda_GuntrumJul 24.2016 — If it's not from someone you know, don't open it! There are lots of spam emails these days.
Copy linkTweet thisAlerts:
@TcobbJul 24.2016 — It may also be that the spammer is using the 1X1 image to verify that your email is still valid. Images are loaded after the HTML by separate GET requests. These show up as separate entries on the server logs. So, if they pair [email][email protected][/email] with an identifier, such as A44128.jpg and that appears on their logs they know that you read the email and that you are viewing it in HTML mode.

it helps the scum maintain the "purity" of their spamming lists.
Copy linkTweet thisAlerts:
@Nicola_SeabrookauthorJul 25.2016 — I appreciate everything you all said and I promise that I would take your advice. Anyway, is it 100 percent sure that this is a form of spam? My friend told me there is nothing to worry about because I can manage it through a software? He also said it is Java script error? TY again
Copy linkTweet thisAlerts:
@rootJul 26.2016 — Maybe so BUT.

The pixel is as stated often used to verify a valid email address but it is more often used to harvest your IP address, of the hack forums I go to, thats the number one use for them, IP addresses are more useful to a hacker than an email address and spammers are more than likely hackers who want both your IP address and your email address.

Do not ever underestimate what people can and try to do online, your computer will hold valuable information about you that can be used for fraudulent use and even if you don't think you have anything of use, you will.

I can say that despite my knowledge of the internet and practical experience, I have been targeted three times over the past 18 years and its only in the last 3 years that I have had problems, I definitely slipped up 2 years ago by forgetting my 3 tier login rule and signed up to a website (not naming names) and the admin accessed the personal information, namely email address and password (yes forums like vBulletin store your password in plain text) and then my paypal account started getting hits.

This week was another hack, I have yet to go post mortem on it as I am even struggling to work out the pinhole but £80 was taken in on line transactions, the bank won't tell me anything other than they know that I didn't make those transactions..!

It takes very little these days because of this connectivity between social media plug ins and a cavalier approach by both user and social media to accessing your information, I guess it was a site that used a social media plug in that was point of entry, it could have been facebook and one of the many gizmos that through a well meaning friend added me to a list of people to contact or their friends list was raped by one of these pieces of software.

All I can say is even the best and knowledgeable can fall over from time to time, because of the network administration training I have, I do have a better insight in to what and how things can happen as security is one aspect of that and even I have fallen on to my own sword. Never ever underestimate what people can do and get up to online.

I keep all my money operations on separate emails and passwords, always have, same for facebook & co, so this last issue with the bank is something I am trying to work out how, people are, despite how nice they may be to you online should be kept at arms length unless you do know and have met them in the physical world. I have many social media friends, even old school friends are treated no different because of the length of time, it takes very little information to start things going, this is why I am reconsidering if this latest hack is someone I know on social media and question if I slipped up somewhere, for example, I stated a fact and someone disputed that fact that was a verifiable fact, they then quickly boiled down in to demanding I apologise for something I never said or did and this person was someone on a friends friends list and next thing I know is this person who is unknown to me is posting up a picture of my sons home... Me and my ex-partner are not friended, she doesn't know anyone of that username and I wonder if that hack comes from that point in time some months ago...

I can not state enough, you can't trust people or their intentions should never be seen or taken as good and that very few people are genuine.

Good Luck.
Copy linkTweet thisAlerts:
@jedaisoulJul 26.2016 — The simple solution I use is:

1. Never join any social media.

2. If I have to give out my email address, use one that is not my main account.

3. Never "reply all" to emails without vetting the cc and bc lists.

Perhaps that sounds like a return to the stone age, but it works!
Copy linkTweet thisAlerts:
@rootJul 26.2016 — The simple solution I use is:[/QUOTE]

Ummm, web forums are social maybe not seen as such but all Zuccerberg did was merge a couple of ideas and created a ogglers site for juveniles grading women, luckily it turned in to something not so sexist and grew up a bit.

In any case, separation of email addresses, it is important.
Copy linkTweet thisAlerts:
@TrainJul 26.2016 — My cleaners. Clean up tool list.

[color=Blue][b]Malwarebytes Anti-Malware[/b][/color] (MBAM)

[b]AdwCleaner[/b] by Xplode

[URL=http://downloads.malwarebytes.org/file/jrt][color=Blue][b]Junkware Removal Tool[b][/color][/URL]



Download [URL=http://oldtimer.geekstogo.com/TFC.exe][B]Temp File Cleaner (TFC)[/B][/URL]

Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe



[list]
  • [*]Double click on [B]TFC.exe[/B] to run the program.

  • [*]Click on [B]Start[/B] button to begin cleaning process.

  • [*]TFC will close all running programs, and it [B]may[/B] ask you to restart computer.

    • [/list]

    Download [url=http://downloads.sophos.com/tools/withides/Sophos%20Virus%20Removal%20Tool.exe][b]Sophos Free Virus Removal Tool[/b][/url]
    ×

    Success!

    Help @Nicola_Seabrook spread the word by sharing this article on Twitter...

    Tweet This
    Sign in
    Forgot password?
    Sign in with TwitchSign in with GithubCreate Account
    about: ({
    version: 0.1.9 — BETA 5.4,
    whats_new: community page,
    up_next: more Davinci•003 tasks,
    coming_soon: events calendar,
    social: @webDeveloperHQ
    });

    legal: ({
    terms: of use,
    privacy: policy
    });
    changelog: (
    version: 0.1.9,
    notes: added community page

    version: 0.1.8,
    notes: added Davinci•003

    version: 0.1.7,
    notes: upvote answers to bounties

    version: 0.1.6,
    notes: article editor refresh
    )...
    recent_tips: (
    tipper: @Yussuf4331,
    tipped: article
    amount: 1000 SATS,

    tipper: @darkwebsites540,
    tipped: article
    amount: 10 SATS,

    tipper: @Samric24,
    tipped: article
    amount: 1000 SATS,
    )...