<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>Strange and a worthwhile fwd if it migrates to our shores (or is already here)</div>
<div>
<div>
<p class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; ">
<font class="Apple-style-span" color="#002060" size="4"><span class="Apple-style-span" style="font-size: 16px; "><br>
</span></font></p>
<p class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; ">
<font class="Apple-style-span" color="#002060" size="4"><span class="Apple-style-span" style="font-size: 16px;"><span class="Apple-style-span" style="font-family: Calibri; font-size: xx-large; "></span></span></font></p>
<font class="Apple-style-span" color="#002060" size="4">
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 14px/normal Calibri; color: rgb(32, 73, 125); ">
...Skeeve</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 14px/normal Calibri; color: rgb(6, 32, 96); ">
</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
--</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
Skeeve Stevens, CEO - eintellego Pty Ltd - The Networking Specialists</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
skeeve@eintellego.net ; www.eintellego.net</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
Phone: 1300 753 383 ; Fax: (+612) 8572 9954</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
Cell +61 (0)414 753 383 ; skype://skeeve</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
facebook.com/eintellego or eintellego@facebook.com</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
twitter.com/networkceoau ; www.linkedin.com/in/skeeve</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
PO Box 7726, Baulkham Hills, NSW 1755 Australia</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; min-height: 15px; ">
<br>
</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
--</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
eintellego - The Experts that the Experts call</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 13px/normal Calibri; ">
- Juniper - HP Networking - Cisco - Brocade - Arista - Allied Telesis</p>
</font>
<p></p>
<font class="Apple-style-span" color="#1F497D">
<p></p>
</font>
<p></p>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div>On 2/08/11 10:55 AM, "Michael Fincham" <<a href="mailto:michael@unleash.co.nz">michael@unleash.co.nz</a>> wrote:</div>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>
<div>
<div>Hi list,</div>
<div><br>
</div>
<div>Just had a visit to our Christchurch offices from a shady guy claiming</div>
<div>"ISPs snoop on all your traffic, you should download this free, secure</div>
<div>browser" who then proceeded to hand our tech who answered the door</div>
<div>several URLs on a piece of paper.</div>
<div><br>
</div>
<div>I can't imagine a world in which the "linked" executable is anything</div>
<div>aside from a malware payload, though VirusTotal returns nothing for</div>
<div>the file, so it may be new or just creatively packed.</div>
<div><br>
</div>
<div>Here's a picture of the piece of paper given to our tech:</div>
<div><br>
</div>
<div><<a href="http://finch.am/projects/nznog/IMG_20110802_124202.jpg">http://finch.am/projects/nznog/IMG_20110802_124202.jpg</a>></div>
<div><br>
</div>
<div>The URLs on the paper are:</div>
<div><br>
</div>
<div><a href="http://www.autoprofits.smartmediaTechnologies">http://www.autoprofits.smartmediaTechnologies</a> .com</div>
<div><a href="http://www.autoprofits.smartmediaDesktop">http://www.autoprofits.smartmediaDesktop</a> .com</div>
<div><a href="http://www.autoprofits.smartmediaPays">http://www.autoprofits.smartmediaPays</a> .com</div>
<div><br>
</div>
<div>I'm happy to provide a copy of the payload for analysis and I'm sure</div>
<div>our tech could give a more thorough description of the chap if anyone</div>
<div>wants to take this further.</div>
<div><br>
</div>
<div>-- </div>
<div>-Michael Fincham</div>
<div>System Administrator, Unleash</div>
<div>www.unleash.co.nz</div>
<div>Phone: 0800 750 250</div>
<div>DDI: 03 978 1223</div>
<div>Mobile: 027 666 4482</div>
<div>_______________________________________________</div>
<div>NZNOG mailing list</div>
<div><a href="mailto:NZNOG@list.waikato.ac.nz">NZNOG@list.waikato.ac.nz</a></div>
<div><a href="http://list.waikato.ac.nz/mailman/listinfo/nznog">http://list.waikato.ac.nz/mailman/listinfo/nznog</a></div>
<div><br>
</div>
</div>
</div>
</blockquote>
</span>
</body>
</html>