1 Reply Latest reply on Oct 16, 2011 11:11 AM by ComputerVet

    Spam mails from http://pdfnewdownload.com/




      I regularly get mails from newversion@adobe.com and newsletter@adobe.com redirecting me via http://url.paymentsave.com/?l=fhMu340 to http://pdfnewdownload.com/


      The text of the mails is for example:

      The PDF format (Portable Document Format) is a global exchange document   created by Adobe and is the most popular, reliable and recognized   international standard for viewing and managing electronic documents in   the world. Take advantage of robust tools for sharing information and   electronic files. This version also offers enhanced performance with   faster loading and zooming, expanded device compatibility, and extended   application support for files attached to PDF documents.


      Then there is a link sending me to http://pdfnewdownload.com/, which is quite obviously for the not-so-average computer user a scam page.

      Google seems unaware of such mails, so my question: Does Adobe know about it, and is there a way to stop these guys spamming me?




        • 1. Re: Spam mails from http://pdfnewdownload.com/

          I have received similar messages in past but have not been able to determine the validity of them.  I have been advising customers to keep the free Adobe reader updated and am concerned that they might respond to an e-mail such as the one below.  It would be nice if there was an official Adobe site where you could check out emails that appear to be from Adobe to determine if they were legitimate. I would think that Adobe would be concerned if it is a fake.  While this requires a click response, we do get popups indicating Adobe Reader needs to be free.  How long until this is duplicated to deliver malware?


          • The latest one header information was:

          From: Adobe [mailto:newsletter@adobe.com]           <<< implies was from Adobe
          Sent: Saturday, October 15, 2011 9:38 AM
          To: michaelroder@att.net
          Subject: Ds
          Importance: High


          • It looks like it was actually from Received: from quyet2 (50-57-146-190.static.cloud-ips.com[](untrusted sender)). When I do an IP trace it is named: 50-57-146-190.static.cloud-ips.com, which sounds like a advertising outfit to me.
          • When I view Options in Outlook 2003 I get the following.  If you look at the body the link is to http://paymentsave.com.


            X-Apparently-To: michaelroder@att.net via; Sat, 15 Oct 2011 06:38:00 -0700
            Received-SPF: permerror (encountered permanent error during SPF processing of domain of adobe.com)
            X-YMailISG: wEoJeRwWLDuVJbS2TvuRY7u8hGIkFCFhuhruI5XmGzXfhoa1
            X-Originating-IP: []
            Authentication-Results: mta1005.sbc.mail.mud.yahoo.com  from=adobe.com; domainkeys=neutral (no sig);  from=adobe.com; dkim=neutral (no sig)
            Received: from  (EHLO sccwmxc03.att.net) (
              by mta1005.sbc.mail.mud.yahoo.com with SMTP; Sat, 15 Oct 2011 06:37:57 -0700
            Received: from quyet2 (50-57-146-190.static.cloud-ips.com[](untrusted sender))
                      by att.net (sccwmxc03) with ESMTP
                      id <20111015133758s0300n8qufe>; Sat, 15 Oct 2011 13:37:58 +0000
            X-Originating-IP: []
            Received: from administrator ([]) by quyet2 with Microsoft SMTPSVC(7.0.6001.18000);
              Sat, 15 Oct 2011 13:37:56 +0000
            From: "Adobe" <newsletter@adobe.com>
            To: michaelroder@att.net
            Subject: Ds
            X-Mailer: Microsoft Outlook Express 6.00.2600.0000
            Reply-To: newsletter@adobe.com
            Date: Sat, 15 Oct 2011 13:37:56 -0000
            Mime-Version: 1.0
            Content-Type: text/html; charset=us-ascii
            Message-ID: <quyet2IIcwS28IPufed0001ef3d@quyet2>
            X-OriginalArrivalTime: 15 Oct 2011 13:37:56.0770 (UTC) FILETIME=[A5CBD020:01CC8B3F]

          <HTML lang=en><HEAD><TITLE>Payment Save .,Coltd</TITLE>
          <META content="text/html; charset=utf-8" http-equiv=Content-Type>
          <STYLE type=text/css>
          TABLE {
          LINE-HEIGHT: 20px; FONT-FAMILY: Arial, sans-serif; COLOR: #575757; FONT-SIZE: 12px
          A {
          COLOR: #3279bb; TEXT-DECORATION: underline
          UL {
          PADDING-LEFT: 16px; MARGIN-LEFT: 0px
          OL {
          PADDING-LEFT: 25px; MARGIN-LEFT: 0px
          H1 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 20px
          H2 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 15px
          H3 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 14px
          H4 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 12px
          .text-align-center {
          TEXT-ALIGN: center
          .text-align-right {
          TEXT-ALIGN: right
          .img-left-aligned {
          MARGIN-TOP: 5px; MARGIN-BOTTOM: 5px; MARGIN-RIGHT: 20px
          .img-right-aligned {
          MARGIN-TOP: 5px; MARGIN-BOTTOM: 5px; MARGIN-LEFT: 20px
          .bordered-right {
          BORDER-RIGHT: #d6d6d6 1px solid
          .bordered-bottom {
          BORDER-BOTTOM: #d6d6d6 1px solid
          .view-browser {
          COLOR: #999999
          .view-browser A {
          COLOR: #999999; TEXT-DECORATION: underline
          .ourwebsite {
          LINE-HEIGHT: 16px
          .header-picture {
          BORDER-BOTTOM: #eeeeee 5px solid; BORDER-LEFT: #cccccc 0px solid; DISPLAY: block; BORDER-TOP: #cccccc 0px solid; BORDER-RIGHT: #cccccc 0px solid
          .main-content-wrap {
          BORDER-BOTTOM: #dddddd 0px solid; BORDER-LEFT: #dddddd 0px solid; BACKGROUND-COLOR: #ffffff; BORDER-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER-TOP: #dddddd 10px solid; BORDER-RIGHT: #dddddd 0px solid
          .copyright {
          COLOR: #999999
          .copyright A {
          COLOR: #999999; TEXT-DECORATION: underline
          .copyright B {

          .style1 {
          color: #0000CC;
          font-size: 20px;
          .style5 {font-weight: bold; color: #333333;}
          .style6 {font-weight: bold; color: #FF0000;}

          <META name=GENERATOR content="MSHTML 8.00.7601.17537"></HEAD>
          <BODY leftMargin=0 scroll=yes topMargin=0 bgColor=#4c535c offset="0" marginheight="0" marginwidth="0"><!-- wrapper table -->
          <TABLE cellSpacing=0 cellPadding=0 width="100%" bgColor=#4c535c>
          <TABLE cellSpacing=0 cellPadding=0 width=600 align=center>
          <TD class="view-browser" vAlign=top align=middle>Email not displaying correctly? <A href="View" _mce_href="http://url.paymentsave.com/?l=fhMu340">View">http://url.paymentsave.com/?l=fhM u340">View it in your browser.</A> </TD></TR></TBODY></TABLE><BR><!-- main content wrap -->
          <TABLE class="main-content-wrap" border=0 rules=none cellSpacing=0 cellPadding=0 width=660 bgColor=#ffffff frame=border align=center>
          <TD><!-- header picture  --><IMG class="header-picture" alt="" src="http://paymentsave.com/newsletter/images/top.jpg" width=660 height=194> <!-- end header picture --><IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-660x15.gif" width=660 height=15> <IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-660x31.gif" width=660 height=31> <!-- content -->
          <TABLE cellSpacing=0 cellPadding=0 width=600 align=center>
          <TD vAlign=top><!-- main newsletter content here -->
          <H3><strong>Download the NEW PDF Reader Now!</strong></H3>
          <IMG style="FLOAT: right; MARGIN-LEFT: 20px" alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/right.jpg">
          <P>Download the best software to View, Open, Share and Print PDF<br>
          documents. The PDF format as a global exchange document format<br>
          and is by far the most efficient way to exchange information - Get<br>
          the New and Improved 2011 Version..</P>
          <P><span class="style1"><span class="style5">The Ultimate PDF Software Pack to </span><br>
              <span class="style6">Open, Read and Share PDF files online!</span></span></P>
          <IMG style="FLOAT: left; MARGIN-RIGHT: 10px" alt="" src="http://paymentsave.com/newsletter/NewFeatures.JPG">
          <H3>New Features in PDF Reader:</H3>
          <P>Search, Open &amp; Share PDF files Online<br>
            50% faster startup than previous versions<br>
            Search &amp; save online Internet content<br>
            New menus and improved user interface<br>
            Search single or multiple PDF files<br>
            24/7 expert customer support<br>
            Safe install - No spyware or adware</P>
          <IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-600x31.gif" width=600 height=31>
          <P style="TEXT-ALIGN: center"><A href="http://url.paymentsave.com/?l=rq374"><IMG style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; BORDER-TOP: medium none; BORDER-RIGHT: medium none" alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/order.jpg"></A>
          <P></P></TD></TR></TBODY></TABLE><IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-660x15.gif" width=660 height=20> </TD></TR></TBODY></TABLE><!-- end main content wrap --><BR>
          <TABLE cellSpacing=0 cellPadding=0 width=600 align=center>
          <TD class="copyright" vAlign=top align=middle>2011 <B></B>- All rights reserved. </TD></TR></TBODY></TABLE><BR><BR><BR></TD></TR></TBODY></TABLE><!-- end wrapper table--></BODY>