1 Reply Latest reply on Oct 16, 2011 11:11 AM by ComputerVet

    Spam mails from http://pdfnewdownload.com/

    jj2006b

      Hello,

       

      I regularly get mails from newversion@adobe.com and newsletter@adobe.com redirecting me via http://url.paymentsave.com/?l=fhMu340 to http://pdfnewdownload.com/

       

      The text of the mails is for example:

      The PDF format (Portable Document Format) is a global exchange document   created by Adobe and is the most popular, reliable and recognized   international standard for viewing and managing electronic documents in   the world. Take advantage of robust tools for sharing information and   electronic files. This version also offers enhanced performance with   faster loading and zooming, expanded device compatibility, and extended   application support for files attached to PDF documents.

       

      Then there is a link sending me to http://pdfnewdownload.com/, which is quite obviously for the not-so-average computer user a scam page.

      Google seems unaware of such mails, so my question: Does Adobe know about it, and is there a way to stop these guys spamming me?

       

      Thanks,

      jj

        • 1. Re: Spam mails from http://pdfnewdownload.com/
          ComputerVet

          I have received similar messages in past but have not been able to determine the validity of them.  I have been advising customers to keep the free Adobe reader updated and am concerned that they might respond to an e-mail such as the one below.  It would be nice if there was an official Adobe site where you could check out emails that appear to be from Adobe to determine if they were legitimate. I would think that Adobe would be concerned if it is a fake.  While this requires a click response, we do get popups indicating Adobe Reader needs to be free.  How long until this is duplicated to deliver malware?

           

          • The latest one header information was:

          From: Adobe [mailto:newsletter@adobe.com]           <<< implies was from Adobe
          Sent: Saturday, October 15, 2011 9:38 AM
          To: michaelroder@att.net
          Subject: Ds
          Importance: High

           

          • It looks like it was actually from Received: from quyet2 (50-57-146-190.static.cloud-ips.com[50.57.146.190](untrusted sender)). When I do an IP trace it is named: 50-57-146-190.static.cloud-ips.com, which sounds like a advertising outfit to me.
          • When I view Options in Outlook 2003 I get the following.  If you look at the body the link is to http://paymentsave.com.

             

            X-Apparently-To: michaelroder@att.net via 69.147.92.120; Sat, 15 Oct 2011 06:38:00 -0700
            X-YahooFilteredBulk: 50.57.146.190
            Received-SPF: permerror (encountered permanent error during SPF processing of domain of adobe.com)
            X-YMailISG: wEoJeRwWLDuVJbS2TvuRY7u8hGIkFCFhuhruI5XmGzXfhoa1
            OtPlGaNaXNdEGB1fv1AJD1ylYbUaKfN7xLrHX9kc6GqLmE1ZQblj63a57Jc3
            5SVreoyqtAMOBPZTqIa.4wL1PPgdTEhhg1WdK_aBPXk_2x6wGGVtLTFTBQYC
            L_f1J47ejgfmFvMm2k9QnLh8MiZ902ki2zWzVEeVMz8GEOIvyYfnOzGvIiKC
            polj.uy2HEZzboMDVHm3a6raXWaI9N4nO3Bnk.KdbW6wZLL2ty_2CS6WSFWH
            9S47DyGPEKlgDlNMUOqv9tADAUYdUqnR78bi5lGGLBmyYCEIzw07FKl4hKq3
            ShFz
            X-Originating-IP: [50.57.146.190]
            Authentication-Results: mta1005.sbc.mail.mud.yahoo.com  from=adobe.com; domainkeys=neutral (no sig);  from=adobe.com; dkim=neutral (no sig)
            Received: from 12.102.248.83  (EHLO sccwmxc03.att.net) (12.102.248.83)
              by mta1005.sbc.mail.mud.yahoo.com with SMTP; Sat, 15 Oct 2011 06:37:57 -0700
            Received: from quyet2 (50-57-146-190.static.cloud-ips.com[50.57.146.190](untrusted sender))
                      by att.net (sccwmxc03) with ESMTP
                      id <20111015133758s0300n8qufe>; Sat, 15 Oct 2011 13:37:58 +0000
            X-Originating-IP: [50.57.146.190]
            Received: from administrator ([127.0.0.1]) by quyet2 with Microsoft SMTPSVC(7.0.6001.18000);
              Sat, 15 Oct 2011 13:37:56 +0000
            From: "Adobe" <newsletter@adobe.com>
            To: michaelroder@att.net
            Subject: Ds
            X-Mailer: Microsoft Outlook Express 6.00.2600.0000
            Reply-To: newsletter@adobe.com
            Date: Sat, 15 Oct 2011 13:37:56 -0000
            Mime-Version: 1.0
            Content-Type: text/html; charset=us-ascii
            Message-ID: <quyet2IIcwS28IPufed0001ef3d@quyet2>
            X-OriginalArrivalTime: 15 Oct 2011 13:37:56.0770 (UTC) FILETIME=[A5CBD020:01CC8B3F]


          <HTML lang=en><HEAD><TITLE>Payment Save .,Coltd</TITLE>
          <META content="text/html; charset=utf-8" http-equiv=Content-Type>
          <STYLE type=text/css>
          TABLE {
          LINE-HEIGHT: 20px; FONT-FAMILY: Arial, sans-serif; COLOR: #575757; FONT-SIZE: 12px
          }
          A {
          COLOR: #3279bb; TEXT-DECORATION: underline
          }
          UL {
          PADDING-LEFT: 16px; MARGIN-LEFT: 0px
          }
          OL {
          PADDING-LEFT: 25px; MARGIN-LEFT: 0px
          }
          H1 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 20px
          }
          H2 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 15px
          }
          H3 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 14px
          }
          H4 {
          FONT-FAMILY: Arial, sans-serif; COLOR: #000000; FONT-SIZE: 12px
          }
          .text-align-center {
          TEXT-ALIGN: center
          }
          .text-align-right {
          TEXT-ALIGN: right
          }
          .img-left-aligned {
          MARGIN-TOP: 5px; MARGIN-BOTTOM: 5px; MARGIN-RIGHT: 20px
          }
          .img-right-aligned {
          MARGIN-TOP: 5px; MARGIN-BOTTOM: 5px; MARGIN-LEFT: 20px
          }
          .bordered-right {
          BORDER-RIGHT: #d6d6d6 1px solid
          }
          .bordered-bottom {
          BORDER-BOTTOM: #d6d6d6 1px solid
          }
          .view-browser {
          COLOR: #999999
          }
          .view-browser A {
          COLOR: #999999; TEXT-DECORATION: underline
          }
          .ourwebsite {
          LINE-HEIGHT: 16px
          }
          .header-picture {
          BORDER-BOTTOM: #eeeeee 5px solid; BORDER-LEFT: #cccccc 0px solid; DISPLAY: block; BORDER-TOP: #cccccc 0px solid; BORDER-RIGHT: #cccccc 0px solid
          }
          .main-content-wrap {
          BORDER-BOTTOM: #dddddd 0px solid; BORDER-LEFT: #dddddd 0px solid; BACKGROUND-COLOR: #ffffff; BORDER-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER-TOP: #dddddd 10px solid; BORDER-RIGHT: #dddddd 0px solid
          }
          .copyright {
          COLOR: #999999
          }
          .copyright A {
          COLOR: #999999; TEXT-DECORATION: underline
          }
          .copyright B {

          }
          .style1 {
          color: #0000CC;
          font-size: 20px;
          }
          .style5 {font-weight: bold; color: #333333;}
          .style6 {font-weight: bold; color: #FF0000;}
          </STYLE>

          <META name=GENERATOR content="MSHTML 8.00.7601.17537"></HEAD>
          <BODY leftMargin=0 scroll=yes topMargin=0 bgColor=#4c535c offset="0" marginheight="0" marginwidth="0"><!-- wrapper table -->
          <TABLE cellSpacing=0 cellPadding=0 width="100%" bgColor=#4c535c>
          <TBODY>
          <TR>
          <TD><BR>
          <TABLE cellSpacing=0 cellPadding=0 width=600 align=center>
          <TBODY>
          <TR>
          <TD class="view-browser" vAlign=top align=middle>Email not displaying correctly? <A href="View" _mce_href="http://url.paymentsave.com/?l=fhMu340">View">http://url.paymentsave.com/?l=fhM u340">View it in your browser.</A> </TD></TR></TBODY></TABLE><BR><!-- main content wrap -->
          <TABLE class="main-content-wrap" border=0 rules=none cellSpacing=0 cellPadding=0 width=660 bgColor=#ffffff frame=border align=center>
          <TBODY>
          <TR>
          <TD><!-- header picture  --><IMG class="header-picture" alt="" src="http://paymentsave.com/newsletter/images/top.jpg" width=660 height=194> <!-- end header picture --><IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-660x15.gif" width=660 height=15> <IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-660x31.gif" width=660 height=31> <!-- content -->
          <TABLE cellSpacing=0 cellPadding=0 width=600 align=center>
          <TBODY>
          <TR>
          <TD vAlign=top><!-- main newsletter content here -->
          <H3><strong>Download the NEW PDF Reader Now!</strong></H3>
          <IMG style="FLOAT: right; MARGIN-LEFT: 20px" alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/right.jpg">
          <P>Download the best software to View, Open, Share and Print PDF<br>
          documents. The PDF format as a global exchange document format<br>
          and is by far the most efficient way to exchange information - Get<br>
          the New and Improved 2011 Version..</P>
          <P><span class="style1"><span class="style5">The Ultimate PDF Software Pack to </span><br>
              <span class="style6">Open, Read and Share PDF files online!</span></span></P>
          <IMG style="FLOAT: left; MARGIN-RIGHT: 10px" alt="" src="http://paymentsave.com/newsletter/NewFeatures.JPG">
          <H3>New Features in PDF Reader:</H3>
          <P>Search, Open &amp; Share PDF files Online<br>
            50% faster startup than previous versions<br>
            Search &amp; save online Internet content<br>
            New menus and improved user interface<br>
            Search single or multiple PDF files<br>
            24/7 expert customer support<br>
            Safe install - No spyware or adware</P>
          <IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-600x31.gif" width=600 height=31>
          <P style="TEXT-ALIGN: center"><A href="http://url.paymentsave.com/?l=rq374"><IMG style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; BORDER-TOP: medium none; BORDER-RIGHT: medium none" alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/order.jpg"></A>
          <H3></H3>
          <P></P></TD></TR></TBODY></TABLE><IMG alt="" src="http://paymentsave.com/newsletter/pdf-pro2011/images/module-divider-660x15.gif" width=660 height=20> </TD></TR></TBODY></TABLE><!-- end main content wrap --><BR>
          <TABLE cellSpacing=0 cellPadding=0 width=600 align=center>
          <TBODY>
          <TR>
          <TD class="copyright" vAlign=top align=middle>2011 <B></B>- All rights reserved. </TD></TR></TBODY></TABLE><BR><BR><BR></TD></TR></TBODY></TABLE><!-- end wrapper table--></BODY>
          </HTML>