I received an email this morning stating that I had received a postcard from a family member and to click the link below to go get it. There was another address to paste into my browser if I couldn't use the link. I thought this was fishy so I went to the index page of the second url and found a legitimate site "Postcards.org". I entered the code they gave me and it was invalid. I looked at my email again and hovered over the link. The URL was completely different so I went to the index of that url and found just a directory with the one file: "postcard.gif.exe". I saved it and scanned it..found the trojan and deleted it..no damage done :):):) I'll be looking up the ISP and reporting them, but I thought I'd give you all a heads up on this in case you receive something similar. Casey >^_^< cc: all the other forums I frequent

Attached Link: http://www.postcards.org/postcards/special/aunt_edna_virus.html

That one has been going around for awhile. Postcards.org actually has a page warning about it (see link). The trojan is CoolWebSearch - a particularly nasty browser hijacker.

oh God no..not that one..I spent Months getting rid of it..it's evil incarnate..I wish the original programmer of that all the worst..

I wish I'd said that.. The Staircase Wit

anahl nathrak uth vas betude doth yel dyenvey..;)

trend housecall now has a free tool that gets rid of coolwebsearch

"I didn't lose my mind, it was mine to give away"

Good ol' Housecall 8-)

WARNING!

This user has been known to swear. A LOT!

yeah they are awesome. they do some pretty good stuff

"I didn't lose my mind, it was mine to give away"

hmm..good to know..but the last CWS removal tool got left behind...I'll have to check it out..

I wish I'd said that.. The Staircase Wit

anahl nathrak uth vas betude doth yel dyenvey..;)