Warning!: blockdelete.com- Protect Your Ass!

By
Those nasty spammers have apparently reappeared, using a private domain registration through GoDaddy.

What they do is capture your Windows Live Messenger credentials under the ruse that they will show you all your blocked contacts (which is easy enough to do yourself with libraries like DotMsn - without the security risks).

What they don't tell you is that if you do this, your account is now compromised -- and they'll send every one of your contacts a message (since it's your credentials, it appears from you, a trusted contact) that tells you to go visit their site and sucker for it too. There's only one solution if you suckered for it - you have to change your Live.com password immediately.

Just look at this:

"The longly[sic] awaited feature for MSN Messenger, completely for free[sic]!"

When you click on their Privacy page link, you get nada! What a scam. Unfortunately, from reading the newsgroup and forum posts, it appears that thousands of people are getting suckered for this social engineering scam from these total scumbags.

I'm seriously considering complaining to Google about this, because the bastards have a Google Adsense ad at the bottom of their page. Clearly a violation of Google's TOS. If enough people complain, Google will ban them and they'll have no financial incentive any longer. Incidentally, Google has recently begun actually soliciting reports of "bad" web sites. The form to do it is here. You can also visit Stop Badware, a consumer protection site sponsored by Google and other major firms.

We live in a dangerous world. Even cyberspace is dangerous. Protect Your Ass.

Getting the right client-side ID for ASP.NET Controls

This is really simple stuff, but judging by the number of forum and newsgroup posts I've seen asking the same question over and over again, it may not be very obvious to many newer developers: The ASP.NET infrastructure "mangles" control ID's based on the container hierarchy they are in. So for example if you have a Master Page and a Page that uses it, and you put a TextBox "TextBox1" on it, that's not what you'll get at the client side in the browser. So any javascript you write that is looking for "TextBox1" will fail. Here's the correct way to ensure that your script won't fail:

Peter has been active on the C# and other MS newsgroups, has had samples at gotdotnet.com (now codegallery.com) that have been downloaded over 56,000 times, and has written numerous articles for eggheadcafe.com, for which he is a co-founder, and MSDNAA sites. He has also been a technical reviewer on books from Prentice Hall, Manning and other publishers. Peter was a Microsoft MVP for 10 years. Peter was born and raised in New York City, and after a stint as a jazz musician playing contrabass with the Robert Hunt Trio, migrated to sunny Florida, where he was hired as a rookie Financial Consultant at Merrill Lynch in Orlando, specializing in Corporate Services. It was at Merrill that Peter realized computers and technology were his forte. He spent his last few years at Merrill developing real – time computerized trading and and stock charting program using advanced technical analysis indicators, some of which are his own inventions. In 1997, he moved on to architect and serve as lead developer on a number of innovative web-based and middleware solutions for the healthcare and financial services industry.

Comments

  1. Anonymous3:39 PM

    I gave up MSN a while ago (forced upgrade), so I haven't came across this, but should definitely rat them out to Google. Punks.

    I'm gonna write a bot that spots bots and clots their shots.

    ReplyDelete
  2. Anonymous4:16 PM

    I fell the trap. Now my email is disable. I email support@hotmail.com and wait the reply from them. Hopefully i get a reply soon.

    Please let me know if you know how I can get my account back.

    ReplyDelete
  3. Anonymous10:23 PM

    My wife got hit with this today. I thought we had a virus and was looking for it like crazy and coming up with nothing until I read you post.

    Thanks for the info - I did have her change her msn password right away as it did appear that she her account was hacked.

    I will be sending a complaint to google for sure.

    I am going to re-blog this on my site if you don't mind!

    Cheers and thanks for the great post.

    ReplyDelete
  4. Anonymous11:09 AM

    thanx for the heads up =]
    my friend has it and its really annoying coz the hack or whatever it is keeps signing her in and sending the link to everyone on her list then it signs her back off...my other friend said that SUPERAntiSpyware got rid of it..So if any of you guys want to download it you can get it from here: http://www.superantispyware.com/download.html
    make sure you get the free version =]

    ReplyDelete
  5. Anonymous2:48 AM

    yeah i had a friends account sent me this link and i hope he will spread word(like i asked) to the people in his contact list.....gosh there are a lot of little red flags all over the page

    ReplyDelete
  6. Jamie Boyle4:32 AM

    Your right!

    Lots of people have been caught in this Block Delete scam. I have seen lots of Blogs posting like you about BlockDelete.com and sharing information to people so we can stop these spammers.

    I know there are other domain names that redirect to Block Delete as well. One is Free-Offers-For-You.com another one I seen is Dont-Miss-This.com

    The only thing is this person will keep changing its domain names but hopefully more and more people will learn about this and stop this guy. The bad thing about it is that it only takes one person to fall for this Block Delete scam and there he has access to all their contacts. Block Delete.com really has like a viral effect.

    I hate these spammers and hope we can try and put a stop to this.

    ReplyDelete
  7. Anonymous11:29 AM

    Dont forget they is more to watch out for here a list www.clicktoforyou.com is BAD it leads to www.blockdelete.com witch is a robot that spams all your contacts in MSN and WindowLive and say: ( See who blocked you on msn ) asked you for user name and password and spams you emails for credit card numbers and other important inforamation and spams all your friends another others that lead to this is( http://www.yedekiz.info ) (http://www.yidiztasi.info)(http://www.alfadenyei.info)http://www.arkanawebzine.info)(http://www.agirsilah.info)(http:www.cayirkurdu.info)(http://www.etkinbasinc.info)(http://www.cazli.info)http://www.boyamagucu.info)(http//:www.newmarketadditives.info)(http//:www.bukleli.info) there is just afew that i got in the last 2 days Grrrr not happy spamming me with a mobile device what can be done to stop this ???

    ReplyDelete

Post a Comment

Popular posts from this blog

Some observations on Script Callbacks, "AJAX", "ATLAS" "AHAB" and where it's all going.

By
I've taken a more than cursory interest in the whole Remote Scripting (.NET species) vs. AJAX and now ATLAS discussion, mostly because I started using Remote Scripting since Microsoft first released it, and because I continued to refine it after seeing Brent Ashley's excellent work with JSRS, which was one of the first "real" cross-browser solutions back in 2000 (that's the turn of the Century for you history buffs). Now Bertrand Leroy, a Microsoft guy whose work I like , has authored some very interesting ASP.NET 2.0 script callback stuff that he points to on his blog, and he is obviously (at least, to me he is) involved quite heavily in the development of this new ATLAS infrastructure that they'll preview at PDC. Leroy's most recent post brings to the surface what I agree are the major differences between the "AJAX a - la .NET" approach as popularized by Michael Swartz with his AJAX.NET library, and Leroy's RefreshPanel, the ASP.NET 2.0 b...
Read more

IE7 - Vista: "Internet Explorer has stopped Working"

By
Image
This one was a bitch. All of a sudden for no reason at all, out of the blue, I get this dialog "internet Explorer has stopped working". I didn't install any new software, crap- I didn't do anything! So here I am using FIREFART to go on the internet and find out what to do! Damn! Good thing I've got the sucker on the same machine (I'm not "anti-Firefox", i just don't use it that much except to check my page renderings). The Fix The fix (at least for me): 1) Go into Control Panel, and choose "Internet Options". 2) Under the "Advanced" tab, press the "RESET" button at the lower right: Don't ask me why this happens, or why the fix works. That's a BUG, D00D - I don't care how you slice it!
Read more

FIREFOX / IE Word-Wrap, Word-Break, TABLES FIX

By
One of the most annoying things a developer (who would normally delight in writing code, not futzing with markup) can have is getting rendering issues between different browsers. The two biggest players are of course Internet Exploder and Firefart (as I lovingly like to refer to each). In most cases that's going to take care of 98 percent of your total site traffic. IE has had a proprietary "word-break" style attribute for a long time, and this made it into the CSS 3.0 spec. But that doesn't necessarily help you with Firefox right now. Firefox literally - (and I consider this completely idiotic, since it's been in their bug database for FIVE YEARS) does not have a reliable CSS style element to force table cell content to break in the middle of a word in order to stop the content from expanding your table / div off the page or over other content on the page. Here's a partial fix, which will work for most tables and browsers. The style declaration (I call it m...
Read more

System.Web.Caching.Cache, HttpRuntime.Cache, and IIS Recycles

By
Recently I chimed in on a newsgroup thread to an OP (Original Poster) who was questioning why he was losing Cache items. This individual would load a dataset from the Cache object into a local object to use to perform processing. He had been using httpcontext.current.cache and noticed that sometimes he was not able to get the dataset out of the cache. He tried switching to HttpRuntime.Cache and it seemed to help. The OP claimed that the application is under heavy hits, and once or twice every month he would see this error. He wanted to know why does the HttpContext.Current.Cache call work sometimes, while some other times does not. A couple of posters replied, one of whom is a respected MVP who usually makes very astute, high-quality posts. He posted," The cache is only valid during the life of the request. how is you[sic] code using the cache?" Somebody else (also pretty astute, usually) responded, "Cache is valid during lifetime of application not request.....". W...
Read more

FIX: Requested Registry Access is not allowed (Visual Studio 2008)

By
Symptom: in Visual Studio 2008, you attempt to add a new WebContentForm and associate it with a MasterPage. You receive an error dialog "Requested Reqistry Access is not allowed". Don't ask me what caused this; I'm guessing that the registry keys involved had their access denied due to removal of a previous version of Visual Studio, leaving the new guy (Visual Studio 2008) in the lurch. Here's the fix: Download "subinacl" here . This is a command-line tool that enables administrators to obtain security information about files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain. After installing subinacl.exe (it will be in the C:\Program Files\Windows Resource Kits\Tools folder.), drop to a command prompt and run the following batch file, which you have saved in the same folder with the filename "FIX.bat": subinacl /subkeyreg HKEY_CLASSES_ROOT\VisualStudi...
Read more